SUSE-CU-2026:363-1: Security update of suse/kiosk/xorg-client

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/kiosk/xorg-client
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:363-1
Container Tags        : suse/kiosk/xorg-client:21 , suse/kiosk/xorg-client:21-70.5 , suse/kiosk/xorg-client:latest
Container Release     : 70.5
Severity              : important
Type                  : security
References            : 1220545 1255392 CVE-2023-6601 CVE-2025-63757 
-----------------------------------------------------------------

The container suse/kiosk/xorg-client was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:198-1
Released:    Wed Jan 21 11:16:17 2026
Summary:     Security update for ffmpeg-4
Type:        security
Severity:    important
References:  1220545,1255392,CVE-2023-6601,CVE-2025-63757
This update for ffmpeg-4 fixes the following issues:

- CVE-2023-6601: Fixed HLS Unsafe File Extension Bypass (bsc#1220545).
- CVE-2025-63757: Fixed integer overflow in yuv2ya16_X_c_template() (bsc#1255392).   


The following package changes have been done:

- libavutil56_70-4.4.6-150600.13.38.1 updated
- libswresample3_9-4.4.6-150600.13.38.1 updated
- libavcodec58_134-4.4.6-150600.13.38.1 updated
- container:suse-sle15-15.7-7970b1398395a13b38e858c60a7b75db5f5265dd7c0ecdabe8919a458b2f34e5-0 updated
- container:registry.suse.com-bci-bci-micro-15.7-4ea6269b17048f73c022844251731ef4f640fdb9eb72a2ab53ec7f9413b89ee3-0 updated