SUSE-IU-2026:6860-1: Security update of suse/sl-micro/6.1/baremetal-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.1/baremetal-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:6860-1
Image Tags        : suse/sl-micro/6.1/baremetal-os-container:2.2.1 , suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.168 , suse/sl-micro/6.1/baremetal-os-container:latest
Image Release     : 7.168
Severity          : critical
Type              : security
References        : 1204562 1212841 1218548 1219642 1221342 1221900 1221901 1222171
                        1231775 1231776 1232553 1234383 1243005 1244528 1248660 1254324
                        1257010 1259719 1259740 1260439 1262749 1267696 1276764 1277199
                        1277203 1277205 1277208 1277209 1277210 1277212 CVE-2024-58251
                        CVE-2025-49133 CVE-2026-10805 CVE-2026-19685 CVE-2026-21444 
-----------------------------------------------------------------

The container suse/sl-micro/6.1/baremetal-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 713
Released:    Wed May  6 19:54:17 2026
Summary:     Recommended update for nvidia-open-driver-G06-signed
Type:        recommended
Severity:    critical
References:  1212841,1218548,1219642,1221342,1221900,1221901,1222171,1231775,1231776,1232553,1257010,1259719,1259740,1262749,1267696,1276764,CVE-2026-10805,CVE-2026-19685
This update for nvidia-open-driver-G06-signed fixes the following issues:

Changes in nvidia-open-driver-G06-signed:

- update CUDA variant to 580.159.03
- update non-CUDA variant to 580.159.03 (boo#1262749)

- get rid of confusing objtool warnings (boo#1212841)

- improved RPM description for -cuda and non-cuda variant

- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G06-signed-kmp-meta for TW ...
  (boo#1259740)

-----------------------------------------------------------------
Advisory ID: 714
Released:    Wed May  6 20:19:25 2026
Summary:     Security update for libtpms
Type:        security
Severity:    moderate
References:  1204562,1234383,1243005,1244528,1248660,1254324,1260439,1277199,1277203,1277205,1277208,1277209,1277210,1277212,CVE-2024-58251,CVE-2025-49133,CVE-2026-21444
This update for libtpms fixes the following issues:

- CVE-2025-49133: Fixed potential out of bounds (OOB) read vulnerability (bsc#1244528).
- CVE-2026-21444: Fixed remote data confidentiality compromise via incorrect Initialization Vector (IV) handling
  (bsc#1260439).


The following package changes have been done:

- libnm0-1.42.6-slfo.1.1_5.1 updated
- NetworkManager-1.42.6-slfo.1.1_5.1 updated
- kpartx-0.10.8+212+suse.3dc4ecc-slfo.1.1_1.1 updated
- libmpath0-0.10.8+212+suse.3dc4ecc-slfo.1.1_1.1 updated
- multipath-tools-0.10.8+212+suse.3dc4ecc-slfo.1.1_1.1 updated
- NetworkManager-wwan-1.42.6-slfo.1.1_5.1 updated
- container:SL-Micro-base-container-2.2.1-5.184 updated