SUSE-CU-2026:8769-1: Security update of bci/ruby

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: bci/ruby
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:8769-1
Container Tags        : bci/ruby:2 , bci/ruby:2.5 , bci/ruby:2.5-26.30 , bci/ruby:2.5-sles15
Container Release     : 26.30
Severity              : important
Type                  : security
References            : 1262441 1271712 CVE-2026-41316 
-----------------------------------------------------------------

The container bci/ruby was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3556-1
Released:    Mon Aug 10 19:56:42 2026
Summary:     Security update for ruby2.5
Type:        security
Severity:    important
References:  1262441,CVE-2026-41316
This update for ruby2.5 fixes the following issue

- CVE-2026-41316: erb: @_init deserialization guard bypass via def_module / def_method / def_class (bsc#1262441).

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3578-1
Released:    Tue Aug 11 15:58:41 2026
Summary:     Security update for openssl-1_1
Type:        security
Severity:    moderate
References:  1271712
This update for openssl-1_1 fixes the following issues:

- HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations
  (bsc#1271712).

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:3582-1
Released:    Tue Aug 11 16:35:48 2026
Summary:     Recommended update for timezone
Type:        recommended
Severity:    moderate
References:  
This update for timezone fixes the following issues:

- Update to 2026c:
    * Alberta moved to permanent -06 on 2026-06-18.
    * Morocco moves to permanent +00 on 2026-09-20.
    * More integer overflow bugs have been fixed in zic.


The following package changes have been done:

- libopenssl1_1-1.1.1w-150700.11.25.2 updated
- libruby2_5-2_5-2.5.9-150700.24.11.1 updated
- timezone-2026c-150600.91.12.1 updated
- ruby2.5-stdlib-2.5.9-150700.24.11.1 updated
- ruby2.5-2.5.9-150700.24.11.1 updated
- ruby2.5-devel-2.5.9-150700.24.11.1 updated