SUSE-CU-2026:8395-1: Security update of suse/sles/16.0/toolbox
sle-container-updates at lists.suse.com
sle-container-updates at lists.suse.com
Wed Aug 5 19:18:35 UTC 2026
SUSE Container Update Advisory: suse/sles/16.0/toolbox
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:8395-1
Container Tags : suse/sles/16.0/toolbox:16.3 , suse/sles/16.0/toolbox:16.3-1.104 , suse/sles/16.0/toolbox:latest
Container Release : 1.104
Severity : important
Type : security
References : 1254243 1261038 1261038 1262094 1262684 1266304 1266361 1268321
1268321 1268349 1270008 1270009 1270010 1270016 1270018 1270021
1271351 1271352 1271354 1271372 1271386 CVE-2025-15649 CVE-2026-12087
CVE-2026-13221 CVE-2026-40467 CVE-2026-40468 CVE-2026-40553 CVE-2026-41989
CVE-2026-57432 CVE-2026-58010 CVE-2026-58011 CVE-2026-58012 CVE-2026-58013
CVE-2026-58014 CVE-2026-58016 CVE-2026-8376
-----------------------------------------------------------------
The container suse/sles/16.0/toolbox was updated. The following patches have been included in this update:
-----------------------------------------------------------------
Advisory ID: 656
Released: Wed Apr 29 14:59:08 2026
Summary: Recommended update for crmsh
Type: recommended
Severity: important
References: 1254243,1261038,1262094,1268321
This update for crmsh fixes the following issues:
- Update to version 5.0.0+20260420.f7e8ecad:
* Dev: utils: Improve check_port_open to concurrently try all addresses (bsc#1262094)
* Dev: qdevice: Remove unused codes
* Fix: bootstrap: On join node, retrieve qdevice certification files before starting qdevice (bsc#1254243)
-----------------------------------------------------------------
Advisory ID: 1294
Released: Mon Jul 20 11:26:51 2026
Summary: Security update for libgcrypt
Type: security
Severity: moderate
References: 1262684,CVE-2026-41989
This update for libgcrypt fixes the following issue
- CVE-2026-41989: crafted ECDH ciphertext can lead denial of service (bsc#1262684).
-----------------------------------------------------------------
Advisory ID: 1303
Released: Mon Jul 20 15:44:04 2026
Summary: Security update for gawk
Type: security
Severity: moderate
References: 1271351,1271352,1271354,CVE-2026-40467,CVE-2026-40468,CVE-2026-40553
This update for gawk fixes the following issues:
- CVE-2026-40467: use-after-free vulnerability within the do_getline_redir() routine could lead to a program crash
(bsc#1271351).
- CVE-2026-40468: use-after-free vulnerability in gawk's 'io.c' file could permit heap metadata manipulation and host
memory exhaustion (bsc#1271352).
- CVE-2026-40553: buffer overflow in the ftype() routine of the readdir extension could trigger a program crash
(bsc#1271354).
-----------------------------------------------------------------
Advisory ID: 1320
Released: Wed Jul 22 10:35:52 2026
Summary: Security update for glib2
Type: security
Severity: important
References: 1270008,1270009,1270010,1270016,1270018,1270021,CVE-2026-58010,CVE-2026-58011,CVE-2026-58012,CVE-2026-58013,CVE-2026-58014,CVE-2026-58016
This update for glib2 fixes the following issues:
- CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read
(bsc#1270009).
- CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte out-of-bounds read (bsc#1270010).
- CVE-2026-58012: raw byte regex matches with UTF-8 functions during case-change replacements could cause an out-of-
bounds read (bsc#1270016).
- CVE-2026-58013: multi-byte custom line terminator in g_io_channel_read_line_backend could trigger an out-of-bounds
read (bsc#1270018).
- CVE-2026-58014: processing empty key file values in g_key_file_get_locale_string_list could cause a 1-byte out-of-
bounds access (bsc#1270021).
- CVE-2026-58016: malformed D-Bus introspection XML could trigger an unsigned integer overflow (bsc#1270008).
-----------------------------------------------------------------
Advisory ID: 1321
Released: Wed Jul 22 10:44:23 2026
Summary: Security update for perl
Type: security
Severity: important
References: 1266304,1266361,1268349,1271372,1271386,CVE-2025-15649,CVE-2026-12087,CVE-2026-13221,CVE-2026-57432,CVE-2026-8376
This update for perl fixes the following issues:
- CVE-2025-15649: `IO:Uncompress:Unzip` propagates uncaught exception when parsing zip header with malformed DOS date
(bsc#1266361).
- CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds
(bsc#1266304).
- CVE-2026-12087: `Socket`'s `pack_ip_mreq_source()` can copy adjacent heap memory into the returned packed structure
(bsc#1268349).
- CVE-2026-57432: an integer overflow in `S_measure_struct` leads to an out-of-bounds heap read in `pack` and `unpack`
(bsc#1271372).
- CVE-2026-13221: regex trie branch-count overflow leads to silent false-positive/negative pattern matching
(bsc#1271386).
-----------------------------------------------------------------
Advisory ID: 1314
Released: Wed Jul 22 10:53:42 2026
Summary: Recommended update for libzypp
Type: recommended
Severity: important
References: 1261038,1268321
This update for libzypp fixes the following issues:
Changes in libzypp:
Update to version 17.38.14 (35):
- zypp.conf: add solver.NoUpdateProvide (default: false) option.
In general, packages that obsolete another package are treated as
update candidates for the obsoleted package. However,
SUSE-specific update rules prefer candidates that also explicitly
'provide' the obsoleted package.
Sometimes it is necessary or helpful to disable this rule.
(may help in bsc#1261038)
- Use HttpHeader class for defining host specific http headers
(bsc#1268321)
- Compile and link with -fPIE to build on sparc64 (fixes #742)
The following package changes have been done:
- gawk-5.3.2-160000.3.1 updated
- libgcrypt20-1.12.1-160000.3.1 updated
- libglib-2_0-0-2.84.4-160000.4.1 updated
- libgmodule-2_0-0-2.84.4-160000.4.1 updated
- libzypp-17.38.14-160000.1.1 updated
- perl-base-5.42.0-160000.3.1 updated
- perl-5.42.0-160000.3.1 updated
More information about the sle-container-updates
mailing list