SUSE-CU-2026:12752-1: Security update of suse/ltss/sle15.5/sle15

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/ltss/sle15.5/sle15
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:12752-1
Container Tags        : suse/ltss/sle15.5/bci-base:15.5 , suse/ltss/sle15.5/bci-base:15.5-8.80 , suse/ltss/sle15.5/sle15:15.5 , suse/ltss/sle15.5/sle15:15.5-8.80 , suse/ltss/sle15.5/sle15:latest
Container Release     : 8.80
Severity              : important
Type                  : security
References            : 1284687 1286261 1287180 CVE-2026-107161 CVE-2026-114406 
-----------------------------------------------------------------

The container suse/ltss/sle15.5/sle15 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:4817-1
Released:    Wed Oct 21 12:12:13 2026
Summary:     Security update for cyrus-sasl
Type:        security
Severity:    important
References:  1284687,CVE-2026-107161
This update for cyrus-sasl fixes the following issue:

- CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise
  DIGEST-MD5 clients (bsc#1284687).

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:4847-1
Released:    Fri Oct 23 15:10:44 2026
Summary:     Security update for ca-certificates-mozilla
Type:        security
Severity:    important
References:  1286261,1287180,CVE-2026-114406
This update for ca-certificates-mozilla fixes the following issue:
  
Updated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180)
Removed:
  
 - emSign ECC Root CA - C3
 - emSign ECC Root CA - G3
 - emSign Root CA - C1


The following package changes have been done:

- ca-certificates-mozilla-2.92-150200.50.2 updated
- libsasl2-3-2.1.28-150500.3.12.1 updated