SUSE-IU-2025:743-1: Security update of suse/sl-micro/6.0/kvm-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.0/kvm-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2025:743-1
Image Tags        : suse/sl-micro/6.0/kvm-os-container:2.1.3 , suse/sl-micro/6.0/kvm-os-container:2.1.3-5.10 , suse/sl-micro/6.0/kvm-os-container:latest
Image Release     : 5.10
Severity          : moderate
Type              : security
References        : 1235151 1236588 1236590 CVE-2025-0167 CVE-2025-0725 
-----------------------------------------------------------------

The container suse/sl-micro/6.0/kvm-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 239
Released:    Wed Mar 12 11:47:54 2025
Summary:     Security update for curl
Type:        security
Severity:    moderate
References:  1235151,1236588,1236590,CVE-2025-0167,CVE-2025-0725
This update for curl fixes the following issues:

Security issues fixed:

- CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590)
- CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588)

Other issues fixed:

- Make sure the TLS handshake after a successful STARTTLS command
  is fully done before further sending/receiving on the connection.  (bsc#1235151)


The following package changes have been done:

- SL-Micro-release-6.0-25.6 updated
- libcurl4-8.6.0-6.1 updated
- container:SL-Micro-base-container-2.1.3-5.10 updated