SUSE-CU-2026:13086-1: Security update of suse/sles/16.0/pr-helper

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sles/16.0/pr-helper
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:13086-1
Container Tags        : suse/sles/16.0/pr-helper:1.9 , suse/sles/16.0/pr-helper:1.9.0 , suse/sles/16.0/pr-helper:1.9.0-2.14
Container Release     : 2.14
Severity              : moderate
Type                  : security
References            : 1269664 1280702 CVE-2026-13757 CVE-2026-18938 
-----------------------------------------------------------------

The container suse/sles/16.0/pr-helper was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 1919
Released:    Thu Oct 15 14:13:14 2026
Summary:     Security update for p11-kit
Type:        security
Severity:    moderate
References:  1269664,1280702,CVE-2026-13757,CVE-2026-18938
This update for p11-kit fixes the following issues:

- CVE-2026-13757: Stack exhaustion via unbounded recursion in RPC attribute parsing (bsc#1269664).
- CVE-2026-18938: integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage
  on 32 bit systems (bsc#1280702).


The following package changes have been done:

- libp11-kit0-0.25.5-160000.3.1 updated
- container:bci-bci-base-16.0-39a38872e92189c7c57525613fa323daca9a75f495756b666dd83901de379a6b-0 updated