SUSE-CU-2026:13875-1: Recommended update of private-registry/harbor-trivy-adapter
sle-container-updates at lists.suse.com
sle-container-updates at lists.suse.com
Tue Nov 10 08:39:05 UTC 2026
SUSE Container Update Advisory: private-registry/harbor-trivy-adapter
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:13875-1
Container Tags : private-registry/harbor-trivy-adapter:0.35.1 , private-registry/harbor-trivy-adapter:0.35.1-1.113 , private-registry/harbor-trivy-adapter:latest
Container Release : 1.113
Severity : moderate
Type : recommended
References : 1281325 CVE-2026-34182
-----------------------------------------------------------------
The container private-registry/harbor-trivy-adapter was updated. The following patches have been included in this update:
-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:5149-1
Released: Mon Nov 9 18:43:07 2026
Summary: Recommended update for openssl-3
Type: recommended
Severity: moderate
References: 1281325,CVE-2026-34182
This update for openssl-3 fixes the following issues:
- Build with enable-sslkeylog to support the SSLKEYLOGFILE
environment variable usage. (jsc#PED-17079)
- Allow to bypass the strict tag initialization and length
enforcement added in the fix for CVE-2026-34182 when the env
variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and
set to a non-zero value. (bsc#1281325)
The following package changes have been done:
- libopenssl3-3.5.0-150700.5.56.1 updated
- openssl-3-3.5.0-150700.5.56.1 updated
- system-user-harbor-2.13.5-150700.2.19 updated
More information about the sle-container-updates
mailing list