SUSE-IU-2026:6051-1: Security update of suse/sle-micro/5.5

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sle-micro/5.5
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:6051-1
Image Tags        : suse/sle-micro/5.5:2.0.4 , suse/sle-micro/5.5:2.0.4-5.8.78 , suse/sle-micro/5.5:latest
Image Release     : 5.8.78
Severity          : important
Type              : security
References        : 1239461 1262684 1268144 1268145 1271712 CVE-2025-24912 CVE-2026-41989
-----------------------------------------------------------------

The container suse/sle-micro/5.5 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3488-1
Released:    Tue Aug  4 13:55:33 2026
Summary:     Security update for openssl-1_1
Type:        security
Severity:    important
References:  1271712
This update for openssl-1_1 fixes the following issue

- HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations
  (bsc#1271712).

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3489-1
Released:    Tue Aug  4 13:57:05 2026
Summary:     Security update for multipath-tools
Type:        security
Severity:    moderate
References:  1268144,1268145
This update for multipath-tools fixes the following issues:

Update to version 0.9.4+134+suse.c82f347.
  
- kpartx: integer overflow in the GPT partition table size calculation can lead to heap OOB read via crafted USB device
  or disk image (bsc#1268145).
- kpartx: missing bounds check can lead to a DASD VOL1 unbounded array write via a crafted DASD disk with more than 256
  consecutive format labels (bsc#1268144).

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3490-1
Released:    Tue Aug  4 13:58:35 2026
Summary:     Security update for wpa_supplicant
Type:        security
Severity:    low
References:  1239461,CVE-2025-24912
This update for wpa_supplicant fixes the following issues:

- CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS
  server to inject crafted RADIUS packets and force RADIUS authentications to fail (bsc#1239461).
- Missing network context validation for PMKSA caching https://w1.fi/security/2026-2/
- Unexpected SAE commit message contents terminating `wpa_supplicant` https://w1.fi/security/2026-3/   

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3491-1
Released:    Tue Aug  4 13:58:43 2026
Summary:     Security update for libgcrypt
Type:        security
Severity:    moderate
References:  1262684,CVE-2026-41989
This update for libgcrypt fixes the following issue

- CVE-2026-41989: heap-based buffer overflow when processing crafted ECDH ciphertext can lead to a denial of service
  (bsc#1262684).


The following package changes have been done:

- libopenssl1_1-1.1.1l-150500.17.60.1 updated
- libgcrypt20-1.9.4-150500.12.6.1 updated
- openssl-1_1-1.1.1l-150500.17.60.1 updated
- wpa_supplicant-2.10-150500.3.6.1 updated
- kpartx-0.9.4+134+suse.c82f347-150500.3.12.1 updated
- libmpath0-0.9.4+134+suse.c82f347-150500.3.12.1 updated
- multipath-tools-0.9.4+134+suse.c82f347-150500.3.12.1 updated
- container:suse-sle-micro-base-5.5-latest-2.0.4-5.8.303 updated