SUSE-IU-2026:5606-1: Security update of suse/sl-micro/6.2/kvm-os-container
sle-container-updates at lists.suse.com
sle-container-updates at lists.suse.com
Fri Jul 10 07:50:24 UTC 2026
SUSE Image Update Advisory: suse/sl-micro/6.2/kvm-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:5606-1
Image Tags : suse/sl-micro/6.2/kvm-os-container:2.3.1 , suse/sl-micro/6.2/kvm-os-container:2.3.1-8.45 , suse/sl-micro/6.2/kvm-os-container:latest
Image Release : 8.45
Severity : important
Type : security
References : 1268402 1268407 1268409 1268413 1268415 1268416 1268417 1268420
1268422 1268427 CVE-2026-10536 CVE-2026-12064 CVE-2026-8286 CVE-2026-8458
CVE-2026-8924 CVE-2026-8927 CVE-2026-9079 CVE-2026-9080 CVE-2026-9545
CVE-2026-9547
-----------------------------------------------------------------
The container suse/sl-micro/6.2/kvm-os-container was updated. The following patches have been included in this update:
-----------------------------------------------------------------
Advisory ID: 1187
Released: Wed Jul 8 15:46:40 2026
Summary: Security update for curl
Type: security
Severity: important
References: 1268402,1268407,1268409,1268413,1268415,1268416,1268417,1268420,1268422,1268427,CVE-2026-10536,CVE-2026-12064,CVE-2026-8286,CVE-2026-8458,CVE-2026-8924,CVE-2026-8927,CVE-2026-9079,CVE-2026-9080,CVE-2026-9545,CVE-2026-9547
This update for curl fixes the following issues
- CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402).
- CVE-2026-8458: wrong reuse for different services (bsc#1268407).
- CVE-2026-8924: traling dot domain super cookie (bsc#1268409).
- CVE-2026-8927: env-set cross-proxy Digest auth state leak (bsc#1268413).
- CVE-2026-9079: stale proxy password leak (bsc#1268415).
- CVE-2026-9080: UAF after pause in socket callback (bsc#1268416).
- CVE-2026-9545: exposing HTTP/3 early data (bsc#1268417).
- CVE-2026-9547: SSH improper host validation (bsc#1268420).
- CVE-2026-10536: HTTP/2 stream-dependency tree UAF (bsc#1268422).
- CVE-2026-12064: proto-default skips SSH verification (bsc#1268427).
The following package changes have been done:
- system-user-root-20190513-160000.2.2 added
- filesystem-84.87-160000.2.2 added
- branding-SLE-16-160000.2.2 added
- crypto-policies-20250714.cd6043a-160000.2.1 added
- dbus-broker-block-restart-36-160000.3.1 added
- file-magic-5.46-160000.2.2 added
- glibc-2.40-160000.6.1 added
- libsemanage-conf-3.8.1-160000.3.1 added
- pkgconf-m4-2.2.0-160000.2.2 added
- systemd-default-settings-branding-upstream-0.10-160000.2.2 added
- terminfo-base-6.5.20250531-160000.3.1 added
- libncurses6-6.5.20250531-160000.3.1 added
- ncurses-utils-6.5.20250531-160000.3.1 added
- libzstd1-1.5.7-160000.2.2 added
- libz1-1.2.13-160000.3.1 added
- libuuid1-2.41.1-160000.4.1 added
- libunistring5-1.3-160000.3.2 added
- libtextstyle0-0.22.5-160000.2.2 added
- libtasn1-6-4.21.0-160000.1.1 added
- libsqlite3-0-3.53.2-160000.1.1 added
- libsmartcols1-2.41.1-160000.4.1 added
- libsepol2-3.8.1-160000.2.2 added
- libseccomp2-2.6.0-160000.2.2 added
- libpopt0-1.19-160000.2.2 added
- libpkgconf5-2.2.0-160000.2.2 added
- libpcre2-8-0-10.45-160000.3.1 added
- libnss_usrfiles2-2.27.1-160000.3.2 added
- liblzma5-5.8.1-160000.3.1 added
- liblz1-1.15-160000.2.2 added
- liblua5_4-5-5.4.7-160000.2.2 added
- libkbdfile1-2.7.1-160000.2.2 added
- libjson-c5-0.17-160000.2.2 added
- libjitterentropy3-3.6.3-160000.2.2 added
- libgpg-error0-1.58-160000.1.1 added
- libgmp10-6.3.0-160000.2.2 added
- libgcc_s1-15.3.0+git11272-160000.1.1 added
- libexpat1-2.7.1-160000.5.1 added
- libeconf0-0.7.9-160000.2.2 added
- libcrypt1-4.4.38-160000.3.2 added
