SUSE-IU-2026:7774-1: Security update of suse/sl-micro/6.2/base-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.2/base-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:7774-1
Image Tags        : suse/sl-micro/6.2/base-os-container:2.3.1 , suse/sl-micro/6.2/base-os-container:2.3.1-8.95 , suse/sl-micro/6.2/base-os-container:latest
Image Release     : 8.95
Severity          : moderate
Type              : security
References        : 1283183 CVE-2026-46675 
-----------------------------------------------------------------

The container suse/sl-micro/6.2/base-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 1897
Released:    Sat Oct 10 13:21:45 2026
Summary:     Security update for libpng16
Type:        security
Severity:    moderate
References:  1283183,CVE-2026-46675
This update for libpng16 fixes the following issue:

- CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression
  (bsc#1283183).

Changes for libpng16:

- version update to 1.6.59:
 * Fixed CVE-2026-46675 (medium severity):
 Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt
 or iCCP decompression.
 (Reported independently by Ze Sheng and
 <JasonHonKL at users.noreply.github.com>.)
 * Fixed a regression introduced in version 1.6.47 that caused libpng to reject
 hIST chunks in their correct position, after PLTE.
 (Contributed by Yuki Sekiguchi.)
 * Prevented a double free of `png_struct` members after an allocation failure.
 (Contributed by Anthony Hurtado.)
 * Applied fixes and updates to the CMake build.
 * Adopted the REUSE Specification for licensing the CI files.


The following package changes have been done:

- libpng16-16-1.6.59-160000.1.1 updated