SUSE-IU-2026:4915-1: Security update of suse/sl-micro/6.2/rt-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.2/rt-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:4915-1
Image Tags        : suse/sl-micro/6.2/rt-os-container:2.3.1 , suse/sl-micro/6.2/rt-os-container:2.3.1-7.16 , suse/sl-micro/6.2/rt-os-container:latest
Image Release     : 7.16
Severity          : important
Type              : security
References        : 1252306 1253043 1257463 1266385 1268012 1268013 CVE-2026-11822
                        CVE-2026-11824 
-----------------------------------------------------------------

The container suse/sl-micro/6.2/rt-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 955
Released:    Thu Jun 18 23:01:36 2026
Summary:     Security update for sqlite3
Type:        security
Severity:    important
References:  1268012,1268013,CVE-2026-11822,CVE-2026-11824
This update for sqlite3 fixes the following issues

Update to 3.53.2:

- CVE-2026-11822: memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause
  process crashes, memory exhaustion, or arbitrary code execution (bsc#1268012).
- CVE-2026-11824: heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers
  to cause a crash or execute arbitrary code (bsc#1268013).

Changes:

 * Add the Query Result Formatter (QRF) library for formatting the
 results of SQL queries for human readability on a fixed-pitch
 font screen.
 * Enhance ALTER TABLE to permit adding and removing NOT NULL and
 CHECK constraints.
 * The REINDEX EXPRESSIONS statement rebuilds expression indexes.
 * The body of TEMP triggers may now modify and/or query tables
 in the main schema.
 * Enhance VACUUM INTO so that if a URI filename is used as the
 target and that filename has a reserve=N query parameter with
 N between 0 and 255, then the reserve amount for the generated
 database copy is set to N.
 * New SQL functions json_array_insert() and jsonb_array_insert().
 * Renovations to the CLI.
 * New C-language interfaces: sqlite3_str_truncate(),
 sqlite3_str_free(), sqlite3_carray_bind_v2().
 * Add the SQLITE_PREPARE_FROM_DDL option to sqlite3_prepare_v3().
 * Added the SQLITE_UTF8_ZT constant which can be used as the
 encoding parameter to sqlite3_result_text64() or
 sqlite3_bind_text64() to indicate that the value is UTF-8
 encoded and zero terminated.
 * The SQLITE_LIMIT_PARSER_DEPTH option is added to
 sqlite3_limit().
 * The SQLITE_DBCONFIG_FP_DIGITS option is added to
 sqlite3_db_config().
 * Query planner improvements.
 * Add new interfaces to the session extension that enable an
 application to add changes one at a time to the
 sqlite3_changegroup object.
 * Improvements to floating-point <-> text conversions.
 * Added the self-healing index feature to deal with the stale
 expression index problem.
 * Add the '-p|--port' option to sqlite3_rsync.
 * Add the 'opfs-wl' VFS, functionally identical to the 'opfs' VFS
 but using Web Locks for locking, which can promise fairer lock
 sharing than the 'opfs' bespoke protocol can. 'opfs-wl'
 requires Atomics.waitAsync(), so requires newer browsers than
 'opfs' does.
 * Fixes for problems in 3.53.0 and 3.53.1 reported by users.
 * See the check-in timeline for details:
 https://sqlite.org/src/timeline?from=version-3.53.0&to=version-3.53.2

 * https://sqlite.org/releaselog/3_53_0.html

-----------------------------------------------------------------
Advisory ID: 959
Released:    Fri Jun 19 07:10:33 2026
Summary:     Recommended update for libsemanage
Type:        recommended
Severity:    important
References:  1266385
This update for libsemanage fixes the following issues:

- Depend on libso before make pywrap is executed to avoid race conditions (bsc#1266385)
- Add CFLAGS to %make_install call for consistency with %make_build

-----------------------------------------------------------------
Advisory ID: 964
Released:    Fri Jun 19 16:14:03 2026
Summary:     Recommended update for gcc15
Type:        recommended
Severity:    important
References:  1252306,1253043,1257463
This update for gcc15 fixes the following issues:

Changes in gcc15:

- Update to GCC 15.3 release
- Drop -fhardened from RPM_OPT_FLAGS
- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)
- Allow conversions from time_t to/from uint32_t.
  Filter out -Wtime_t-conversion from flags to build D target library files.
- SUSE-local -Wtime_t-conversion patch added.  [jsc#PED-15601]
- Fix for bogus expression simplification [bsc#1257463]
- Enable the use of _dl_find_object even when not available at build time.
  [bsc#1253043]
- Fix that cures a miscompile of libgo on arm.  [bsc#1252306]
- Fixes PR110812, Check availability of builtins at expand time


The following package changes have been done:

- libsemanage-conf-3.8.1-160000.3.1 updated
- libsqlite3-0-3.53.2-160000.1.1 updated
- libgcc_s1-15.3.0+git11272-160000.1.1 updated
- libstdc++6-15.3.0+git11272-160000.1.1 updated
- libsemanage2-3.8.1-160000.3.1 updated
- container:suse-sl-micro-6.2-baremetal-os-container-latest-45c10b6d20c34e14591f20eea5533005835871d954dcd298116f5772f7b429cc-0 updated