SUSE-CU-2025:7148-1: Security update of suse/sle-micro-rancher/5.4

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sle-micro-rancher/5.4
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:7148-1
Container Tags        : suse/sle-micro-rancher/5.4:5.4.4.5.64 , suse/sle-micro-rancher/5.4:latest
Container Release     : 4.5.64
Severity              : important
Type                  : security
References            : 1250232 1250373 CVE-2025-41244 CVE-2025-9230 
-----------------------------------------------------------------

The container suse/sle-micro-rancher/5.4 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:3435-1
Released:    Tue Sep 30 16:09:33 2025
Summary:     Security update for open-vm-tools
Type:        security
Severity:    important
References:  1250373,CVE-2025-41244
This update for open-vm-tools fixes the following issues:

- CVE-2025-41244: local privilege escalation via the Service Discovery Plugin (bsc#1250373).

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:3437-1
Released:    Tue Sep 30 16:36:42 2025
Summary:     Security update for openssl-1_1
Type:        security
Severity:    important
References:  1250232,CVE-2025-9230
This update for openssl-1_1 fixes the following issues:

- CVE-2025-9230: incorrect check of key size can lead to out-of-bounds read and write in RFC 3211 KEK unwrap
  (bsc#1250232).
  

The following package changes have been done:

- libopenssl1_1-1.1.1l-150400.7.84.1 updated
- libvmtools0-13.0.0-150300.64.1 updated
- open-vm-tools-13.0.0-150300.64.1 updated
- openssl-1_1-1.1.1l-150400.7.84.1 updated