SUSE-CU-2026:7447-1: Security update of suse/sle-micro-rancher/5.4

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sle-micro-rancher/5.4
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:7447-1
Container Tags        : suse/sle-micro-rancher/5.4:5.4.4.5.158 , suse/sle-micro-rancher/5.4:latest
Container Release     : 4.5.158
Severity              : important
Type                  : security
References            : 1269622 1271193 1271194 1271195 CVE-2026-41991 CVE-2026-59856
                        CVE-2026-59857 CVE-2026-59858 
-----------------------------------------------------------------

The container suse/sle-micro-rancher/5.4 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3269-1
Released:    Mon Jul 27 13:00:16 2026
Summary:     Security update for gzip
Type:        security
Severity:    important
References:  1269622,CVE-2026-41991
This update for gzip fixes the following issue:

- CVE-2026-41991: insecure temporary file handling in the gzexe utility when the mktemp utility is not available in the
  user's PATH (bsc#1269622).

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3271-1
Released:    Mon Jul 27 13:02:04 2026
Summary:     Security update for vim
Type:        security
Severity:    important
References:  1271193,1271194,1271195,CVE-2026-59856,CVE-2026-59857,CVE-2026-59858
This update for vim fixes the following issues

- Updated to version 9.2.0780.
- CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion (bsc#1271194).
- CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding (bsc#1271195).
- CVE-2026-59858: Arbitrary Code Execution via C Omni-Completion (bsc#1271193).


The following package changes have been done:

- gzip-1.10-150200.13.1 updated
- vim-data-common-9.2.0780-150000.5.99.1 updated
- vim-small-9.2.0780-150000.5.99.1 updated