SUSE-CU-2026:11408-1: Security update of suse/kiosk/firefox-esr

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/kiosk/firefox-esr
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:11408-1
Container Tags        : suse/kiosk/firefox-esr:153.3 , suse/kiosk/firefox-esr:153.3-75.44 , suse/kiosk/firefox-esr:esr , suse/kiosk/firefox-esr:latest
Container Release     : 75.44
Severity              : important
Type                  : security
References            : 1272206 1280911 CVE-2026-15588 CVE-2026-88807 
-----------------------------------------------------------------

The container suse/kiosk/firefox-esr was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:4367-1
Released:    Mon Sep 28 17:01:44 2026
Summary:     Security update for glib2
Type:        security
Severity:    moderate
References:  1272206,CVE-2026-15588
This update for glib2 fixes the following issue:

- CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:4397-1
Released:    Tue Sep 29 15:35:45 2026
Summary:     Security update for libXrender
Type:        security
Severity:    important
References:  1280911,CVE-2026-88807
This update for libXrender fixes the following issue:

- CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow (bsc#1280911).


The following package changes have been done:

- libglib-2_0-0-2.78.6-150600.4.41.1 updated
- libgthread-2_0-0-2.78.6-150600.4.41.1 updated
- libgobject-2_0-0-2.78.6-150600.4.41.1 updated
- libgmodule-2_0-0-2.78.6-150600.4.41.1 updated
- libXrender1-0.9.10-150000.3.3.1 updated
- libgio-2_0-0-2.78.6-150600.4.41.1 updated
- glib2-tools-2.78.6-150600.4.41.1 updated