SUSE Container Update Advisory: suse/ltss/sle15.3/sle15
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2024:1742-1
Container Tags        : suse/ltss/sle15.3/bci-base:15.3 , suse/ltss/sle15.3/bci-base:15.3.4.45 , suse/ltss/sle15.3/sle15:15.3 , suse/ltss/sle15.3/sle15:15.3.4.45
Container Release     : 4.45
Severity              : moderate
Type                  : recommended
References            : 1188500 1221184 1221525 1221963 1222086 1222398 1223094 
-----------------------------------------------------------------

The container suse/ltss/sle15.3/sle15 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2024:1429-1
Released:    Wed Apr 24 15:13:10 2024
Summary:     Recommended update for ca-certificates
Type:        recommended
Severity:    moderate
References:  1188500,1221184
This update for ca-certificates fixes the following issue:

- Update version (bsc#1221184)
  * Use flock to serialize calls (bsc#1188500)
  * Make certbundle.run container friendly
  * Create /var/lib/ca-certificates if needed

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2024:1433-1
Released:    Wed Apr 24 21:41:41 2024
Summary:     Recommended update for libzypp, zypper
Type:        recommended
Severity:    moderate
References:  1221525,1221963,1222086,1222398,1223094
This update for libzypp, zypper fixes the following issues:

- Fix creation of sibling cache dirs with too restrictive mode (bsc#1222398)
- Don't try to refresh volatile media as long as raw metadata are present (bsc#1223094)
- Update RepoStatus fromCookieFile according to the files mtime (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed
- Do not try to refresh repo metadata as non-root user (bsc#1222086)
- man: Explain how to protect orphaned packages by collecting them in a plaindir repo
- packages: Add --autoinstalled and --userinstalled options to list them
- Don't print 'reboot required' message if download-only or dry-run
- Resepect zypper.conf option `showAlias` search commands (bsc#1221963)
- dup: New option --remove-orphaned to remove all orphaned packages in dup (bsc#1221525)


The following package changes have been done:

- ca-certificates-2+git20240416.98ae794-150300.4.3.3 updated
- libzypp-17.32.5-150200.99.1 updated
- zypper-1.14.71-150200.76.3 updated