SUSE-CU-2025:2149-1: Recommended update of suse/cosign

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/cosign
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:2149-1
Container Tags        : suse/cosign:2 , suse/cosign:2.4 , suse/cosign:2.4.0 , suse/cosign:2.4.0-8.39 , suse/cosign:latest
Container Release     : 8.39
Severity              : moderate
Type                  : recommended
References            : 1236779 1237294 
-----------------------------------------------------------------

The container suse/cosign was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2025:1035-1
Released:    Thu Mar 27 10:34:01 2025
Summary:     Recommended update for suse-build-key
Type:        recommended
Severity:    moderate
References:  1236779,1237294
This update for suse-build-key fixes the following issues:

- Changed and extented the SUSE Linux Enterprise 15 and 16 signing keys to use
  SHA256 GPG UIDs instead of SHA1. (bsc#1237294 bsc#1236779 jsc#PED-12321)
  - gpg-pubkey-3fa1d6ce-67c856ee.asc to gpg-pubkey-09d9ea69-67c857f3.asc
  - gpg-pubkey-09d9ea69-645b99ce.asc to gpg-pubkey-3fa1d6ce-63c9481c.asc
  - suse_ptf_key_2023.asc, suse_ptf_key.asc: adjusted


The following package changes have been done:

- suse-build-key-12.0-150000.8.58.1 updated