SUSE-IU-2026:5992-1: Security update of suse/sl-micro/6.0/base-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.0/base-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:5992-1
Image Tags        : suse/sl-micro/6.0/base-os-container:2.1.3 , suse/sl-micro/6.0/base-os-container:2.1.3-7.184 , suse/sl-micro/6.0/base-os-container:latest
Image Release     : 7.184
Severity          : important
Type              : security
References        : 1239461 1261038 1268321 CVE-2025-24912 
-----------------------------------------------------------------

The container suse/sl-micro/6.0/base-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 819
Released:    Wed Jul 29 11:55:00 2026
Summary:     Security update for wpa_supplicant
Type:        security
Severity:    low
References:  1239461,CVE-2025-24912
This update for wpa_supplicant fixes the following issue:

- CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS
  server to inject crafted RADIUS packets and force RADIUS authentications to fail (bsc#1239461).

-----------------------------------------------------------------
Advisory ID: 821
Released:    Wed Jul 29 13:54:05 2026
Summary:     Recommended update for libzypp
Type:        recommended
Severity:    important
References:  1261038,1268321
This update for libzypp fixes the following issues:

- Update to version 17.38.14:
    * zypp.conf: add solver.NoUpdateProvide (default: false) option (bsc#1261038)
    * Use HttpHeader class for defining host specific http headers (bsc#1268321)
    * Compile and link with -fPIE to build on sparc64


The following package changes have been done:

- SL-Micro-release-6.0-25.117 updated
- wpa_supplicant-2.10-6.1 updated
- libzypp-17.38.14-1.1 updated
- container:suse-toolbox-image-1.0.0-9.144 updated