SUSE-IU-2025:9-1: Security update of suse/sl-micro/6.0/base-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.0/base-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2025:9-1
Image Tags        : suse/sl-micro/6.0/base-os-container:2.1.3 , suse/sl-micro/6.0/base-os-container:2.1.3-4.32 , suse/sl-micro/6.0/base-os-container:latest
Image Release     : 4.32
Severity          : moderate
Type              : security
References        : 1233078 1234068 CVE-2024-10963 CVE-2024-11053 
-----------------------------------------------------------------

The container suse/sl-micro/6.0/base-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 164
Released:    Mon Jan  6 11:11:02 2025
Summary:     Security update for pam
Type:        security
Severity:    moderate
References:  1233078,CVE-2024-10963
This update for pam fixes the following issues:

- CVE-2024-10963: Fixed improper hostname interpretation in pam_access that could lead to access control bypass (bsc#1233078).

-----------------------------------------------------------------
Advisory ID: 166
Released:    Mon Jan  6 11:20:47 2025
Summary:     Security update for curl
Type:        security
Severity:    moderate
References:  1234068,CVE-2024-11053
This update for curl fixes the following issues:

- CVE-2024-11053: Fixed password leak used for the first host to the followed-to host under certain circumstances (bsc#1234068)


The following package changes have been done:

- pam-1.6.0-4.1 updated
- SL-Micro-release-6.0-24.39 updated
- libcurl4-8.6.0-5.1 updated
- curl-8.6.0-5.1 updated
- container:suse-toolbox-image-1.0.0-6.78 updated