SUSE-IU-2026:6971-1: Security update of suse/sl-micro/6.2/baremetal-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.2/baremetal-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:6971-1
Image Tags        : suse/sl-micro/6.2/baremetal-os-container:2.3.1 , suse/sl-micro/6.2/baremetal-os-container:2.3.1-8.138 , suse/sl-micro/6.2/baremetal-os-container:latest
Image Release     : 8.138
Severity          : moderate
Type              : security
References        : 1265071 1269221 CVE-2026-43895 CVE-2026-47770 
-----------------------------------------------------------------

The container suse/sl-micro/6.2/baremetal-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 1662
Released:    Fri Sep 11 17:00:17 2026
Summary:     Security update for jq
Type:        security
Severity:    moderate
References:  1265071,1269221,CVE-2026-43895,CVE-2026-47770
This update for jq fixes the following issues:

- CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure
  (bsc#1265071).
- CVE-2026-47770: stack overflow in deep structural equality (bsc#1269221).


The following package changes have been done:

- libjq1-1.7.1-160000.5.1 updated
- jq-1.7.1-160000.5.1 updated