Update CVE scans reports - 2026-01-17

Author: rancher-security-team[bot]

docs/csv/report-observability-agent-v1.2-dev-cves.csv

@@ -1,7 +1,7 @@
 image,release,package_name,package_version,type,vulnerability_id,severity,url,target,patched_version,mirrored,status,justification
 quay.io/stackstate/stackstate-k8s-agent:b85512ad,observability-agent/v1.2-dev,pg8000,1.10.1,python-pkg,CVE-2025-61385,HIGH,https://avd.aquasec.com/nvd/cve-2025-61385,Python,1.31.5,false,affected,
 quay.io/stackstate/stackstate-k8s-agent:b85512ad,observability-agent/v1.2-dev,protobuf,3.20.2,python-pkg,CVE-2025-4565,HIGH,https://avd.aquasec.com/nvd/cve-2025-4565,Python,"4.25.8, 5.29.5, 6.31.1",false,affected,
-quay.io/stackstate/stackstate-k8s-agent:b85512ad,observability-agent/v1.2-dev,setuptools,70.0.0.post20260115,python-pkg,CVE-2025-47273,HIGH,https://avd.aquasec.com/nvd/cve-2025-47273,Python,78.1.1,false,affected,
+quay.io/stackstate/stackstate-k8s-agent:b85512ad,observability-agent/v1.2-dev,setuptools,70.0.0.post20260116,python-pkg,CVE-2025-47273,HIGH,https://avd.aquasec.com/nvd/cve-2025-47273,Python,78.1.1,false,affected,
 quay.io/stackstate/stackstate-k8s-agent:b85512ad,observability-agent/v1.2-dev,urllib3,1.26.19,python-pkg,CVE-2025-66418,HIGH,https://avd.aquasec.com/nvd/cve-2025-66418,Python,2.6.0,false,affected,
 quay.io/stackstate/stackstate-k8s-agent:b85512ad,observability-agent/v1.2-dev,urllib3,1.26.19,python-pkg,CVE-2025-66471,HIGH,https://avd.aquasec.com/nvd/cve-2025-66471,Python,2.6.0,false,affected,
 quay.io/stackstate/stackstate-k8s-agent:b85512ad,observability-agent/v1.2-dev,urllib3,1.26.19,python-pkg,CVE-2026-21441,HIGH,https://avd.aquasec.com/nvd/cve-2026-21441,Python,2.6.3,false,affected,

