SUSE-IU-2025:3880-1: Recommended update of suse/sl-micro/6.1/baremetal-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.1/baremetal-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2025:3880-1
Image Tags        : suse/sl-micro/6.1/baremetal-os-container:2.2.1 , suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.36 , suse/sl-micro/6.1/baremetal-os-container:latest
Image Release     : 7.36
Severity          : moderate
Type              : recommended
References        : 1254362 
-----------------------------------------------------------------

The container suse/sl-micro/6.1/baremetal-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 349
Released:    Thu Dec 11 09:59:32 2025
Summary:     Recommended update for runc
Type:        recommended
Severity:    moderate
References:  1254362
This update for runc fixes the following issues:

- Update to runc v1.3.4 (bsc#1254362)
- libct: fix mips compilation:
    * When configuring a tmpfs mount, only set the mode= argument if the
      target path already existed.
    * Fix various file descriptor leaks and add additional tests to detect them as
      comprehensively as possible.
- Downgrade github.com/cyphar/filepath-securejoin dependency to v0.5.2,
  which should make it easier for some downstreams to import runc without
  pulling in too many extra packages.
- The runc binary distributed with this release are statically linked with the following 
  GNU LGPL-2.1 licensed libraries, with runc acting as a 'work that uses the Library':
     * libseccomp: The versions of these libraries were not modified from their upstream versions


The following package changes have been done:

- runc-1.3.4-slfo.1.1_1.1 updated