SUSE-IU-2026:8142-1: Security update of suse/sl-micro/6.1/base-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.1/base-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:8142-1
Image Tags        : suse/sl-micro/6.1/base-os-container:2.2.1 , suse/sl-micro/6.1/base-os-container:2.2.1-5.204 , suse/sl-micro/6.1/base-os-container:latest
Image Release     : 5.204
Severity          : important
Type              : security
References        : 1221863 1230111 1233529 1247498 1258002 1263254 1264459 1264459
                        1279961 1284687 1286261 CVE-2026-107161 CVE-2026-41066 CVE-2026-43284
                        CVE-2026-43284 
-----------------------------------------------------------------

The container suse/sl-micro/6.1/base-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 531
Released:    Mon May 18 10:59:28 2026
Summary:     Security update for python-lxml
Type:        security
Severity:    moderate
References:  1258002,1263254,CVE-2026-41066
This update for python-lxml fixes the following issue

- CVE-2026-41066: Information disclosure via untrusted XML input leading to local file read (bsc#1263254).

-----------------------------------------------------------------
Advisory ID: 762
Released:    Thu Oct 22 09:31:44 2026
Summary:     Security update for ca-certificates-mozilla
Type:        security
Severity:    moderate
References:  1264459,1279961,1286261,CVE-2026-43284
This update for ca-certificates-mozilla fixes the following issues:

Updated to 2.92 state (bsc#1286261)
Removed:

 - emSign ECC Root CA - C3
 - emSign ECC Root CA - G3
 - emSign Root CA - C1

Updated to 2.90 state (bsc#1279961)
Removed:

 - AffirmTrust Commercial
 - AffirmTrust Networking
 - AffirmTrust Premium
 - AffirmTrust Premium ECC
 - certSIGN ROOT CA
 - Entrust Root Certification Authority
 - PKI Root Certification Authority
 - FIRMAPROFESIONAL CA ROOT-A WEB
 - GLOBALTRUST 2020
 - Secure Global CA
 - SecureSign Root CA12
 - SecureTrust CA
 - TeliaSonera Root CA v1
 - Trustwave Global Certification Authority
 - Trustwave Global ECC P256 Certification Authority
 - Trustwave Global ECC P384 Certification Authority
 - XRamp Global Certification Authority

Added:

 - SECOM SMIME RSA Root CA 2024
 - SECOM TLS ECC Root CA 2024
 - SECOM TLS RSA Root CA 2024
 - SecureSign Root CA16
 - Telia EC Email Root CA v3
 - Telia EC TLS Root CA v3
 - Telia RSA Email Root CA v3
 - Telia RSA TLS Root CA v3

-----------------------------------------------------------------
Advisory ID: 763
Released:    Thu Oct 22 09:36:10 2026
Summary:     Security update for cyrus-sasl
Type:        security
Severity:    important
References:  1221863,1230111,1233529,1247498,1264459,1284687,CVE-2026-107161,CVE-2026-43284
This update for cyrus-sasl fixes the following issues:

Security issue fixed:

- CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise
  DIGEST-MD5 clients (bsc#1284687).

Non security issues fixed:

- Fix cyrus-sasl package failing to build with GCC 14 (bsc#1221863).
- Replace insecure MD5 with ephemeral HMAC-SHA256 (bsc#1247498).
- Make DIGEST-MD5 work with openssl3 (bsc#1230111).


The following package changes have been done:

- SL-Micro-release-6.1-slfo.1.12.81 updated
- libsasl2-3-2.1.28-slfo.1.1_2.1 updated
- ca-certificates-mozilla-2.92-slfo.1.1_1.1 updated
- container:suse-toolbox-image-1.0.0-5.114 updated