This update for warewulf4 fixes the following issues:
Changes in warewulf4:
- updated go-jose to fix CVE-2026-34986 (bsc#1262810)
- chi is fixed in the upstream project
- updating to v4.7.0 with following security fixes
* fixed CVE-2026-39821 (bsc#1266483)
* fixed CVE-2026-33814 (bsc#1265653)
- v4.7.0 with significant changes relative to the v4.6.x series which are:
* New wwctl unset command
* Refactored server routes (URLs)
* New /files/ route for serving individual files and templates
* Server TLS support
* Removed support for fetching individual overlays and individual files from overlays
* Fixed whitespace handling around template functions
* Security fixes, including updated Go and library versions
- changes from v4.6.5:
* new wwctl overlay info command
* fixed wwctl image import --update option
* cross-arch support for wwclient
* improved IPv6 support
* improved support for bonded interfaces
* renamed debian.interfaces overlay to ifupdown
* new...
Read the Full Advisory- openSUSE Leap 16.0:
warewulf4-4.7.0-bp160.1.1
warewulf4-dracut-4.7.0-bp160.1.1
warewulf4-man-4.7.0-bp160.1.1
warewulf4-overlay-4.7.0-bp160.1.1
warewulf4-overlay-rke2-4.7.0-bp160.1.1
warewulf4-reference-doc-4.7.0-bp160.1.1
* bsc#1254470
* bsc#1258511
* bsc#1262810
* bsc#1265653
* bsc#1266483
References:
* https://www.suse.com/security/cve/CVE-2025-58058.html
* https://www.suse.com/security/cve/CVE-2025-69725.html
* https://www.suse.com/security/cve/CVE-2026-33814.html
* https://www.suse.com/security/cve/CVE-2026-34986.html
* https://www.suse.com/security/cve/CVE-2026-39821.html
Get the latest Linux and open source security news straight to your inbox.