SUSE-IU-2026:5816-1: Security update of suse/sl-micro/6.2/baremetal-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.2/baremetal-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:5816-1
Image Tags        : suse/sl-micro/6.2/baremetal-os-container:2.3.1 , suse/sl-micro/6.2/baremetal-os-container:2.3.1-8.74 , suse/sl-micro/6.2/baremetal-os-container:latest
Image Release     : 8.74
Severity          : moderate
Type              : security
References        : 1262684 1271351 1271352 1271354 CVE-2026-40467 CVE-2026-40468
                        CVE-2026-40553 CVE-2026-41989 
-----------------------------------------------------------------

The container suse/sl-micro/6.2/baremetal-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 1294
Released:    Mon Jul 20 11:26:51 2026
Summary:     Security update for libgcrypt
Type:        security
Severity:    moderate
References:  1262684,CVE-2026-41989
This update for libgcrypt fixes the following issue

- CVE-2026-41989: crafted ECDH ciphertext can lead denial of service (bsc#1262684).

-----------------------------------------------------------------
Advisory ID: 1303
Released:    Mon Jul 20 15:44:04 2026
Summary:     Security update for gawk
Type:        security
Severity:    moderate
References:  1271351,1271352,1271354,CVE-2026-40467,CVE-2026-40468,CVE-2026-40553
This update for gawk fixes the following issues:

- CVE-2026-40467: use-after-free vulnerability within the do_getline_redir() routine could lead to a program crash
  (bsc#1271351).
- CVE-2026-40468: use-after-free vulnerability in gawk's 'io.c' file could permit heap metadata manipulation and host
  memory exhaustion (bsc#1271352).
- CVE-2026-40553: buffer overflow in the ftype() routine of the readdir extension could trigger a program crash
  (bsc#1271354).


The following package changes have been done:

- libgcrypt20-1.12.1-160000.3.1 updated
- gawk-5.3.2-160000.3.1 updated
- container:suse-sl-micro-6.2-base-os-container-latest-7c51e582ded68242fb14fcc230faff751053922dd1cc4ceee7c1773324a2106e-0 updated