SUSE-IU-2026:2461-1: Security update of suse/sl-micro/6.1/baremetal-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.1/baremetal-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:2461-1
Image Tags        : suse/sl-micro/6.1/baremetal-os-container:2.2.1 , suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.95 , suse/sl-micro/6.1/baremetal-os-container:latest
Image Release     : 7.95
Severity          : important
Type              : security
References        : 1084929 1252376 1253542 1253993 CVE-2025-31133 CVE-2025-47913
                        CVE-2025-47914 CVE-2025-52565 CVE-2025-52881 
-----------------------------------------------------------------

The container suse/sl-micro/6.1/baremetal-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 506
Released:    Thu Apr 23 14:24:25 2026
Summary:     Security update for podman
Type:        security
Severity:    important
References:  1084929,1252376,1253542,1253993,CVE-2025-31133,CVE-2025-47913,CVE-2025-47914,CVE-2025-52565,CVE-2025-52881
This update for podman fixes the following issues:

- CVE-2025-31133,CVE-2025-52565,CVE-2025-52881: Container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1252376).
- CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253542).
- CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds read (bsc#1253993).


The following package changes have been done:

- SL-Micro-release-6.1-slfo.1.12.33 updated
- podman-5.4.2-slfo.1.1_4.1 updated
- container:SL-Micro-base-container-2.2.1-5.119 updated