SUSE-IU-2026:1512-1: Security update of suse/sl-micro/6.2/baremetal-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.2/baremetal-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:1512-1
Image Tags        : suse/sl-micro/6.2/baremetal-os-container:2.3.0 , suse/sl-micro/6.2/baremetal-os-container:2.3.0-7.74 , suse/sl-micro/6.2/baremetal-os-container:latest
Image Release     : 7.74
Severity          : important
Type              : security
References        : 1229376 1229950 1243867 1245169 1257144 1257496 391434 CVE-2024-12224
                        CVE-2024-43806 CVE-2026-24515 CVE-2026-25210 
-----------------------------------------------------------------

The container suse/sl-micro/6.2/baremetal-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 410
Released:    Tue Feb 17 10:33:51 2026
Summary:     Security update for expat
Type:        security
Severity:    important
References:  1229376,1229950,1243867,1245169,1257144,1257496,391434,CVE-2024-12224,CVE-2024-43806,CVE-2026-24515,CVE-2026-25210
This update for expat fixes the following issues:

- CVE-2026-24515: failure to copy the encoding handler data passed to XML_SetUnknownEncodingHandler may cause a NULL
  dereference (bsc#1257144).
- CVE-2026-25210: lack of buffer size check can lead to an integer overflow (bsc#1257496).


The following package changes have been done:

- librsvg-2-2-2.60.2-160000.1.1 updated
- gdk-pixbuf-loader-rsvg-2.60.2-160000.1.1 updated