SUSE-CU-2025:4657-1: Security update of containers/pytorch

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: containers/pytorch
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:4657-1
Container Tags        : containers/pytorch:2-nvidia , containers/pytorch:2.7.0-nvidia , containers/pytorch:2.7.0-nvidia-2.21
Container Release     : 2.21
Severity              : important
Type                  : security
References            : 1241067 1243273 1244032 1244056 1244059 1244060 CVE-2024-12718
                        CVE-2025-4138 CVE-2025-4330 CVE-2025-4516 CVE-2025-4517 
-----------------------------------------------------------------

The container containers/pytorch was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:2057-1
Released:    Sat Jun 21 11:04:24 2025
Summary:     Security update for python311
Type:        security
Severity:    important
References:  1241067,1243273,1244032,1244056,1244059,1244060,CVE-2024-12718,CVE-2025-4138,CVE-2025-4330,CVE-2025-4516,CVE-2025-4517
This update for python311 fixes the following issues:
  
python311 was updated from version 3.11.10 to 3.11.13:

- Security issues fixed:

  * CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS (bsc#1243273).
  * CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4517: Fixed multiple issues that allowed tarfile 
    extraction filters to be bypassed using crafted symlinks and hard links
    (bsc#1244056, bsc#1244059, bsc#1244060, bsc#1244032)

- Other changes and bugs fixed:
 
  * Improved handling of system call failures that OpenSSL reports (bsc#1241067)
  * Disable GC during thread operations to prevent deadlocks.
  * Fixed a potential denial of service vulnerability in the imaplib module.
  * Fixed bugs in the in the folding of rfc2047 encoded-words and in the folding of quoted strings when flattening an
    email message using a modern email policy.
  * Fixed parsing long IPv6 addresses with embedded IPv4 address.
  * Fixed ipaddress.IPv6Address.reverse_pointer output according to RFC 3596
  * Improved the textual representation of IPv4-mapped IPv6 addresses in ipaddress.
  * ipaddress: fixed hash collisions for IPv4Network and IPv6Network objects
  * os.path.realpath() now accepts a strict keyword-only argument.
  * Stop the processing of long IPv6 addresses early in ipaddress to prevent excessive memory consumption and a minor
    denial-of-service.
  * Updated bundled libexpat to 2.7.1
  * Writers of CPython documentation can now use next as the version for the versionchanged, versionadded,
    deprecated directives.


The following package changes have been done:

- libpython3_11-1_0-3.11.13-150600.3.30.1 updated
- python311-base-3.11.13-150600.3.30.1 updated
- python311-3.11.13-150600.3.30.1 updated
- python311-protobuf-5.29.3-150600.3.2 updated
- python311-numpy-2.1.1-150600.1.45 updated
- python311-devel-3.11.13-150600.3.30.1 updated
- python311-torch-cuda-2.7.0-150600.2.9 updated