SUSE-CU-2025:1959-1: Security update of bci/spack
sle-container-updates at lists.suse.com
sle-container-updates at lists.suse.com
Sun Mar 23 08:07:54 UTC 2025
SUSE Container Update Advisory: bci/spack
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:1959-1
Container Tags : bci/spack:0.23 , bci/spack:0.23.1 , bci/spack:0.23.1-5.11 , bci/spack:latest
Container Release : 5.11
Severity : moderate
Type : security
References : 1237606 1238610 CVE-2025-1632 CVE-2025-25724
-----------------------------------------------------------------
The container bci/spack was updated. The following patches have been included in this update:
-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:985-1
Released: Fri Mar 21 18:45:14 2025
Summary: Security update for libarchive
Type: security
Severity: moderate
References: 1237606,1238610,CVE-2025-1632,CVE-2025-25724
This update for libarchive fixes the following issues:
- CVE-2025-1632: Fixed null pointer dereference in bsdunzip.c (bsc#1237606)
- CVE-2025-25724: Fixed buffer overflow vulnerability in function list_item_verbose() in tar/util.c (bsc#1238610)
The following package changes have been done:
- libarchive13-3.7.2-150600.3.12.1 updated
More information about the sle-container-updates
mailing list