SUSE-CU-2025:1129-1: Security update of bci/spack

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: bci/spack
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:1129-1
Container Tags        : bci/spack:0.23 , bci/spack:0.23.0 , bci/spack:0.23.0-3.2 , bci/spack:latest
Container Release     : 3.2
Severity              : important
Type                  : security
References            : 1236282 1236878 CVE-2024-12133 CVE-2025-0395 
-----------------------------------------------------------------

The container bci/spack was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:548-1
Released:    Fri Feb 14 11:19:24 2025
Summary:     Security update for libtasn1
Type:        security
Severity:    important
References:  1236878,CVE-2024-12133
This update for libtasn1 fixes the following issues:

- CVE-2024-12133: the processing of input DER data containing a large number of SEQUENCE OF or SET OF elements takes
  quadratic time to complete. (bsc#1236878)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:582-1
Released:    Tue Feb 18 15:55:29 2025
Summary:     Security update for glibc
Type:        security
Severity:    low
References:  1236282,CVE-2025-0395
This update for glibc fixes the following issues:

- CVE-2025-0395: Fix underallocation of abort_msg_s struct (bsc#1236282)


The following package changes have been done:

- libudev1-254.23-150600.4.25.1 updated
- libtasn1-6-4.13-150000.4.11.1 updated
- libtasn1-4.13-150000.4.11.1 updated
- glibc-devel-2.38-150600.14.23.1 updated
- container:registry.suse.com-bci-bci-base-15.6-0c6d74fef64f7b31b2d76ef5c680996683b3d3118bcaf008a2fe22e293abe486-0 updated