- libcap2-2.73-160000.3.1 added
- libcap-ng0-0.8.5-160000.3.2 added
- libbz2-1-1.0.8-160000.2.2 added
- libbrotlicommon1-1.1.0-160000.2.2 added
- libaudit1-4.0-160000.2.2 added
- libattr1-2.5.2-160000.2.2 added
- libalternatives1-1.2+30.a5431e9-160000.2.2 added
- libacl1-2.3.2-160000.2.2 added
- fillup-1.42-160000.2.2 added
- envsubst-0.22.5-160000.2.2 added
- diffutils-3.12-160000.2.2 added
- libreadline8-8.2.13-160000.2.2 added
- pigz-2.8-160000.2.2 added
- libpng16-16-1.6.44-160000.7.1 added
- libelf1-0.192-160000.3.1 added
- libidn2-0-2.3.8-160000.2.2 added
- liblastlog2-2-2.41.1-160000.4.1 added
- pkgconf-2.2.0-160000.2.2 added
- libselinux1-3.8.1-160000.4.1 added
- netcfg-11.6-160000.3.1 added
- libxml2-2-2.13.8-160000.4.1 added
- libkfont0-2.7.1-160000.2.2 added
- libkeymap1-2.7.1-160000.2.2 added
- libgcrypt20-1.12.1-160000.2.1 added
- libmpfr6-4.2.1-160000.2.2 added
- libstdc++6-15.3.0+git11272-160000.1.1 added
- libblkid1-2.41.1-160000.4.1 added
- perl-base-5.42.0-160000.2.2 added
- libudev1-257.13-160000.2.1 added
- libsystemd0-257.13-160000.2.1 added
- libmagic1-5.46-160000.2.2 added
- libbrotlidec1-1.1.0-160000.2.2 added
- alts-1.2+30.a5431e9-160000.2.2 added
- permctl-1699_20250120-160000.2.2 added
- bash-5.2.37-160000.2.2 added
- bash-sh-5.2.37-160000.2.2 added
- libdw1-0.192-160000.3.1 added
- sed-4.9-160000.3.1 added
- libsubid5-4.17.2-160000.2.2 added
- libsemanage2-3.8.1-160000.3.1 added
- findutils-4.10.0-160000.2.2 added
- libmount1-2.41.1-160000.4.1 added
- libfdisk1-2.41.1-160000.4.1 added
- file-5.46-160000.2.2 added
- libfreetype6-2.13.3-160000.3.1 added
- zstd-1.5.7-160000.2.2 added
- xz-5.8.1-160000.3.1 added
- pkgconf-pkg-config-2.2.0-160000.2.2 added
- login_defs-4.17.2-160000.2.2 added
- libdevmapper1_03-2.03.29_1.02.203-160000.3.1 added
- gzip-1.13-160000.2.2 added
- grep-3.11-160000.2.2 added
- gettext-runtime-0.22.5-160000.2.2 added
- gawk-5.3.2-160000.2.2 added
- cpio-2.15-160000.2.2 added
- coreutils-9.6-160000.2.2 added
- libasm1-0.192-160000.3.1 added
- libdevmapper-event1_03-2.03.29_1.02.203-160000.3.1 added
- thin-provisioning-tools-1.1.0-160000.2.2 added
- systemd-rpm-macros-26-160000.2.2 added
- systemd-presets-common-SUSE-15-160000.2.2 added
- rpm-config-SUSE-20250328-160000.2.2 added
- rpm-4.20.1-160000.2.2 added
- permissions-config-1699_20250120-160000.2.2 added
- libopenssl3-3.5.0-160000.8.1 added
- elfutils-0.192-160000.3.1 added
- device-mapper-2.03.29_1.02.203-160000.3.1 added
- systemd-presets-branding-Elemental-20240807-160000.2.2 added
- permissions-1699_20250120-160000.2.2 added
- libkmod2-34.2-160000.3.2 added
- libcryptsetup12-2.8.4-160000.1.1 added
- pam-1.7.1-160000.4.1 added
- util-linux-2.41.1-160000.4.1 added
- shadow-4.17.2-160000.2.2 added
- pam-extra-1.7.1-160000.4.1 added
- kbd-2.7.1-160000.2.2 added
- libfuse3-3-3.16.2-160000.3.1 added
- fuse3-3.16.2-160000.3.1 added
- sysuser-shadow-3.3-160000.2.2 added
- pam-config-2.13+git.20250715-160000.2.2 added
- grub2-common-2.12-160000.6.1 added
- system-user-lp-20170617-160000.2.2 added
- system-group-kvm-20170617-160000.2.2 added
- system-group-hardware-20170617-160000.2.2 added
- dbus-1-common-1.14.10-160000.2.2 added
- grub2-i386-pc-2.12-160000.6.1 added
- libdbus-1-3-1.14.10-160000.2.2 added
- grub2-2.12-160000.6.1 added
- dbus-1-tools-1.14.10-160000.2.2 added
- SL-Micro-release-6.2-160000.18.1 added
- aaa_base-84.87+git20260610.3b5a868c-160000.1.1 added
- systemd-257.13-160000.2.1 added
- dbus-broker-36-160000.3.1 added
- dbus-1-1.14.10-160000.2.2 added
- util-linux-systemd-2.41.1-160000.4.1 added
- suse-module-tools-16.0.65-160000.1.1 added