docs/csv/report-rancher-head-cves.csv

@@ -3375,16 +3375,16 @@ rancher/local-path-provisioner:v0.0.32,rancher/head,stdlib,v1.24.4,gobinary,CVE-
 rancher/local-path-provisioner:v0.0.32,rancher/head,stdlib,v1.24.4,gobinary,CVE-2025-58183,HIGH,https://avd.aquasec.com/nvd/cve-2025-58183,usr/bin/local-path-provisioner,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_present
 rancher/local-path-provisioner:v0.0.32,rancher/head,stdlib,v1.24.4,gobinary,CVE-2025-61724,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61724,usr/bin/local-path-provisioner,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_in_execute_path
 rancher/local-path-provisioner:v0.0.32,rancher/head,stdlib,v1.24.4,gobinary,CVE-2025-61725,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61725,usr/bin/local-path-provisioner,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_present
-rancher/machine:v0.15.0-rancher137,rancher/head,stdlib,v1.24.7,gobinary,CVE-2025-58183,LOW,https://avd.aquasec.com/nvd/cve-2025-58183,usr/local/bin/rancher-machine,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
-rancher/machine:v0.15.0-rancher137,rancher/head,stdlib,v1.24.7,gobinary,CVE-2025-61729,HIGH,https://avd.aquasec.com/nvd/cve-2025-61729,usr/local/bin/rancher-machine,"1.24.11, 1.25.5",false,affected,
-rancher/machine:v0.15.0-rancher137,rancher/head,stdlib,v1.24.7,gobinary,CVE-2025-47912,HIGH,https://avd.aquasec.com/nvd/cve-2025-47912,usr/local/bin/rancher-machine,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
-rancher/machine:v0.15.0-rancher137,rancher/head,stdlib,v1.24.7,gobinary,CVE-2025-58188,HIGH,https://avd.aquasec.com/nvd/cve-2025-58188,usr/local/bin/rancher-machine,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
-rancher/machine:v0.15.0-rancher137,rancher/head,stdlib,v1.24.7,gobinary,CVE-2025-61727,HIGH,https://avd.aquasec.com/nvd/cve-2025-61727,usr/local/bin/rancher-machine,"1.24.11, 1.25.5",false,affected,severity_changed_due_to_suse_cvss_score
-rancher/machine:v0.15.0-rancher137,rancher/head,github.com/golang-jwt/jwt/v4,v4.5.0,gobinary,CVE-2025-30204,HIGH,https://avd.aquasec.com/nvd/cve-2025-30204,usr/local/bin/rancher-machine,4.5.2,false,not_affected,vulnerable_code_not_in_execute_path
-rancher/machine:v0.15.0-rancher137,rancher/head,golang.org/x/crypto,v0.42.0,gobinary,CVE-2025-47914,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-47914,usr/local/bin/rancher-machine,0.45.0,false,not_affected,vulnerable_code_not_present
-rancher/machine:v0.15.0-rancher137,rancher/head,golang.org/x/crypto,v0.42.0,gobinary,CVE-2025-58181,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-58181,usr/local/bin/rancher-machine,0.45.0,false,not_affected,vulnerable_code_not_in_execute_path
-rancher/machine:v0.15.0-rancher137,rancher/head,stdlib,v1.24.7,gobinary,CVE-2025-61724,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61724,usr/local/bin/rancher-machine,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_in_execute_path
-rancher/machine:v0.15.0-rancher137,rancher/head,stdlib,v1.24.7,gobinary,CVE-2025-61725,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61725,usr/local/bin/rancher-machine,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_present
+rancher/machine:v0.15.0-rancher138,rancher/head,stdlib,v1.24.7,gobinary,CVE-2025-58183,LOW,https://avd.aquasec.com/nvd/cve-2025-58183,usr/local/bin/rancher-machine,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
+rancher/machine:v0.15.0-rancher138,rancher/head,stdlib,v1.24.7,gobinary,CVE-2025-61729,HIGH,https://avd.aquasec.com/nvd/cve-2025-61729,usr/local/bin/rancher-machine,"1.24.11, 1.25.5",false,affected,
+rancher/machine:v0.15.0-rancher138,rancher/head,stdlib,v1.24.7,gobinary,CVE-2025-47912,HIGH,https://avd.aquasec.com/nvd/cve-2025-47912,usr/local/bin/rancher-machine,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
+rancher/machine:v0.15.0-rancher138,rancher/head,stdlib,v1.24.7,gobinary,CVE-2025-58188,HIGH,https://avd.aquasec.com/nvd/cve-2025-58188,usr/local/bin/rancher-machine,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
+rancher/machine:v0.15.0-rancher138,rancher/head,stdlib,v1.24.7,gobinary,CVE-2025-61727,HIGH,https://avd.aquasec.com/nvd/cve-2025-61727,usr/local/bin/rancher-machine,"1.24.11, 1.25.5",false,affected,severity_changed_due_to_suse_cvss_score
+rancher/machine:v0.15.0-rancher138,rancher/head,github.com/golang-jwt/jwt/v4,v4.5.0,gobinary,CVE-2025-30204,HIGH,https://avd.aquasec.com/nvd/cve-2025-30204,usr/local/bin/rancher-machine,4.5.2,false,not_affected,vulnerable_code_not_in_execute_path
+rancher/machine:v0.15.0-rancher138,rancher/head,golang.org/x/crypto,v0.42.0,gobinary,CVE-2025-47914,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-47914,usr/local/bin/rancher-machine,0.45.0,false,not_affected,vulnerable_code_not_present
+rancher/machine:v0.15.0-rancher138,rancher/head,golang.org/x/crypto,v0.42.0,gobinary,CVE-2025-58181,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-58181,usr/local/bin/rancher-machine,0.45.0,false,not_affected,vulnerable_code_not_in_execute_path
+rancher/machine:v0.15.0-rancher138,rancher/head,stdlib,v1.24.7,gobinary,CVE-2025-61724,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61724,usr/local/bin/rancher-machine,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_in_execute_path
+rancher/machine:v0.15.0-rancher138,rancher/head,stdlib,v1.24.7,gobinary,CVE-2025-61725,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61725,usr/local/bin/rancher-machine,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_present
 rancher/mirrored-bci-busybox:15.6.24.2,rancher/head,glibc,2.38-150600.14.5.1,sles,SUSE-SU-2025:01702-1,HIGH,,rancher/mirrored-bci-busybox:15.6.24.2 (sles 15.6),2.38-150600.14.32.1,true,affected,
 rancher/mirrored-bci-micro:15.6.24.2,rancher/head,glibc,2.38-150600.14.5.1,sles,SUSE-SU-2025:01702-1,HIGH,,rancher/mirrored-bci-micro:15.6.24.2 (sles 15.6),2.38-150600.14.32.1,true,affected,
 rancher/mirrored-calico-apiserver:v3.29.3,rancher/head,golang.org/x/crypto,v0.36.0,gobinary,CVE-2025-47914,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-47914,code/apiserver,0.45.0,true,not_affected,vulnerable_code_not_present

docs/csv/report-rancher-head-stats.csv

@@ -94,7 +94,7 @@ rancher/klipper-lb:v0.4.13,0,0,0
 rancher/kube-api-auth:v0.2.5,0,3,3
 rancher/local-path-provisioner:v0.0.31,0,6,6
 rancher/local-path-provisioner:v0.0.32,0,4,4
-rancher/machine:v0.15.0-rancher137,0,4,4
+rancher/machine:v0.15.0-rancher138,0,4,4
 rancher/mirrored-bci-busybox:15.6.24.2,0,1,1
 rancher/mirrored-bci-micro:15.6.24.2,0,1,1
 rancher/mirrored-calico-apiserver:v3.29.3,0,0,0

docs/index.html

@@ -24,7 +24,7 @@
 </style>
 </head>
 <body class="index">
-<h1>SUSE Rancher - CVE Scans - 2026-01-16</h1>
+<h1>SUSE Rancher - CVE Scans - 2026-01-17</h1>
 
