SUSE-CU-2026:11338-1: Security update of suse/sles/16.0/toolbox

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sles/16.0/toolbox
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:11338-1
Container Tags        : suse/sles/16.0/toolbox:16.3 , suse/sles/16.0/toolbox:16.3-1.131 , suse/sles/16.0/toolbox:latest
Container Release     : 1.131
Severity              : moderate
Type                  : security
References            : 1272206 1279961 CVE-2026-15588 
-----------------------------------------------------------------

The container suse/sles/16.0/toolbox was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 1790
Released:    Wed Sep 30 11:29:23 2026
Summary:     Recommended update for ca-certificates-mozilla
Type:        recommended
Severity:    moderate
References:  1279961
This update for ca-certificates-mozilla fixes the following issues:

Changes in ca-certificates-mozilla:

- Updated to 2.90 state (bsc#1279961):
    * Removed:
        +  AffirmTrust Commercial
        + AffirmTrust Networking
        + AffirmTrust Premium
        + AffirmTrust Premium ECC
        + certSIGN ROOT CA
        + Entrust Root Certification Authority
        + PKI Root Certification Authority
        + FIRMAPROFESIONAL CA ROOT-A WEB
        + GLOBALTRUST 2020
        + Secure Global CA
        + SecureSign Root CA12
        + SecureTrust CA
        + TeliaSonera Root CA v1
        + Trustwave Global Certification Authority
        + Trustwave Global ECC P256 Certification Authority
        + Trustwave Global ECC P384 Certification Authority
        + XRamp Global Certification Authority
    * Added:
        + SECOM SMIME RSA Root CA 2024
        + SECOM TLS ECC Root CA 2024
        + SECOM TLS RSA Root CA 2024
        + SecureSign Root CA16
        + Telia EC Email Root CA v3
        + Telia EC TLS Root CA v3
        + Telia RSA Email Root CA v3
        + Telia RSA TLS Root CA v3

-----------------------------------------------------------------
Advisory ID: 1788
Released:    Wed Sep 30 11:45:44 2026
Summary:     Security update for glib2
Type:        security
Severity:    moderate
References:  1272206,CVE-2026-15588
This update for glib2 fixes the following issue:

- CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).


The following package changes have been done:

- ca-certificates-mozilla-2.90-160000.1.1 updated
- libglib-2_0-0-2.84.4-160000.5.1 updated
- libgmodule-2_0-0-2.84.4-160000.5.1 updated