SUSE-CU-2026:14286-1: Security update of bci/php-apache

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: bci/php-apache
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:14286-1
Container Tags        : bci/php-apache:8-base , bci/php-apache:8.5.12-base , bci/php-apache:8.5.12-base-19.14
Container Release     : 19.14
Severity              : important
Type                  : security
References            : 1249152 1252108 1287778 CVE-2026-111497 
-----------------------------------------------------------------

The container bci/php-apache was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 38
Released:    Wed Nov 11 09:14:20 2026
Summary:     Security update for brotli
Type:        security
Severity:    important
References:  1249152,1252108,1287778,CVE-2026-111497
This update for brotli fixes the following issue:

- CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).


The following package changes have been done:

- libbrotlicommon1-1.1.0-160100.3.1 updated
- libbrotlienc1-1.1.0-160100.3.1 updated
- container:bci-bci-base-16.1-f1026aa2046c8199a7748e253d2981d8d31ba137d92f08a623ebb36d422f4a51-0 updated
- container:registry.suse.com-bci-bci-base-16.1-f1026aa2046c8199a7748e253d2981d8d31ba137d92f08a623ebb36d422f4a51-0 updated
- SLES-release-16.1-160100.17.1 removed
- aaa_base-84.87+git20260610.3b5a868c-160100.2.1 removed
- bash-5.2.37-160100.2.1 removed
- bash-sh-5.2.37-160100.2.1 removed
- branding-SLE-16-160100.2.1 removed
- coreutils-9.6-160100.3.1 removed
- crypto-policies-20250714.cd6043a-160100.2.1 removed
- filesystem-84.87-160100.2.1 removed
- fillup-1.42-160100.2.1 removed
- glibc-2.40-160100.3.1 removed
- grep-3.11-160100.2.1 removed
- libacl1-2.3.2-160100.2.1 removed
- libattr1-2.5.2-160100.2.1 removed
- libaudit1-4.0-160100.2.1 removed
- libbz2-1-1.0.8-160100.3.1 removed
- libcap2-2.78-160100.2.1 removed
- libcrypt1-4.4.38-160100.2.1 removed
- libeconf0-0.7.9-160100.2.1 removed
- libffi8-3.4.6-160100.2.1 removed
- libgcc_s1-16.2.0+git9497-160100.2.1 removed
- libgmp10-6.3.0-160100.2.1 removed
- libidn2-0-2.3.8-160100.2.1 removed
- libjitterentropy3-3.6.3-160100.2.1 removed
- liblua5_4-5-5.4.7-160100.2.1 removed
- liblzma5-5.8.1-160100.2.1 removed
- libncurses6-6.5.20250531-160100.2.1 removed
- libnghttp2-14-1.68.1-160100.2.1 removed
- libopenssl-3-fips-provider-3.5.0-160100.3.2 removed
- libopenssl3-3.5.0-160100.3.2 removed
- libp11-kit0-0.26.2-160100.2.1 removed
- libpcre2-8-0-10.45-160100.3.1 removed
- libpopt0-1.19-160100.2.1 removed
- libpsl5-0.21.5-160100.2.1 removed
- libreadline8-8.2.13-160100.2.1 removed
- libselinux1-3.11-160100.2.1 removed
- libsemanage-conf-3.11-160100.2.1 removed
- libsemanage2-3.11-160100.2.1 removed
- libsepol2-3.11-160100.2.1 removed
- libsubid5-4.19.4-160100.2.1 removed
- libtasn1-6-4.21.0-160100.2.1 removed
- libunistring5-1.3-160100.2.1 removed
- libxml2-2-2.13.8-160100.2.1 removed
- libz1-1.2.13-160100.2.1 removed
- libzstd1-1.5.7-160100.2.1 removed
- login_defs-4.19.4-160100.2.1 removed
- ncurses-utils-6.5.20250531-160100.2.1 removed
- pam-1.7.2+git12-160100.2.1 removed
- permctl-1699_20260518-160100.2.1 removed
- sed-4.9-160100.2.1 removed
- shadow-4.19.4-160100.2.1 removed
- shadow-pw-mgmt-4.19.4-160100.2.1 removed
- system-user-root-20190513-160100.2.1 removed
- sysuser-shadow-3.3-160100.2.1 removed
- terminfo-base-6.5.20250531-160100.2.1 removed
- timezone-2026c-160100.3.1 removed
- xz-5.8.1-160100.2.1 removed