gpp_maybe
Security update for flannel
openSUSE-2026-149
This update for flannel fixes the following issues: - Update to version 0.28.4: * fix go version (don't set patch version) (#2428) * Bump flannel-cni-plugin to v1.9.1-flannel1 (#2427) * Bump the other-go-modules group across 1 directory with 3 updates (#2425) * Bump the tencent group with 2 updates (#2417) * Bump the etcd group with 4 updates (#2398), includes fix for CVE-2026-33413 (boo#1260853) and CVE-2026-33343 (boo#1260847) * Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 (#2420) * Bump go to 1.25 (#2424) * Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 * Bump docker/build-push-action from 7.0.0 to 7.1.0 * Bump docker/login-action from 4.0.0 to 4.1.0 * Verify the kubectl sha256sum * Secure makefile (#2414) * Improve the security of Dockerfile * Bump github/codeql-action from 4.34.1 to 4.35.1 (#2409) * Bump actions/deploy-pages from 4.0.5 to 5.0.0 * lease: only print BackendData when json.Marshal succeeds * vxlan: delete v6 direct route with correct Route struct * fix: honor --stderrthreshold flag when --logtostderr is enabled * Bump actions/configure-pages from 5.0.0 to 6.0.0 * Bump actions/setup-go from 6.3.0 to 6.4.0 * don't use unquoted shell vars in extensions backend example * Don't use shell invocations in extensions backend. * Bump google.golang.org/grpc from 1.71.1 to 1.79.3 * Bump ossf/scorecard-action from 2.4.1 to 2.4.3 * Bump actions/upload-artifact from 4.6.1 to 7.0.0 * Bump docker/metadata-action from 5.10.0 to 6.0.0 * Bump actions/checkout from 4.2.2 to 6.0.2 * Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 * Bump aquasecurity/trivy-action from 0.33.1 to 0.35.0 * Bump docker/setup-qemu-action from 3.7.0 to 4.0.0 * [StepSecurity] Apply security best practices * Bump actions/attest-build-provenance from 3.2.0 to 4.1.0 * Fix logic in AddBlackholeV4Route and AddBlackholeV6Route to correctly check for existing routes * Added check for nftables before checking br_netfilter module * Bump golang.org/x/crypto from 0.36.0 to 0.45.0 * Bump k8s deps to v0.32.10 * Bump golang-ci-lint to v2.7.2 * Bump golangci/golangci-lint-action from 6.1.1 to 9.2.0 * Additional check on podCIDR * ip: improve primary address selection to account for address flags * Added TAG to fix bin version
-
Release DateApr 23 2026
-
References
-
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Package Hub 15.7 x86_64
-
Packagesflannel
An etcd backed network fabric for containersflannel-k8s-yaml0.28.4-bp157.2.6.1 lock rpm
Kubernetes yaml file to run flannel container0.28.4-bp157.2.6.1 lock rpm
SUSE Package Hub 15.7 aarch64
-
Packagesflannel
An etcd backed network fabric for containersflannel-k8s-yaml0.28.4-bp157.2.6.1 lock rpm
Kubernetes yaml file to run flannel container0.28.4-bp157.2.6.1 lock rpm
SUSE Package Hub 15.7 s390x
-
Packagesflannel
An etcd backed network fabric for containersflannel-k8s-yaml0.28.4-bp157.2.6.1 lock rpm
Kubernetes yaml file to run flannel container0.28.4-bp157.2.6.1 lock rpm
SUSE Package Hub 15.7 ppc64le
-
Packagesflannel
An etcd backed network fabric for containersflannel-k8s-yaml0.28.4-bp157.2.6.1 lock rpm
Kubernetes yaml file to run flannel container0.28.4-bp157.2.6.1 lock rpm