Summary
This update for apptainer contains the following fixes:
Security fixes included on this update:
- CVE-2026-2303: go.mongodb.org/mongo-driver: Heap Out-of-Bounds Read in GSSAPI Error Handling (bsc#1270529).
Other fixes:
- Enable building of SUID starter for SLES 15 (jsc#PED-16347).
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLES 15 SP7 Linux Enterprise Module for HPC 15 SP7 | apptainer | 1.5.1-150600.4.29.1 |
| SUSE · SLES 15 SP7 Linux Enterprise Module for HPC 15 SP7 | squashfuse | 0.5.0-150600.3.4.1 |
| SUSE · SLES 15 SP7 Linux Enterprise Module for Package Hub 15 SP7 | apptainer | 1.5.1-150600.4.29.1 |
| SUSE · SLES 15 SP7 Linux Enterprise Module for Package Hub 15 SP7 | squashfuse | 0.5.0-150600.3.4.1 |
Vulnerabilities 1
-
Medium 6.5
Heap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leak
The mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI sta…