SUSE-CU-2026:4528-1: Security update of private-registry/1.2/harbor-portal

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: private-registry/1.2/harbor-portal
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:4528-1
Container Tags        : private-registry/1.2/harbor-portal:1.2.0 , private-registry/1.2/harbor-portal:1.2.0-1.12 , private-registry/1.2/harbor-portal:latest
Container Release     : 1.12
Severity              : moderate
Type                  : security
References            : 1259924 1261957 CVE-2025-69720 CVE-2026-34757 
-----------------------------------------------------------------

The container private-registry/1.2/harbor-portal was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:1510-1
Released:    Tue Apr 21 08:28:12 2026
Summary:     Security update for ncurses
Type:        security
Severity:    moderate
References:  1259924,CVE-2025-69720
This update for ncurses fixes the following issue:

- CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:1602-1
Released:    Fri Apr 24 13:46:25 2026
Summary:     Security update for libpng16
Type:        security
Severity:    moderate
References:  1261957,CVE-2026-34757
This update for libpng16 fixes the following issue:

- CVE-2026-34757: information disclosure and data corruption due to use-after-free in `png_set_PLTE`, `png_set_tRNS`
  and `png_set_hIST` (bsc#1261957).


The following package changes have been done:

- libncurses6-6.1-150000.5.33.1 updated
- terminfo-base-6.1-150000.5.33.1 updated
- libpng16-16-1.6.40-150600.3.20.1 updated
- system-user-harbor-2.15.0-150700.1.5 updated
- harbor-portal-2.15.0-150700.1.5 updated
- container:registry.suse.com-bci-bci-micro-15.7-0aaa3addad28602353154665af82a21e4757cb0f74b1e4e8256813a5abeb8b9c-0 updated