SUSE-CU-2026:6928-1: Security update of private-registry/harbor-core

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: private-registry/harbor-core
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:6928-1
Container Tags        : private-registry/harbor-core:2.13 , private-registry/harbor-core:2.13.5 , private-registry/harbor-core:2.13.5 , private-registry/harbor-core:2.13.5-1.12 , private-registry/harbor-core:2.13.5-1.12 , private-registry/harbor-core:latest
Container Release     : 1.12
Severity              : important
Type                  : security
References            : 1263366 1263367 1268131 CVE-2026-11850 CVE-2026-40355 CVE-2026-40356
-----------------------------------------------------------------

The container private-registry/harbor-core was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:2848-1
Released:    Fri Jul 10 13:38:57 2026
Summary:     Security update for krb5, krb5-mini
Type:        security
Severity:    important
References:  1263366,1263367,1268131,CVE-2026-11850,CVE-2026-40355,CVE-2026-40356
This update for krb5, krb5-mini fixes the following issues

- CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131).
- CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366).
- CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).


The following package changes have been done:

- krb5-1.20.1-150600.11.19.1 updated
- system-user-harbor-2.13.5-150700.1.7 updated
- harbor213-core-2.13.5-150700.1.7 updated
- container:suse-sle15-15.7-0180bc786e784f4f99302a008c5991e2d05f7fac404ce0fa2a07aaef564e6ef8-0 updated