SUSE-CU-2026:12417-1: Security update of suse/sles/16.0/toolbox

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sles/16.0/toolbox
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:12417-1
Container Tags        : suse/sles/16.0/toolbox:16.3 , suse/sles/16.0/toolbox:16.3-1.137 , suse/sles/16.0/toolbox:latest
Container Release     : 1.137
Severity              : moderate
Type                  : security
References            : 1269664 1280702 CVE-2026-13757 CVE-2026-18938 
-----------------------------------------------------------------

The container suse/sles/16.0/toolbox was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 1919
Released:    Thu Oct 15 14:13:14 2026
Summary:     Security update for p11-kit
Type:        security
Severity:    moderate
References:  1269664,1280702,CVE-2026-13757,CVE-2026-18938
This update for p11-kit fixes the following issues:

- CVE-2026-13757: Stack exhaustion via unbounded recursion in RPC attribute parsing (bsc#1269664).
- CVE-2026-18938: integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage
  on 32 bit systems (bsc#1280702).


The following package changes have been done:

- libp11-kit0-0.25.5-160000.3.1 updated
- p11-kit-tools-0.25.5-160000.3.1 updated
- p11-kit-0.25.5-160000.3.1 updated