SUSE-CU-2026:2023-1: Security update of suse/sle-micro/5.2/toolbox

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sle-micro/5.2/toolbox
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:2023-1
Container Tags        : suse/sle-micro/5.2/toolbox:14.2 , suse/sle-micro/5.2/toolbox:14.2-7.11.260 , suse/sle-micro/5.2/toolbox:latest
Container Release     : 7.11.260
Severity              : moderate
Type                  : security
References            : 1222465 1234736 1258859 CVE-2026-3184 
-----------------------------------------------------------------

The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:987-1
Released:    Tue Mar 24 04:11:21 2026
Summary:     Security update for util-linux
Type:        security
Severity:    moderate
References:  1222465,1234736,1258859,CVE-2026-3184
This update for util-linux fixes the following issues:

Security issue:

- CVE-2026-3184: access control bypass due to improper hostname canonicalization in `login` (bsc#1258859).

Non security issues:

- recognize fuse 'portal' as a virtual file system (bsc#1234736).
- fdisk: fix possible partition overlay and data corruption if EBR gap is missing (bsc#1222465).


The following package changes have been done:

- libblkid1-2.36.2-150300.4.58.1 updated
- libfdisk1-2.36.2-150300.4.58.1 updated
- libmount1-2.36.2-150300.4.58.1 updated
- libsmartcols1-2.36.2-150300.4.58.1 updated
- libuuid1-2.36.2-150300.4.58.1 updated
- util-linux-2.36.2-150300.4.58.1 updated