SUSE-IU-2025:1561-1: Security update of suse/sl-micro/6.1/kvm-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.1/kvm-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2025:1561-1
Image Tags        : suse/sl-micro/6.1/kvm-os-container:2.2.0 , suse/sl-micro/6.1/kvm-os-container:2.2.0-4.49 , suse/sl-micro/6.1/kvm-os-container:latest
Image Release     : 4.49
Severity          : important
Type              : security
References        : 1200528 1217070 1221400 1224323 1228553 1231698 1234812 1240366
                        CVE-2022-1996 CVE-2023-45142 CVE-2023-45288 CVE-2023-47108 CVE-2024-40896
                        CVE-2024-9676 CVE-2025-27587 
-----------------------------------------------------------------

The container suse/sl-micro/6.1/kvm-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 146
Released:    Fri Jun 13 12:48:33 2025
Summary:     Security update for openssl-3
Type:        security
Severity:    moderate
References:  1231698,1240366,CVE-2024-9676,CVE-2025-27587
This update for openssl-3 fixes the following issues:

- CVE-2025-27587: Fixed Minerva side channel vulnerability in P-384 (bsc#1240366)

-----------------------------------------------------------------
Advisory ID: 147
Released:    Fri Jun 13 12:50:10 2025
Summary:     Security update for libxml2
Type:        security
Severity:    important
References:  1200528,1217070,1221400,1224323,1228553,1234812,CVE-2022-1996,CVE-2023-45142,CVE-2023-45288,CVE-2023-47108,CVE-2024-40896
This update for libxml2 fixes the following issues:

- CVE-2024-40896: Fixed XXE vulnerability (bsc#1234812) 


The following package changes have been done:

- libxml2-2-2.11.6-slfo.1.1_5.1 updated
- libopenssl3-3.1.4-slfo.1.1_5.1 updated
- SL-Micro-release-6.1-slfo.1.11.37 updated
- container:SL-Micro-base-container-2.2.0-4.50 updated