SUSE-CU-2026:10312-1: Recommended update of suse/sles/16.0/toolbox

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sles/16.0/toolbox
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:10312-1
Container Tags        : suse/sles/16.0/toolbox:16.3 , suse/sles/16.0/toolbox:16.3-1.120 , suse/sles/16.0/toolbox:latest
Container Release     : 1.120
Severity              : important
Type                  : recommended
References            : 1239787 
-----------------------------------------------------------------

The container suse/sles/16.0/toolbox was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 1658
Released:    Thu Sep 10 15:05:39 2026
Summary:     Recommended update for openldap2_6
Type:        recommended
Severity:    important
References:  1239787
This update for openldap2_6 fixes the following issues:

Changes in openldap2_6:

- Update to version 2.6.13+157:
    * Add export symbols related to LDAP_CONNECTIONLESS
    * Clear after free:
        + Cleaning up memory and immediately erasing the pointer's memory address
    * prevent double free:
        + Ensuring the application never releases the exact same block of memory twice
    * liblber calloc:
        + OpenLDAP's specialized memory allocator that automatically wipes memory clean
    * Fix: openldap2_5: segfault when try to add bad escaped regex (bsc#1239787):
        + prevent double free in info rewrite
    * Set default ldapi path to be consistent for SUSE
    * guide.html file cherry-picked from
      https://src.opensuse.org/jengelh/openldap2/src/branch/master/openldap-2.6.8.tgz
    * Use OpenSSL API to verify host
    * Change malloc to use calloc to prevent memory reuse corruption
    * Return to release engineering


The following package changes have been done:

- libldap-2-2.6.13+157-160000.1.1 updated
- libldap-data-2.6.13+157-160000.1.1 updated