SUSE-CU-2026:10409-1: Security update of trento/trento-web

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: trento/trento-web
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:10409-1
Container Tags        : trento/trento-web:3.1.5 , trento/trento-web:3.1.5-build4.62.10 , trento/trento-web:latest
Container Release     : 4.62.10
Severity              : important
Type                  : security
References            : 1242233 1243830 1260446 1274774 1274788 1274795 1277267 CVE-2026-54874
                        CVE-2026-63072 
-----------------------------------------------------------------

The container trento/trento-web was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3878-1
Released:    Mon Aug 31 11:12:55 2026
Summary:     Security update for openssl-1_1
Type:        security
Severity:    important
References:  1260446,1274774,1274788,1274795,CVE-2026-54874,CVE-2026-63072
This update for openssl-1_1 fixes the following issues:

- CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch (bsc#1274795).
- CVE-2026-63072: Heap Buffer Overflow in CMS Key Unwrapping (bsc#1274788).

Changes for openssl-1_1:

- August 2026 release (bsc#1274774)

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:3926-1
Released:    Thu Sep  3 02:04:11 2026
Summary:     Recommended update for crypto-policies
Type:        recommended
Severity:    important
References:  1242233,1243830,1277267
This update for crypto-policies fixes the following issues:

- Allow openssl to load when using the DEFAULT policy, and also
  other policies, in FIPS mode. (bsc#1243830, bsc#1242233, bsc#1277267)


The following package changes have been done:

- crypto-policies-20230920.570ea89-150600.3.19.1 updated
- libopenssl1_1-1.1.1w-150600.5.38.1 updated
- container:registry.suse.com-bci-bci-base-15.7-2cca9950fcbe26e5f70a49f9e6f035e27fd7bad46e0133996b8c557bcafe453b-0 updated