SUSE-CU-2026:12867-1: Security update of bci/rust

Sun Oct 25 09:48:29 UTC 2026

SUSE Container Update Advisory: bci/rust
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:12867-1
Container Tags        : bci/rust:1.98 , bci/rust:1.98-sles15 , bci/rust:1.98.1 , bci/rust:1.98.1-1.2.25 , bci/rust:latest , bci/rust:stable
Container Release     : 2.25
Severity              : important
Type                  : security
References            : 1259515 1272616 1277919 1284687 CVE-2026-107161 
-----------------------------------------------------------------

The container bci/rust was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:4767-1
Released:    Tue Oct 20 16:10:43 2026
Summary:     Recommended update for gcc16
Type:        recommended
Severity:    moderate
References:  1272616,1277919
This update for gcc16 fixes the following issues:

This update ships the GNU Compiler Collection GCC 16.2. (jsc#PED-16807)

The compiler runtime libraries are provided for all SUSE Linux Enterprise 15
versions and replace the same named GCC 15 ones.

The new compilers for C, C++, and Fortran are provided for SUSE Linux
Enterprise 15 SP7 in the 'Development Tools' module.

The Go, D, Ada and Modula 2 language compiler parts are available
unsupported via the PackageHub repositories.

To use gcc16 compilers use:

- install 'gcc16' or 'gcc16-c++' or one of the other 'gcc16-COMPILER' frontend packages.
- override your Makefile to use CC=gcc16, CXX=g++16 and similar overrides for the other languages.

For a full changelog with all new GCC16 features, check out

	https://gcc.gnu.org/gcc-16/changes.html

More changes:

- Fix build reproducability when PCH is used
- Fix auto-detection of Zen6 [bsc#1277919]
- Remove support for s390, make sure to configure s390x with
  --disable-multilib to avoid configury error without explicit
  disable of multilibs.  Support for s390 is officially deprecated.
- Build a full cross-x86_64 compiler [bsc#1272616], but not on %ix86
- Streamline AMD GCN enablement and configuration by basing it on
  LLVM version availability.  Support llvm19 and up.
- Fix bootstrap cross compiler packaging and simplify handling
  by properly requesting suffixed binaries from configury.
- Only package version suffixed binaries in %gcc_libc_bootstrap
  packages, drop LTO related tools from them.  This makes them
  co-installable between different GCC versions.
- Going forward no longer register alternatives via update-alternatives
  for %gcc_libc_bootstrap packages, even on older distros.
- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)
- Wipe all icecream backend build support from the spec file.
- Avoids intermittent ABI breakage for libgccjit
- Package libquadmath independently of fortran
- Disable rust build for Factory by default again as it still
  requires cargo for building.  Add %bcond_with gcc_rust to allow
  override.
- Filter out -Wtime_t conversion from D build flags.
- Package libcaf_shmem.a
- Update libgphobos and libgdruntime for SONAME bump
- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.
- Update embedded newlib to 4.6.0.20260123
- Add Algol68 packages.
- Add gfx9-4-generic multilib for amdgcn, link llvm-objdump to local
  tools

- Take patches inherited from GCC 15:
  * add the ability to provide a specs file that is read by default
  * avoid direct %fs references on x86 to not slow down Xen
  * do not produce unwind tables for CRT files
  * fix expansion of __builtin_return_addr for ppc, just a testcase
  * make translation files version specific and adjust textdomain to find them
  * fix cross-references in info files when renaming them to be version specific
  * fix link in the installed libstdc++ html documentation
  * removes new warning from -Wextra
  * default to -gdwarf-4 on old products
  * enable the use of _dl_find_object even when not available at build time

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:4792-1
Released:    Wed Oct 21 09:08:51 2026
Summary:     Recommended update for crypto-policies
Type:        recommended
Severity:    moderate
References:  1259515
This update for crypto-policies fixes the following issues:

- Disable umac-128* in DEFAULT, FUTURE and BSI openssh policies (bsc#1259515)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:4836-1
Released:    Wed Oct 21 14:52:06 2026
Summary:     Security update for cyrus-sasl
Type:        security
Severity:    important
References:  1284687,CVE-2026-107161
This update for cyrus-sasl fixes the following issue:

- CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise
  DIGEST-MD5 clients (bsc#1284687).

The following package changes have been done:

- crypto-policies-20250714.cd6043a-150700.6.7.1 updated
- libsasl2-3-2.1.28-150600.7.17.1 updated
- libgcc_s1-16.2.0+git9497-150000.1.3.3 updated
- libstdc++6-16.2.0+git9497-150000.1.3.3 updated
- libasan8-16.2.0+git9497-150000.1.3.3 updated
- libatomic1-16.2.0+git9497-150000.1.3.3 updated
- libgomp1-16.2.0+git9497-150000.1.3.3 updated
- libhwasan0-16.2.0+git9497-150000.1.3.3 updated
- libitm1-16.2.0+git9497-150000.1.3.3 updated
- liblsan0-16.2.0+git9497-150000.1.3.3 updated
- libtsan2-16.2.0+git9497-150000.1.3.3 updated
- libubsan1-16.2.0+git9497-150000.1.3.3 updated
- container:registry.suse.com-bci-bci-base-15.7-9fee2c5dbc3947c350f79e4d8bfae4b8dbbbc3d2c666e67a6d4bf7d6606e0b8e-0 updated