SUSE-CU-2026:12804-1: Security update of bci/bci-nano

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: bci/bci-nano
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:12804-1
Container Tags        : bci/bci-nano:15.7 , bci/bci-nano:15.7-12.21
Container Release     : 12.21
Severity              : important
Type                  : security
References            : 1279961 1286261 1287180 CVE-2026-114406 
-----------------------------------------------------------------

The container bci/bci-nano was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:4751-1
Released:    Tue Oct 20 11:21:20 2026
Summary:     Recommended update for ca-certificates-mozilla
Type:        recommended
Severity:    moderate
References:  1279961
This update for ca-certificates-mozilla fixes the following issues:

- Updated to 2.90 state (bsc#1279961):
    * Removed:
        + AffirmTrust Commercial
        + AffirmTrust Networking
        + AffirmTrust Premium
        + AffirmTrust Premium ECC
        + certSIGN ROOT CA
        + Entrust Root Certification Authority
        + PKI Root Certification Authority
        + FIRMAPROFESIONAL CA ROOT-A WEB
        + GLOBALTRUST 2020
        + Secure Global CA
        + SecureSign Root CA12
        + SecureTrust CA
        + TeliaSonera Root CA v1
        + Trustwave Global Certification Authority
        + Trustwave Global ECC P256 Certification Authority
        + Trustwave Global ECC P384 Certification Authority
        + XRamp Global Certification Authority
    * Added:
        + SECOM SMIME RSA Root CA 2024
        + SECOM TLS ECC Root CA 2024
        + SECOM TLS RSA Root CA 2024
        + SecureSign Root CA16
        + Telia EC Email Root CA v3
        + Telia EC TLS Root CA v3
        + Telia RSA Email Root CA v3
        + Telia RSA TLS Root CA v3

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:4758-1
Released:    Tue Oct 20 15:41:34 2026
Summary:     Recommended update for timezone
Type:        recommended
Severity:    moderate
References:  
This update for timezone fixes the following issues:

- Update to version 2026e:
    * Manitoba moves to permanent -05 on 2026-10-31
- Update to version 2026d:
    * Canada's Northwest Territories moved to permanent -06 on 2026-08-21
     * Obsolescent settings like TZ='EST5EDT' now conform better to POSIX
     * Fix security, performance and porting bugs in zic and localtime

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:4847-1
Released:    Fri Oct 23 15:10:44 2026
Summary:     Security update for ca-certificates-mozilla
Type:        security
Severity:    important
References:  1286261,1287180,CVE-2026-114406
This update for ca-certificates-mozilla fixes the following issue:
  
Updated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180)
Removed:
  
 - emSign ECC Root CA - C3
 - emSign ECC Root CA - G3
 - emSign Root CA - C1


The following package changes have been done:

- ca-certificates-mozilla-prebuilt-2.92-150200.50.3 updated
- timezone-2026e-150600.91.15.1 updated
- container:bci-bci-base-15.7-7a988cafacf98c38dc43b93d0035c8b3c00d83663d331707c6b2e40770739d31-0 updated