SUSE-CU-2026:6273-1: Security update of suse/sles/16.0/toolbox

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sles/16.0/toolbox
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:6273-1
Container Tags        : suse/sles/16.0/toolbox:16.3 , suse/sles/16.0/toolbox:16.3-1.82 , suse/sles/16.0/toolbox:latest
Container Release     : 1.82
Severity              : moderate
Type                  : security
References            : 1232226 1259924 1261254 CVE-2025-69720 
-----------------------------------------------------------------

The container suse/sles/16.0/toolbox was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 1004
Released:    Sat Jun 20 20:11:34 2026
Summary:     Security update for ncurses
Type:        security
Severity:    moderate
References:  1259924,CVE-2025-69720
This update for ncurses fixes the following issue:

- CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).

-----------------------------------------------------------------
Advisory ID: 1000
Released:    Sat Jun 20 20:12:39 2026
Summary:     Recommended update for netcfg
Type:        recommended
Severity:    moderate
References:  
This update for netcfg fixes the following issues:

- Clarify /etc/services removal message

-----------------------------------------------------------------
Advisory ID: 1003
Released:    Sat Jun 20 20:14:55 2026
Summary:     Recommended update for ltrace
Type:        recommended
Severity:    moderate
References:  
This update for ltrace fixes the following issues:

- Give a hint when ltrace -p fails on a system where yama is active (jsc#PED-15928).
- update to 0.8.1:
    * Bugfixes
    * include config.h in more cases to fix LTO builds
- Update to ltrace 0.8.0:
    * Each DSO can now ship an ltrace config file (called prototype
       library) that ltrace will open when that DSO is loaded to process image
    * The option -F was retrofitted to be a colon-separated list of
      prototype libraries, and directories to look for prototype libraries in
    * Wide character strings are supported in prototypes
    * Sole void function parameter is now considered obsolete
    * Prototypes are now read from DWARF debug info, if available
    * RISC-V initial support included
    * MIPS and MIPSel are now handled by the same backend
    * ARMv6, ARMv7 and ARMv8 (AArch64) are supported, including full fetch backend
    * Imagination Technologies Meta is now supported
    * PowerPC64 ELFv2 little-endian ABI is now supported including full fetch backend
    * Cadence Tensilica Xtensa is now supported
    * LoongArch is now supported
    * On Linux, tracing of IFUNC symbols is supported
    * -w output now shows full library path
- Enable build on loongarch64

-----------------------------------------------------------------
Advisory ID: 996
Released:    Sat Jun 20 20:17:58 2026
Summary:     Recommended update for libselinux
Type:        recommended
Severity:    moderate
References:  1232226
This update for libselinux fixes the following issues:

- Backport patch for restorecon to log error on readonly fs (bsc#1232226)

-----------------------------------------------------------------
Advisory ID: 1002
Released:    Sat Jun 20 20:57:06 2026
Summary:     Recommended update for gdb
Type:        recommended
Severity:    moderate
References:  1261254
This update for gdb fixes the following issues:

- Reduce scope of debuginfo query workaround.
  No longer require 'set debuginfod enabled off' in .gdbearlyinit or similar to be
  able to use 'gdb -tui' (bsc#1261254).
- Report helpful error on ptrace permission denied due to
  yama/selinux (jsc#PED-15928).


The following package changes have been done:

- gdb-16.3-160000.5.1 updated
- libncurses6-6.5.20250531-160000.3.1 updated
- libselinux1-3.8.1-160000.4.1 updated
- ltrace-0.8.1-160000.1.1 updated
- ncurses-utils-6.5.20250531-160000.3.1 updated
- netcfg-11.6-160000.3.1 updated
- terminfo-base-6.5.20250531-160000.3.1 updated