SUSE-CU-2026:373-1: Security update of private-registry/harbor-portal

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: private-registry/harbor-portal
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:373-1
Container Tags        : private-registry/harbor-portal:1.1.0 , private-registry/harbor-portal:1.1.0-1.11 , private-registry/harbor-portal:latest
Container Release     : 1.11
Severity              : moderate
Type                  : security
References            : 1252895 1256525 1256526 CVE-2026-22695 CVE-2026-22801 
-----------------------------------------------------------------

The container private-registry/harbor-portal was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:234-1
Released:    Thu Jan 22 13:24:43 2026
Summary:     Security update for libpng16
Type:        security
Severity:    moderate
References:  1256525,1256526,CVE-2026-22695,CVE-2026-22801
This update for libpng16 fixes the following issues:

- CVE-2026-22695: Fixed heap buffer over-read in png_image_finish_read (bsc#1256525)
- CVE-2026-22801: Fixed integer truncation causing heap buffer over-read in png_image_write_* (bsc#1256526).

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:249-1
Released:    Thu Jan 22 16:23:36 2026
Summary:     Recommended update for libwebp
Type:        recommended
Severity:    moderate
References:  1252895

This update for libwebp ships the commandline tools to Package Hub.


The following package changes have been done:

- libwebp7-1.0.3-150200.3.14.1 updated
- libpng16-16-1.6.40-150600.3.6.1 updated
- system-user-harbor-2.14.2-150700.1.3 updated
- harbor-portal-2.14.2-150700.1.3 updated