SUSE-IU-2026:7818-1: Security update of suse/sl-micro/6.2/baremetal-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.2/baremetal-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:7818-1
Image Tags        : suse/sl-micro/6.2/baremetal-os-container:2.3.1 , suse/sl-micro/6.2/baremetal-os-container:2.3.1-8.181 , suse/sl-micro/6.2/baremetal-os-container:latest
Image Release     : 8.181
Severity          : important
Type              : security
References        : 1248988 1257101 1268579 1269471 1278135 1279565 CVE-2026-55686
                        CVE-2026-57231 
-----------------------------------------------------------------

The container suse/sl-micro/6.2/baremetal-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 1900
Released:    Mon Oct 12 10:48:41 2026
Summary:     Recommended update for selinux-policy
Type:        recommended
Severity:    moderate
References:  1257101,1278135,1279565
This update for selinux-policy fixes the following issues:

Changes in selinux-policy:

- Update to version 20250627+git412.dbf877ab7:
  * Fix typo in screen.fc
  * Allow cscreend to start screen as unconfined domain (bsc#1257101)
  * Label charon-nm as ipsec_exec_t (bsc#1278135)

- Update to version 20250627+git407.e864ced8f:
  * Allow rsync to read var_t (bsc#1279565)

-----------------------------------------------------------------
Advisory ID: 1902
Released:    Mon Oct 12 10:48:41 2026
Summary:     Security update for podman
Type:        security
Severity:    important
References:  1248988,1268579,1269471,CVE-2026-55686,CVE-2026-57231
This update for podman fixes the following issues:

Security issues fixed:

- CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579).
- CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the
  container (bsc#1269471).

Non security issue fixed:

- catatonit missing in /usr/libexec/podman/ (bsc#1248988).


The following package changes have been done:

- selinux-policy-20250627+git412.dbf877ab7-160000.1.1 updated
- selinux-policy-targeted-20250627+git412.dbf877ab7-160000.1.1 updated
- podman-5.4.2-160000.6.1 updated