SUSE-CU-2025:8672-1: Security update of containers/pytorch

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: containers/pytorch
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:8672-1
Container Tags        : containers/pytorch:2-nvidia , containers/pytorch:2.8.0-nvidia , containers/pytorch:2.8.0-nvidia-3.25
Container Release     : 3.25
Severity              : important
Type                  : security
References            : 1231055 1251305 1252425 1252974 CVE-2025-6075 CVE-2025-8291 
-----------------------------------------------------------------

The container containers/pytorch was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2025:4293-1
Released:    Fri Nov 28 10:10:49 2025
Summary:     Recommended update for gpgme
Type:        recommended
Severity:    important
References:  1231055,1252425
This update for gpgme fixes the following issues:

- Treat empty DISPLAY variable as unset (bsc#1252425, bsc#1231055)
    * To avoid gpgme constructing an invalid gpg command line when
      the DISPLAY variable is empty it can be treated as unset.
    * Reported upstream: dev.gnupg.org/T7919

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:4297-1
Released:    Fri Nov 28 11:03:19 2025
Summary:     Security update for python311
Type:        security
Severity:    low
References:  1251305,1252974,CVE-2025-6075,CVE-2025-8291
This update for python311 fixes the following issues:

Update to 3.11.14:

  - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974)
  - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not checked by the 'zipfile' module (bsc#1251305)


The following package changes have been done:

- libpython3_11-1_0-3.11.14-150600.3.38.1 updated
- libgpgme11-1.23.0-150600.3.5.1 updated
- python311-base-3.11.14-150600.3.38.1 updated
- python311-3.11.14-150600.3.38.1 updated
- python311-devel-3.11.14-150600.3.38.1 updated
- python311-torch-cuda-2.8.0-150600.2.9 updated