SUSE-IU-2026:6634-1: Security update of suse/sl-micro/6.2/baremetal-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.2/baremetal-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:6634-1
Image Tags        : suse/sl-micro/6.2/baremetal-os-container:2.3.1 , suse/sl-micro/6.2/baremetal-os-container:2.3.1-8.109 , suse/sl-micro/6.2/baremetal-os-container:latest
Image Release     : 8.109
Severity          : moderate
Type              : security
References        : 1258307 1261256 1271500 1273197 1273200 CVE-2026-2604 
-----------------------------------------------------------------

The container suse/sl-micro/6.2/baremetal-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 844
Released:    Mon Jun  1 15:18:04 2026
Summary:     Security update for evolution-data-server
Type:        security
Severity:    moderate
References:  1258307,CVE-2026-2604
This update for evolution-data-server fixes the following issues:

- CVE-2026-2604: Canonicalize path before local cache file removal. (bsc#1258307)

-----------------------------------------------------------------
Advisory ID: 1534
Released:    Sun Aug 30 15:09:44 2026
Summary:     Recommended update for timezone
Type:        recommended
Severity:    moderate
References:  
This update for timezone fixes the following issues:

- Update to 2026c:
    * Alberta moved to permanent -06 on 2026-06-18.
    * Morocco moves to permanent +00 on 2026-09-20.
    * More integer overflow bugs have been fixed in zic.

-----------------------------------------------------------------
Advisory ID: 1533
Released:    Sun Aug 30 15:11:40 2026
Summary:     Recommended update for nfs-utils
Type:        recommended
Severity:    moderate
References:  1273197
This update for nfs-utils fixes the following issues:

- nfs-client: make the rpcctl util executable (bsc#1273197)

-----------------------------------------------------------------
Advisory ID: 1540
Released:    Sun Aug 30 16:33:19 2026
Summary:     Recommended update for ethtool
Type:        recommended
Severity:    moderate
References:  1261256,1271500
This update for ethtool fixes the following issues:

- backport Rx CQE coalescing support (bsc#1261256):
  * sync UAPI header copies with SL-16.1
  * netlink: settings: add netlink support for RX CQE Coalescing params
- backport post-6.14 upstream fixes (bsc#1271500):
    * Fix index calculation in RTTPT2C register dump loop
    * Fix incorrect LSB field used for wavelength tolerance
    * ethtool: Add --disable-netlink to help output
    * ethtool.spec: Add AppStream metainfo file to %files section
    * netlink: add NULL check for get_string() in features.c
    * sfpid:
        + Fix JSON output of SFP diagnostics
        + Fix 10G Base-ER module detection
        + Fix redundant print of Active Cu cmplnce.
- misc: Fix AppStream metainfo XML

-----------------------------------------------------------------
Advisory ID: 1542
Released:    Sun Aug 30 16:35:57 2026
Summary:     Recommended update for setools
Type:        recommended
Severity:    moderate
References:  1273200
This update for setools fixes the following issues:

- Move sedta and seinfoflow to setools-console-analyses and exlude
  its build for SLE16 as python-networkx won't be available there (bsc#1273200).


The following package changes have been done:

- ethtool-6.14-160000.3.1 updated
- libnfsidmap1-1.0-160000.4.1 updated
- timezone-2026c-160000.1.1 updated
- python313-setools-4.5.1-160000.3.1 updated
- nfs-client-2.8.2-160000.4.1 updated