SUSE-IU-2026:4252-1: Security update of suse/sl-micro/6.1/baremetal-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.1/baremetal-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:4252-1
Image Tags        : suse/sl-micro/6.1/baremetal-os-container:2.2.1 , suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.115 , suse/sl-micro/6.1/baremetal-os-container:latest
Image Release     : 7.115
Severity          : moderate
Type              : security
References        : 1256399 1256418 1259642 1261441 1264568 CVE-2026-0716 CVE-2026-0719
                        CVE-2026-3497 CVE-2026-35388 
-----------------------------------------------------------------

The container suse/sl-micro/6.1/baremetal-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 563
Released:    Thu Jun  4 10:26:32 2026
Summary:     Security update for openssh
Type:        security
Severity:    moderate
References:  1256399,1256418,1259642,1261441,1264568,CVE-2026-0716,CVE-2026-0719,CVE-2026-3497,CVE-2026-35388
This update for openssh fixes the following issues:

- CVE-2026-35388: Added missing askpass check for proxy-mode multiplexing sessions (bsc#1261441)
- CVE-2026-3497: Fixed a possible information disclosure or denial
  of service due to uninitialized variables in gssapi patches
  (bsc#1259642)
- Add patch to fix a potential issue when validating mac or ciphers


The following package changes have been done:

- openssh-common-9.6p1-slfo.1.1_6.1 updated
- openssh-server-9.6p1-slfo.1.1_6.1 updated
- openssh-clients-9.6p1-slfo.1.1_6.1 updated
- openssh-9.6p1-slfo.1.1_6.1 updated