SUSE-CU-2026:12779-1: Security update of bci/golang
sle-container-updates at lists.suse.com
sle-container-updates at lists.suse.com
Sat Oct 24 13:50:32 UTC 2026
SUSE Container Update Advisory: bci/golang
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:12779-1
Container Tags : bci/golang:1.26 , bci/golang:1.26-sles15 , bci/golang:1.26.10 , bci/golang:1.26.10-2.74.15 , bci/golang:oldstable
Container Release : 74.15
Severity : important
Type : security
References : 1255111 1259515 1272616 1277919 1284687 1284770 1284772 1286261
1286317 CVE-2026-107161 CVE-2026-111943 CVE-2026-78663 CVE-2026-78669
-----------------------------------------------------------------
The container bci/golang was updated. The following patches have been included in this update:
-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:4767-1
Released: Tue Oct 20 16:10:43 2026
Summary: Recommended update for gcc16
Type: recommended
Severity: moderate
References: 1272616,1277919
This update for gcc16 fixes the following issues:
This update ships the GNU Compiler Collection GCC 16.2. (jsc#PED-16807)
The compiler runtime libraries are provided for all SUSE Linux Enterprise 15
versions and replace the same named GCC 15 ones.
The new compilers for C, C++, and Fortran are provided for SUSE Linux
Enterprise 15 SP7 in the 'Development Tools' module.
The Go, D, Ada and Modula 2 language compiler parts are available
unsupported via the PackageHub repositories.
To use gcc16 compilers use:
- install 'gcc16' or 'gcc16-c++' or one of the other 'gcc16-COMPILER' frontend packages.
- override your Makefile to use CC=gcc16, CXX=g++16 and similar overrides for the other languages.
For a full changelog with all new GCC16 features, check out
https://gcc.gnu.org/gcc-16/changes.html
More changes:
- Fix build reproducability when PCH is used
- Fix auto-detection of Zen6 [bsc#1277919]
- Remove support for s390, make sure to configure s390x with
--disable-multilib to avoid configury error without explicit
disable of multilibs. Support for s390 is officially deprecated.
- Build a full cross-x86_64 compiler [bsc#1272616], but not on %ix86
- Streamline AMD GCN enablement and configuration by basing it on
LLVM version availability. Support llvm19 and up.
- Fix bootstrap cross compiler packaging and simplify handling
by properly requesting suffixed binaries from configury.
- Only package version suffixed binaries in %gcc_libc_bootstrap
packages, drop LTO related tools from them. This makes them
co-installable between different GCC versions.
- Going forward no longer register alternatives via update-alternatives
for %gcc_libc_bootstrap packages, even on older distros.
- Avoid conflicts between %gcc_libc_bootstrap packages of different
versions if update-alternatives are still in use (SLE 15 and older)
- Wipe all icecream backend build support from the spec file.
- Avoids intermittent ABI breakage for libgccjit
- Package libquadmath independently of fortran
- Disable rust build for Factory by default again as it still
requires cargo for building. Add %bcond_with gcc_rust to allow
override.
- Filter out -Wtime_t conversion from D build flags.
- Package libcaf_shmem.a
- Update libgphobos and libgdruntime for SONAME bump
- Remove loongarch64 from quadmath_arch. On LoongArch long double
is IEEE quad, so libquadmath is not needed and no longer built.
- Update embedded newlib to 4.6.0.20260123
- Add Algol68 packages.
- Add gfx9-4-generic multilib for amdgcn, link llvm-objdump to local
tools
- Take patches inherited from GCC 15:
* add the ability to provide a specs file that is read by default
* avoid direct %fs references on x86 to not slow down Xen
* do not produce unwind tables for CRT files
* fix expansion of __builtin_return_addr for ppc, just a testcase
* make translation files version specific and adjust textdomain to find them
* fix cross-references in info files when renaming them to be version specific
* fix link in the installed libstdc++ html documentation
* removes new warning from -Wextra
* default to -gdwarf-4 on old products
* enable the use of _dl_find_object even when not available at build time
-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:4792-1
Released: Wed Oct 21 09:08:51 2026
Summary: Recommended update for crypto-policies
Type: recommended
Severity: moderate
References: 1259515
This update for crypto-policies fixes the following issues:
- Disable umac-128* in DEFAULT, FUTURE and BSI openssh policies (bsc#1259515)
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:4836-1
Released: Wed Oct 21 14:52:06 2026
Summary: Security update for cyrus-sasl
Type: security
Severity: important
References: 1284687,CVE-2026-107161
This update for cyrus-sasl fixes the following issue:
- CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise
DIGEST-MD5 clients (bsc#1284687).
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:4864-1
Released: Thu Oct 22 15:36:43 2026
Summary: Security update for go1.26
Type: security
Severity: important
References: 1255111,1284770,1284772,1286261,1286317,CVE-2026-111943,CVE-2026-78663,CVE-2026-78669
This update for go1.26 fixes the following issues:
Update to go1.26.10 (bsc#1255111):
- CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770).
- CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes (bsc#1284772).
- CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317,
bsc#1286261).
The following package changes have been done:
- crypto-policies-20250714.cd6043a-150700.6.7.1 updated
- libsasl2-3-2.1.28-150600.7.17.1 updated
- libgcc_s1-16.2.0+git9497-150000.1.3.3 updated
- libstdc++6-16.2.0+git9497-150000.1.3.3 updated
- go1.26-doc-1.26.10-150000.1.36.1 updated
- libatomic1-16.2.0+git9497-150000.1.3.3 updated
- libgomp1-16.2.0+git9497-150000.1.3.3 updated
- libitm1-16.2.0+git9497-150000.1.3.3 updated
- liblsan0-16.2.0+git9497-150000.1.3.3 updated
- go1.26-1.26.10-150000.1.36.1 updated
- go1.26-race-1.26.10-150000.1.36.1 updated
- container:registry.suse.com-bci-bci-base-15.7-9fee2c5dbc3947c350f79e4d8bfae4b8dbbbc3d2c666e67a6d4bf7d6606e0b8e-0 updated
More information about the sle-container-updates
mailing list