SUSE-CU-2026:10221-1: Security update of bci/spack

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: bci/spack
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:10221-1
Container Tags        : bci/spack:0.23 , bci/spack:0.23.1 , bci/spack:0.23.1-25.50 , bci/spack:latest
Container Release     : 25.50
Severity              : important
Type                  : security
References            : 1266664 1274740 CVE-2026-23679 
-----------------------------------------------------------------

The container bci/spack was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2026:3980-1
Released:    Sun Sep  6 09:44:23 2026
Summary:     Recommended update for libtirpc
Type:        recommended
Severity:    important
References:  1274740
This update for libtirpc fixes the following issues:

- Fix: Possible mem leak from libtirpc [ thread::XRF51s_MK4mkPFEu7JKj0Ss:: ] (bsc#1274740):
    * rpcb_clnt.c: fix memory leak in destroy_addr

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:4050-1
Released:    Mon Sep  7 15:55:07 2026
Summary:     Security update for libusb-1_0
Type:        security
Severity:    moderate
References:  1266664,CVE-2026-23679
This update for libusb-1_0 fixes the following issue:

- CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a
  malformed USB configuration descriptor (bsc#1266664).


The following package changes have been done:

- libtirpc-netconfig-1.3.4-150300.3.26.1 updated
- libnghttp2-14-1.64.0-150700.3.6.1 updated
- libbz2-1-1.0.8-150400.3.4.1 updated
- libusb-1_0-0-1.0.24-150400.3.6.1 updated
- libopenssl3-3.5.0-150700.5.50.1 updated
- libopenssl-3-fips-provider-3.5.0-150700.5.50.1 updated
- libtirpc3-1.3.4-150300.3.26.1 updated
- libcurl4-8.14.1-150700.7.26.1 updated
- curl-8.14.1-150700.7.26.1 updated
- openssl-3-3.5.0-150700.5.50.1 updated
- container:registry.suse.com-bci-bci-base-15.7-2cca9950fcbe26e5f70a49f9e6f035e27fd7bad46e0133996b8c557bcafe453b-0 updated