SUSE-CU-2026:7938-1: Security update of suse/sle-micro/5.5/toolbox

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sle-micro/5.5/toolbox
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:7938-1
Container Tags        : suse/sle-micro/5.5/toolbox:16.3 , suse/sle-micro/5.5/toolbox:16.3-3.12.171 , suse/sle-micro/5.5/toolbox:latest
Container Release     : 3.12.171
Severity              : important
Type                  : security
References            : 1262684 1271712 CVE-2026-41989 
-----------------------------------------------------------------

The container suse/sle-micro/5.5/toolbox was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3488-1
Released:    Tue Aug  4 13:55:33 2026
Summary:     Security update for openssl-1_1
Type:        security
Severity:    important
References:  1271712
This update for openssl-1_1 fixes the following issue

- HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations
  (bsc#1271712).

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3491-1
Released:    Tue Aug  4 13:58:43 2026
Summary:     Security update for libgcrypt
Type:        security
Severity:    moderate
References:  1262684,CVE-2026-41989
This update for libgcrypt fixes the following issue

- CVE-2026-41989: heap-based buffer overflow when processing crafted ECDH ciphertext can lead to a denial of service
  (bsc#1262684).


The following package changes have been done:

- libgcrypt20-hmac-1.9.4-150500.12.6.1 updated
- libgcrypt20-1.9.4-150500.12.6.1 updated
- libopenssl1_1-hmac-1.1.1l-150500.17.60.1 updated
- libopenssl1_1-1.1.1l-150500.17.60.1 updated
- openssl-1_1-1.1.1l-150500.17.60.1 updated