SUSE-CU-2026:12667-1: Security update of private-registry/harbor-portal

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: private-registry/harbor-portal
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:12667-1
Container Tags        : private-registry/harbor-portal:1.1.4 , private-registry/harbor-portal:1.1.4-2.163 , private-registry/harbor-portal:latest
Container Release     : 2.163
Severity              : moderate
Type                  : security
References            : 1259515 1283183 CVE-2026-46675 
-----------------------------------------------------------------

The container private-registry/harbor-portal was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:4792-1
Released:    Wed Oct 21 09:08:51 2026
Summary:     Recommended update for crypto-policies
Type:        recommended
Severity:    moderate
References:  1259515
This update for crypto-policies fixes the following issues:

- Disable umac-128* in DEFAULT, FUTURE and BSI openssh policies (bsc#1259515)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:4796-1
Released:    Wed Oct 21 09:53:08 2026
Summary:     Security update for libpng16
Type:        security
Severity:    moderate
References:  1283183,CVE-2026-46675
This update for libpng16 fixes the following issue:

- CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression
  (bsc#1283183).

Changes for libpng16:

- version update to 1.6.59:
 * Fixed a regression introduced in version 1.6.47 that caused libpng to reject
   hIST chunks in their correct position, after PLTE.
 * Prevented a double free of `png_struct` members after an allocation failure.
 * Applied fixes and updates to the CMake build.
 * Adopted the REUSE Specification for licensing the CI files.


The following package changes have been done:

- crypto-policies-20250714.cd6043a-150700.6.7.1 updated
- libpng16-16-1.6.59-150600.3.26.1 updated
- system-user-harbor-2.14.5-150700.1.5 updated
- harbor-portal-2.14.5-150700.1.5 updated