SUSE-CU-2026:12803-1: Security update of bci/bci-minimal
sle-container-updates at lists.suse.com
sle-container-updates at lists.suse.com
Sat Oct 24 14:00:27 UTC 2026
SUSE Container Update Advisory: bci/bci-minimal
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:12803-1
Container Tags : bci/bci-minimal:15.7 , bci/bci-minimal:15.7-26.76 , bci/bci-minimal:latest
Container Release : 26.76
Severity : important
Type : security
References : 1272616 1277919 1279961 1286261 1287180 CVE-2026-114406
-----------------------------------------------------------------
The container bci/bci-minimal was updated. The following patches have been included in this update:
-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:4751-1
Released: Tue Oct 20 11:21:20 2026
Summary: Recommended update for ca-certificates-mozilla
Type: recommended
Severity: moderate
References: 1279961
This update for ca-certificates-mozilla fixes the following issues:
- Updated to 2.90 state (bsc#1279961):
* Removed:
+ AffirmTrust Commercial
+ AffirmTrust Networking
+ AffirmTrust Premium
+ AffirmTrust Premium ECC
+ certSIGN ROOT CA
+ Entrust Root Certification Authority
+ PKI Root Certification Authority
+ FIRMAPROFESIONAL CA ROOT-A WEB
+ GLOBALTRUST 2020
+ Secure Global CA
+ SecureSign Root CA12
+ SecureTrust CA
+ TeliaSonera Root CA v1
+ Trustwave Global Certification Authority
+ Trustwave Global ECC P256 Certification Authority
+ Trustwave Global ECC P384 Certification Authority
+ XRamp Global Certification Authority
* Added:
+ SECOM SMIME RSA Root CA 2024
+ SECOM TLS ECC Root CA 2024
+ SECOM TLS RSA Root CA 2024
+ SecureSign Root CA16
+ Telia EC Email Root CA v3
+ Telia EC TLS Root CA v3
+ Telia RSA Email Root CA v3
+ Telia RSA TLS Root CA v3
-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:4767-1
Released: Tue Oct 20 16:10:43 2026
Summary: Recommended update for gcc16
Type: recommended
Severity: moderate
References: 1272616,1277919
This update for gcc16 fixes the following issues:
This update ships the GNU Compiler Collection GCC 16.2. (jsc#PED-16807)
The compiler runtime libraries are provided for all SUSE Linux Enterprise 15
versions and replace the same named GCC 15 ones.
The new compilers for C, C++, and Fortran are provided for SUSE Linux
Enterprise 15 SP7 in the 'Development Tools' module.
The Go, D, Ada and Modula 2 language compiler parts are available
unsupported via the PackageHub repositories.
To use gcc16 compilers use:
- install 'gcc16' or 'gcc16-c++' or one of the other 'gcc16-COMPILER' frontend packages.
- override your Makefile to use CC=gcc16, CXX=g++16 and similar overrides for the other languages.
For a full changelog with all new GCC16 features, check out
https://gcc.gnu.org/gcc-16/changes.html
More changes:
- Fix build reproducability when PCH is used
- Fix auto-detection of Zen6 [bsc#1277919]
- Remove support for s390, make sure to configure s390x with
--disable-multilib to avoid configury error without explicit
disable of multilibs. Support for s390 is officially deprecated.
- Build a full cross-x86_64 compiler [bsc#1272616], but not on %ix86
- Streamline AMD GCN enablement and configuration by basing it on
LLVM version availability. Support llvm19 and up.
- Fix bootstrap cross compiler packaging and simplify handling
by properly requesting suffixed binaries from configury.
- Only package version suffixed binaries in %gcc_libc_bootstrap
packages, drop LTO related tools from them. This makes them
co-installable between different GCC versions.
- Going forward no longer register alternatives via update-alternatives
for %gcc_libc_bootstrap packages, even on older distros.
- Avoid conflicts between %gcc_libc_bootstrap packages of different
versions if update-alternatives are still in use (SLE 15 and older)
- Wipe all icecream backend build support from the spec file.
- Avoids intermittent ABI breakage for libgccjit
- Package libquadmath independently of fortran
- Disable rust build for Factory by default again as it still
requires cargo for building. Add %bcond_with gcc_rust to allow
override.
- Filter out -Wtime_t conversion from D build flags.
- Package libcaf_shmem.a
- Update libgphobos and libgdruntime for SONAME bump
- Remove loongarch64 from quadmath_arch. On LoongArch long double
is IEEE quad, so libquadmath is not needed and no longer built.
- Update embedded newlib to 4.6.0.20260123
- Add Algol68 packages.
- Add gfx9-4-generic multilib for amdgcn, link llvm-objdump to local
tools
- Take patches inherited from GCC 15:
* add the ability to provide a specs file that is read by default
* avoid direct %fs references on x86 to not slow down Xen
* do not produce unwind tables for CRT files
* fix expansion of __builtin_return_addr for ppc, just a testcase
* make translation files version specific and adjust textdomain to find them
* fix cross-references in info files when renaming them to be version specific
* fix link in the installed libstdc++ html documentation
* removes new warning from -Wextra
* default to -gdwarf-4 on old products
* enable the use of _dl_find_object even when not available at build time
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:4847-1
Released: Fri Oct 23 15:10:44 2026
Summary: Security update for ca-certificates-mozilla
Type: security
Severity: important
References: 1286261,1287180,CVE-2026-114406
This update for ca-certificates-mozilla fixes the following issue:
Updated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180)
Removed:
- emSign ECC Root CA - C3
- emSign ECC Root CA - G3
- emSign Root CA - C1
The following package changes have been done:
- ca-certificates-mozilla-prebuilt-2.92-150200.50.3 updated
- libgcc_s1-16.2.0+git9497-150000.1.3.3 updated
- libstdc++6-16.2.0+git9497-150000.1.3.3 updated
More information about the sle-container-updates
mailing list