SUSE-CU-2025:1959-1: Security update of bci/spack

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: bci/spack
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:1959-1
Container Tags        : bci/spack:0.23 , bci/spack:0.23.1 , bci/spack:0.23.1-5.11 , bci/spack:latest
Container Release     : 5.11
Severity              : moderate
Type                  : security
References            : 1237606 1238610 CVE-2025-1632 CVE-2025-25724 
-----------------------------------------------------------------

The container bci/spack was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:985-1
Released:    Fri Mar 21 18:45:14 2025
Summary:     Security update for libarchive
Type:        security
Severity:    moderate
References:  1237606,1238610,CVE-2025-1632,CVE-2025-25724
This update for libarchive fixes the following issues:

- CVE-2025-1632: Fixed null pointer dereference in bsdunzip.c (bsc#1237606)
- CVE-2025-25724: Fixed buffer overflow vulnerability in function list_item_verbose() in tar/util.c (bsc#1238610)


The following package changes have been done:

- libarchive13-3.7.2-150600.3.12.1 updated