- kmod-34.2-160000.3.2 added
- udev-257.13-160000.2.1 added
- dracut-059+suse.724.gaa87d1594-160000.1.1 added
- suse-module-tools-scriptlets-16.0.65-160000.1.1 added
- libnuma1-2.0.19.14.g690a72c-160000.2.2 added
- liburing2-2.8-160000.3.1 added
- kernel-default-base-6.12.0-160000.35.1.160000.2.16 added
- qemu-guest-agent-10.0.11-160000.1.1 added
- libcom_err2-1.47.0-160000.3.2 added
- libffi8-3.4.6-160000.2.2 added
- libfreebl3-3.112.5-160000.1.1 added
- libglib-2_0-0-2.84.4-160000.3.1 added
- libkeyutils1-1.6.3-160000.3.2 added
- libldap-data-2.6.10+10-160000.3.1 added
- liblz4-1-1.10.0-160000.3.1 added
- liblzo2-2-2.10-160000.3.2 added
- libndp0-1.8-160000.2.2 added
- libnghttp2-14-1.64.0-160000.3.1 added
- libnl-config-3.11.0-160000.2.2 added
- libpsl5-0.21.5-160000.3.2 added
- libsasl2-3-2.1.28-160000.3.1 added
- libssh-config-0.11.4-160000.1.1 added
- libverto1-0.3.2-160000.2.2 added
- logrotate-3.22.0-160000.2.2 added
- mozilla-nspr-4.36.2-160000.1.1 added
- shared-mime-info-2.4-160000.2.2 added
- libgobject-2_0-0-2.84.4-160000.3.1 added
- libgmodule-2_0-0-2.84.4-160000.3.1 added
- squashfs-4.6.1-160000.2.2 added
- libnl3-200-3.11.0-160000.2.2 added
- libldap-2-2.6.10+10-160000.3.1 added
- krb5-1.21.3-160000.4.1 added
- mozilla-nss-certs-3.112.5-160000.1.1 added
- gio-branding-SLE-16-160000.2.3 added
- libgio-2_0-0-2.84.4-160000.3.1 added
- glib2-tools-2.84.4-160000.3.1 added
- wpa_supplicant-2.11-160000.3.1 added
- libssh4-0.11.4-160000.1.1 added
- mozilla-nss-3.112.5-160000.1.1 added
- libsoftokn3-3.112.5-160000.1.1 added
- libcurl4-8.14.1-160000.8.1 added
- libnm0-1.52.0-160000.4.1 added
- NetworkManager-1.52.0-160000.4.1 added
- btrfsprogs-udev-rules-6.14-160000.2.2 added
- libext2fs2-1.47.0-160000.3.2 added
- btrfsprogs-6.14-160000.2.2 added
- libaio1-0.3.113-160000.3.2 added
- liblvm2cmd2_03-2.03.29-160000.3.1 added
- lvm2-2.03.29-160000.3.1 added
- boost-license1_86_0-1.86.0-160000.2.2 added
- dosfstools-4.2-160000.2.2 added
- e2fsprogs-1.47.0-160000.3.2 added
- elemental-register-1.9.2-160000.1.1 added
- elemental-support-1.9.2-160000.1.1 added
- elemental-system-agent-0.3.16-160000.1.1 added
- elemental-updater-2.3.1-160000.1.1 added
- glibc-gconv-modules-extra-2.40-160000.6.1 added
- glibc-locale-base-2.40-160000.6.1 added
- gptfdisk-1.0.10-160000.2.2 added
- libbtrfs0-6.14-160000.2.2 added
- libbtrfsutil1-6.14-160000.2.2 added
- libburn4-1.5.6-160000.2.2 added
- libedit0-20210910.3.1-160000.2.2 added
- libinih0-58-160000.2.2 added
- libjte2-1.22-160000.2.2 added
- libmpdec4-4.0.1-160000.2.2 added
- libparted-fs-resize0-3.6-160000.2.2 added
- libparted2-3.6-160000.2.2 added
- libproc2-1-4.0.5-160000.2.2 added
- liburcu8-0.14.0-160000.2.2 added
- libxxhash0-0.8.3-160000.2.2 added
- libzio1-1.09-160000.2.2 added
- libboost_thread1_86_0-1.86.0-160000.2.2 added
- mtools-4.0.45-160000.2.2 added
- libisofs6-1.5.6-160000.2.2 added
- python313-base-3.13.13-160000.1.1 added
- libpython3_13-1_0-3.13.13-160000.1.1 added
- parted-3.6-160000.2.2 added
- procps-4.0.5-160000.2.2 added
- rsync-3.4.1-160000.5.1 added
- info-7.1-160000.2.2 added
- libsnapper7-0.12.1-160000.2.2 added
- libisoburn1-1.5.6-160000.3.2 added
- xfsprogs-6.19.0-160000.2.1 added
- snapper-0.12.1-160000.2.2 added
- xorriso-1.5.6-160000.3.2 added
- elemental-toolkit-2.3.4-160000.1.1 added
- elemental-2.3.1-160000.1.1 added
- compat-usrmerge-tools-84.87-160000.2.2 added
- container:suse-sl-micro-6.2-base-os-container-latest-b4f4d94e8bcaa77cad829007f9dacdd997d8abcd095ea67f21b1fc42efd969bb-0 added
More information about the sle-container-updates
mailing list