 <h2>How to use this page</h2>
 

docs/observability-agent-v1.2-dev.html

@@ -101,7 +101,7 @@ <h3>How to use this page</h3>
 <td>false</td>
 <td>Observability agent v1.2 dev</td>
 <td>Python</td>
-<td>setuptools@70.0.0.post20260115</td>
+<td>setuptools@70.0.0.post20260116</td>
 <td><a href="https://www.suse.com/security/cve/CVE-2025-47273.html">CVE-2025-47273</a></td>
 <td>HIGH</td>
 <td>affected</td>

docs/rancher-head.html

@@ -9829,7 +9829,7 @@ <h3>How to use this page</h3>
 <td>gobinary</td>
 </tr>
 <tr class="issue">
-<td>rancher/machine:v0.15.0-rancher137</td>
+<td>rancher/machine:v0.15.0-rancher138</td>
 <td>false</td>
 <td>Rancher head</td>
 <td>usr/local/bin/rancher-machine</td>
@@ -9841,7 +9841,7 @@ <h3>How to use this page</h3>
 <td>gobinary</td>
 </tr>
 <tr class="issue">
-<td>rancher/machine:v0.15.0-rancher137</td>
+<td>rancher/machine:v0.15.0-rancher138</td>
 <td>false</td>
 <td>Rancher head</td>
 <td>usr/local/bin/rancher-machine</td>
@@ -9853,7 +9853,7 @@ <h3>How to use this page</h3>
 <td>gobinary</td>
 </tr>
 <tr class="issue">
-<td>rancher/machine:v0.15.0-rancher137</td>
+<td>rancher/machine:v0.15.0-rancher138</td>
 <td>false</td>
 <td>Rancher head</td>
 <td>usr/local/bin/rancher-machine</td>
@@ -9865,7 +9865,7 @@ <h3>How to use this page</h3>
 <td>gobinary</td>
 </tr>
 <tr class="issue">
-<td>rancher/machine:v0.15.0-rancher137</td>
+<td>rancher/machine:v0.15.0-rancher138</td>
 <td>false</td>
 <td>Rancher head</td>
 <td>usr/local/bin/rancher-machine</td>
@@ -9877,7 +9877,7 @@ <h3>How to use this page</h3>
 <td>gobinary</td>
 </tr>
 <tr class="issue">
-<td>rancher/machine:v0.15.0-rancher137</td>
+<td>rancher/machine:v0.15.0-rancher138</td>
 <td>false</td>
 <td>Rancher head</td>
 <td>usr/local/bin/rancher-machine</td>
@@ -59498,7 +59498,7 @@ <h3>How to use this page</h3>
 <td>gobinary</td>
 </tr>
 <tr class="issue not_affected">
-<td>rancher/machine:v0.15.0-rancher137</td>
+<td>rancher/machine:v0.15.0-rancher138</td>
 <td>false</td>
 <td>Rancher head</td>
 <td>usr/local/bin/rancher-machine</td>
@@ -59510,7 +59510,7 @@ <h3>How to use this page</h3>
 <td>gobinary</td>
 </tr>
 <tr class="issue not_affected">
-<td>rancher/machine:v0.15.0-rancher137</td>
+<td>rancher/machine:v0.15.0-rancher138</td>
 <td>false</td>
 <td>Rancher head</td>
 <td>usr/local/bin/rancher-machine</td>
@@ -59522,7 +59522,7 @@ <h3>How to use this page</h3>
 <td>gobinary</td>
 </tr>
 <tr class="issue not_affected">
-<td>rancher/machine:v0.15.0-rancher137</td>
+<td>rancher/machine:v0.15.0-rancher138</td>
 <td>false</td>
 <td>Rancher head</td>
 <td>usr/local/bin/rancher-machine</td>
@@ -59534,7 +59534,7 @@ <h3>How to use this page</h3>
 <td>gobinary</td>
 </tr>
 <tr class="issue not_affected">
-<td>rancher/machine:v0.15.0-rancher137</td>
+<td>rancher/machine:v0.15.0-rancher138</td>
 <td>false</td>
 <td>Rancher head</td>
 <td>usr/local/bin/rancher-machine</td>
@@ -59546,7 +59546,7 @@ <h3>How to use this page</h3>
 <td>gobinary</td>
 </tr>
 <tr class="issue not_affected">
-<td>rancher/machine:v0.15.0-rancher137</td>
+<td>rancher/machine:v0.15.0-rancher138</td>
 <td>false</td>
 <td>Rancher head</td>
 <td>usr/local/bin/rancher-machine</td>