SUSE-IU-2025:2254-1: Security update of suse/sl-micro/6.0/baremetal-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.0/baremetal-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2025:2254-1
Image Tags        : suse/sl-micro/6.0/baremetal-os-container:2.1.3 , suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.65 , suse/sl-micro/6.0/baremetal-os-container:latest
Image Release     : 6.65
Severity          : important
Type              : security
References        : 1243226 1243767 CVE-2025-5278 CVE-2025-6018 
-----------------------------------------------------------------

The container suse/sl-micro/6.0/baremetal-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 401
Released:    Tue Jul 29 16:09:33 2025
Summary:     Security update for pam-config
Type:        security
Severity:    important
References:  1243226,CVE-2025-6018
This update for pam-config fixes the following issues:

- CVE-2025-6018: Stop adding pam_env in AUTH stack, and be sure to put this module at the
  really end of the SESSION stack. (bsc#1243226)

-----------------------------------------------------------------
Advisory ID: 405
Released:    Thu Jul 31 11:41:53 2025
Summary:     Security update for coreutils
Type:        security
Severity:    moderate
References:  1243767,CVE-2025-5278
This update for coreutils fixes the following issues:

- CVE-2025-5278: Fixed heap buffer under-read ledaing to a 
  crash or leak sensitive data (bsc#1243767)


The following package changes have been done:

- coreutils-9.4-5.1 updated
- pam-config-2.11-2.1 updated
- container:SL-Micro-base-container-2.1.3-7.34 updated