SUSE-IU-2026:6050-1: Security update of suse/sle-micro/base-5.5

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sle-micro/base-5.5
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:6050-1
Image Tags        : suse/sle-micro/base-5.5:2.0.4 , suse/sle-micro/base-5.5:2.0.4-5.8.303 , suse/sle-micro/base-5.5:latest
Image Release     : 5.8.303
Severity          : important
Type              : security
References        : 1239461 1262684 1271712 CVE-2025-24912 CVE-2026-41989 
-----------------------------------------------------------------

The container suse/sle-micro/base-5.5 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3488-1
Released:    Tue Aug  4 13:55:33 2026
Summary:     Security update for openssl-1_1
Type:        security
Severity:    important
References:  1271712
This update for openssl-1_1 fixes the following issue

- HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations
  (bsc#1271712).

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3490-1
Released:    Tue Aug  4 13:58:35 2026
Summary:     Security update for wpa_supplicant
Type:        security
Severity:    low
References:  1239461,CVE-2025-24912
This update for wpa_supplicant fixes the following issues:

- CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS
  server to inject crafted RADIUS packets and force RADIUS authentications to fail (bsc#1239461).
- Missing network context validation for PMKSA caching https://w1.fi/security/2026-2/
- Unexpected SAE commit message contents terminating `wpa_supplicant` https://w1.fi/security/2026-3/   

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3491-1
Released:    Tue Aug  4 13:58:43 2026
Summary:     Security update for libgcrypt
Type:        security
Severity:    moderate
References:  1262684,CVE-2026-41989
This update for libgcrypt fixes the following issue

- CVE-2026-41989: heap-based buffer overflow when processing crafted ECDH ciphertext can lead to a denial of service
  (bsc#1262684).


The following package changes have been done:

- libopenssl1_1-1.1.1l-150500.17.60.1 updated
- libgcrypt20-1.9.4-150500.12.6.1 updated
- openssl-1_1-1.1.1l-150500.17.60.1 updated
- wpa_supplicant-2.10-150500.3.6.1 updated