SUSE-CU-2025:1129-1: Security update of bci/spack
sle-container-updates at lists.suse.com
sle-container-updates at lists.suse.com
Wed Feb 19 13:00:39 UTC 2025
SUSE Container Update Advisory: bci/spack
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:1129-1
Container Tags : bci/spack:0.23 , bci/spack:0.23.0 , bci/spack:0.23.0-3.2 , bci/spack:latest
Container Release : 3.2
Severity : important
Type : security
References : 1236282 1236878 CVE-2024-12133 CVE-2025-0395
-----------------------------------------------------------------
The container bci/spack was updated. The following patches have been included in this update:
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:548-1
Released: Fri Feb 14 11:19:24 2025
Summary: Security update for libtasn1
Type: security
Severity: important
References: 1236878,CVE-2024-12133
This update for libtasn1 fixes the following issues:
- CVE-2024-12133: the processing of input DER data containing a large number of SEQUENCE OF or SET OF elements takes
quadratic time to complete. (bsc#1236878)
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:582-1
Released: Tue Feb 18 15:55:29 2025
Summary: Security update for glibc
Type: security
Severity: low
References: 1236282,CVE-2025-0395
This update for glibc fixes the following issues:
- CVE-2025-0395: Fix underallocation of abort_msg_s struct (bsc#1236282)
The following package changes have been done:
- libudev1-254.23-150600.4.25.1 updated
- libtasn1-6-4.13-150000.4.11.1 updated
- libtasn1-4.13-150000.4.11.1 updated
- glibc-devel-2.38-150600.14.23.1 updated
- container:registry.suse.com-bci-bci-base-15.6-0c6d74fef64f7b31b2d76ef5c680996683b3d3118bcaf008a2fe22e293abe486-0 updated
More information about the sle-container-updates
mailing list