SUSE-RU-2026:2815-1

MEDIUM5.4

Recommended update for apptainer

Published Jul 9, 2026

Modified 1 months ago

Fix available

Details

Description of the patch:

This update for apptainer contains the following fixes:

Security fixes included on this update:

CVE-2026-2303: go.mongodb.org/mongo-driver: Heap Out-of-Bounds Read in GSSAPI Error Handling (bsc#1270529).

Other fixes:

Enable building of SUID starter for SLES 15 (jsc#PED-16347).

Affected Packages

apptainer

SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for HPC 15 SP7SUSE Linux Enterprise Module for Package Hub 15 SP7

Fixed in:

1.5.1-150600.4.29.1

apptainer-sle15_7

SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for HPC 15 SP7

Fixed in:

1.5.1-150600.4.29.1

libsquashfuse0

SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for HPC 15 SP7

Fixed in:

0.5.0-150600.3.4.1

squashfuse

SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for HPC 15 SP7SUSE Linux Enterprise Module for Package Hub 15 SP7

Fixed in:

0.5.0-150600.3.4.1

squashfuse-tools

SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for HPC 15 SP7

Fixed in:

0.5.0-150600.3.4.1

apptainer-suid

SUSE Linux Enterprise Module for Package Hub 15 SP7

Fixed in:

1.5.1-150600.4.29.1

References

ADVISORY

https://bugzilla.suse.com/1270529

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2026-July/048063.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-2303/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement//suse-ru-20262815-1/

CVSS Analysis

CVSS v3.1

5.4

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

NoneI:N

Availability

LowA:L

5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Upstream

CVE-2026-2303

Ecosystems

SUSE Linux Enterprise High Performance Computing 15 SP7 SUSE Linux Enterprise Module for HPC 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP7

Timeline

PublishedJul 9, 2026

ModifiedJul 9, 2026

SUSE-RU-2026:2815-1 | Mondoo Vulnerability Intelligence