SUSE-IU-2026:7236-1: Recommended update of suse/sl-micro/6.2/baremetal-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.2/baremetal-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:7236-1
Image Tags        : suse/sl-micro/6.2/baremetal-os-container:2.3.1 , suse/sl-micro/6.2/baremetal-os-container:2.3.1-8.148 , suse/sl-micro/6.2/baremetal-os-container:latest
Image Release     : 8.148
Severity          : moderate
Type              : recommended
References        : 1262698 1266262 1279863 
-----------------------------------------------------------------

The container suse/sl-micro/6.2/baremetal-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 1722
Released:    Mon Sep 21 11:58:27 2026
Summary:     Recommended update for mozilla-nss
Type:        recommended
Severity:    moderate
References:  1262698,1266262,1279863
This update for mozilla-nss fixes the following issues:

Changes in mozilla-nss:

- Fix potential crash when verifying password length in PBKDF2 (boo#1279863)
- Fix upper bound to allow FIPS approval for P-521.
- Approve HKDF and key concatenation in the context of TLS. This enables approved TLS
  1.3 channels with PQC (bsc#1262698).
- Don't consider unapproved algorithms for TLS 1.3 in FIPS mode.
- Mark TLS 1.2 KDF without extended master secret non-approved for FIPS (bsc#1266262).


The following package changes have been done:

- libfreebl3-3.125-160000.2.1 updated
- mozilla-nss-certs-3.125-160000.2.1 updated
- mozilla-nss-3.125-160000.2.1 updated
- libsoftokn3-3.125-160000.2.1 updated
- container:suse-sl-micro-6.2-base-os-container-latest-cb2b459fd41cab1c0781c00030dca5a01daf5644b073c82eecde27145f19c31d-0 updated