{"id":"SUSE-RU-2026:2815-1","summary":"Recommended update for apptainer","details":"This update for apptainer contains the following fixes:\n\nSecurity fixes included on this update:\n\n- CVE-2026-2303: go.mongodb.org/mongo-driver: Heap Out-of-Bounds Read in GSSAPI Error Handling (bsc#1270529).\n\nOther fixes:\n\n- Enable building of SUID starter for SLES 15 (jsc#PED-16347).\n\n  ","modified":"2026-07-10T10:00:06.001575742Z","published":"2026-07-09T13:12:49Z","related":["CVE-2026-2303"],"upstream":["CVE-2026-2303"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/-2026-2815/suse-ru-20262815-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1270529"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-2303"}],"affected":[{"package":{"name":"apptainer","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP7","purl":"pkg:rpm/suse/apptainer&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015%20SP7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-150600.4.29.1"}]}],"ecosystem_specific":{"binaries":[{"squashfuse":"0.5.0-150600.3.4.1","squashfuse-tools":"0.5.0-150600.3.4.1","apptainer":"1.5.1-150600.4.29.1","apptainer-sle15_7":"1.5.1-150600.4.29.1","libsquashfuse0":"0.5.0-150600.3.4.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-RU-2026:2815-1.json"}},{"package":{"name":"squashfuse","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP7","purl":"pkg:rpm/suse/squashfuse&distro=SUSE%20Linux%20Enterprise%20Module%20for%20HPC%2015%20SP7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-150600.3.4.1"}]}],"ecosystem_specific":{"binaries":[{"apptainer-sle15_7":"1.5.1-150600.4.29.1","libsquashfuse0":"0.5.0-150600.3.4.1","squashfuse":"0.5.0-150600.3.4.1","squashfuse-tools":"0.5.0-150600.3.4.1","apptainer":"1.5.1-150600.4.29.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-RU-2026:2815-1.json"}},{"package":{"name":"apptainer","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","purl":"pkg:rpm/suse/apptainer&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-150600.4.29.1"}]}],"ecosystem_specific":{"binaries":[{"apptainer-suid":"1.5.1-150600.4.29.1","squashfuse":"0.5.0-150600.3.4.1","apptainer":"1.5.1-150600.4.29.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-RU-2026:2815-1.json"}},{"package":{"name":"squashfuse","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","purl":"pkg:rpm/suse/squashfuse&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-150600.3.4.1"}]}],"ecosystem_specific":{"binaries":[{"apptainer":"1.5.1-150600.4.29.1","apptainer-suid":"1.5.1-150600.4.29.1","squashfuse":"0.5.0-150600.3.4.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-RU-2026:2815-1.json"}}],"schema_version":"1.7.5"}