SUSE-IU-2026:8219-1: Security update of suse/sl-micro/6.2/baremetal-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.2/baremetal-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:8219-1
Image Tags        : suse/sl-micro/6.2/baremetal-os-container:2.3.2 , suse/sl-micro/6.2/baremetal-os-container:2.3.2-9.6 , suse/sl-micro/6.2/baremetal-os-container:latest
Image Release     : 9.6
Severity          : important
Type              : security
References        : 1280339 1282512 1286261 1286385 CVE-2026-113470 
-----------------------------------------------------------------

The container suse/sl-micro/6.2/baremetal-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 1964
Released:    Fri Oct 23 11:30:18 2026
Summary:     Recommended update for crypto-policies
Type:        recommended
Severity:    moderate
References:  
This update for crypto-policies fixes the following issues:

Changes in crypto-policies:

- Remove dependency on `python3-base`, all Python scripts are now dependent on
  the primary Python interpreter directly without `/usr/bin/python3` mediation.
- Makes Makefile independent on the exact version of the Python interpreter.

-----------------------------------------------------------------
Advisory ID: 1963
Released:    Fri Oct 23 12:37:30 2026
Summary:     Security update for mozilla-nss, MozillaFirefox
Type:        security
Severity:    important
References:  1286261,1286385,CVE-2026-113470
This update for mozilla-nss, MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 153.5.1 ESR (MFSA 2026-112, bsc#1286385):

- CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow-lists, and other State component
  (bsc#1286261).

-----------------------------------------------------------------
Advisory ID: 1965
Released:    Fri Oct 23 14:05:04 2026
Summary:     Recommended update for sysstat
Type:        recommended
Severity:    important
References:  1280339,1282512
This update for sysstat fixes the following issues:

Changes in sysstat:

- Fix typo: syssstat-rotate to sysstat-rotate
- Fix: Upgrade from 15 to 16 is getting error No provider of 'shim' found (bsc#1282512)
- sar/sadf: compute used memory as total memory - available memory,
  consistent with free(1) (bsc#1280339)


The following package changes have been done:

- crypto-policies-20250714.cd6043a-160000.3.1 updated
- libfreebl3-3.125-160000.3.1 updated
- mozilla-nss-certs-3.125-160000.3.1 updated
- mozilla-nss-3.125-160000.3.1 updated
- libsoftokn3-3.125-160000.3.1 updated
- sysstat-12.7.5-160000.3.1 updated
- container:suse-sl-micro-6.2-base-os-container-latest-470d3bd0a51a404bd36e729b0a32051df795c39c01e71584823f280c6df9d05c-0 updated