SUSE-IU-2026:3273-1: Recommended update of suse/sl-micro/6.0/base-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.0/base-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:3273-1
Image Tags        : suse/sl-micro/6.0/base-os-container:2.1.3 , suse/sl-micro/6.0/base-os-container:2.1.3-7.141 , suse/sl-micro/6.0/base-os-container:latest
Image Release     : 7.141
Severity          : moderate
Type              : recommended
References        : 1239718 1246504 1252048 1253193 1258005 1258655 1259126 1259706
                        1259842 1261630 1261845 1263689 CVE-2025-39977 CVE-2025-71066
                        CVE-2026-23004 CVE-2026-23204 CVE-2026-23437 CVE-2026-31406 CVE-2026-31431
-----------------------------------------------------------------

The container suse/sl-micro/6.0/base-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 698
Released:    Sat May  9 19:38:20 2026
Summary:     Recommended update for libzypp, zypper
Type:        recommended
Severity:    moderate
References:  1239718,1246504,1252048,1253193,1258005,1258655,1259126,1259706,1259842,1261630,1261845,1263689,CVE-2025-39977,CVE-2025-71066,CVE-2026-23004,CVE-2026-23204,CVE-2026-23437,CVE-2026-31406,CVE-2026-31431
This update for libzypp, zypper fixes the following issues:

Changes in libzypp:

- Update to version 17.38.7:
    * Fix purge-kernel -rc kernel handling (bsc#1239718)
    * Explicitly_set_pool_DISTTYPE_RPM 
- Update to version 17.38.6:
    * Check for trusted key updates when updating the general keyring (bsc#1259706)
    * Support multiple MirroredOrigin authorities (bsc#1253193)
    * Workaround a doxygen bug
    * libzypp.spec: Add missing graphviz-gd BuildRequires (bsc#1259842)

Changes in zypper:

- Update to version 1.14.96:
  - Autorefresh ris-services the way as plugin-services (bsc#1246504)
    It's actually wrong to treat service refreshes different
    depending on the service type. For the purpose of a service it
    makes no difference how the data about the repos to use are acquired.


The following package changes have been done:

- SL-Micro-release-6.0-25.94 updated
- libzypp-17.38.7-1.1 updated
- zypper-1.14.96-1.1 updated
- container:suse-toolbox-image-1.0.0-9.106 updated