SUSE-CU-2026:8060-1: Security update of bci/spack

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: bci/spack
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:8060-1
Container Tags        : bci/spack:0.23 , bci/spack:0.23.1 , bci/spack:0.23.1-25.26 , bci/spack:latest
Container Release     : 25.26
Severity              : important
Type                  : security
References            : 1269279 1269622 CVE-2026-41991 CVE-2026-57062 
-----------------------------------------------------------------

The container bci/spack was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3243-1
Released:    Fri Jul 24 15:09:32 2026
Summary:     Security update for gpg2
Type:        security
Severity:    low
References:  1269279,CVE-2026-57062
This update for gpg2 fixes the following issue:

- CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:3269-1
Released:    Mon Jul 27 13:00:16 2026
Summary:     Security update for gzip
Type:        security
Severity:    important
References:  1269622,CVE-2026-41991
This update for gzip fixes the following issue:

- CVE-2026-41991: insecure temporary file handling in the gzexe utility when the mktemp utility is not available in the
  user's PATH (bsc#1269622).


The following package changes have been done:

- libudev1-254.27-150600.4.71.2 updated
- gpg2-2.4.4-150600.3.18.1 updated
- gzip-1.10-150200.13.1 updated
- container:registry.suse.com-bci-bci-base-15.7-0411096f465658d23cf7197d39261fa8d818d8fc75c5ad5ce0e68f97a657663f-0 updated