I couldn't merge this prviously, as this would have made the
scarthgap version of buildah newer than the one on master.
But I've bumped master to 1.36, so this is now merged to
scarthgap
Bruce
In message: [meta-virtualization][scarthgap][PATCH 1/1] buildah: upgrade to
1.34.3
on 24/05/2024 Urade, Yogita via lists.yoctoproject.org wrote:
> From: Yogita Urade
>
> Includes fix for: CVE-2024-1753
>
> Changelog:
> =
> 2db756331 (tag: v1.34.3) [release-1.34] Bump Buildah to v1.34.3
> 699d1ed51 [release-1.34] CVE-2024-24786 protobuf to 1.33
> 4ffe07267 Merge pull request #5419 from TomSweeneyRedHat/dev/tsweeney/cve-1.34
> 968e8ab62 [release-1.34] Bump to Buildah v1.34.3-dev
> 776a1463d (tag: v1.34.2) [release-1.34] Bump to Buildah v1.34.2
> afc086b65 conformance tests: don't break on trailing zeroes in layer blobs
> 3deda1913 [release-1.34] CVE-2024-1753 container escape fix
> 14d60c988 Merge pull request #5365 from edsantiago/skip_unshare_on_rhel--1.34
> 4f775b4a1 tests: skip_if_no_unshare(): check for --setuid
> dbeb097c6 Merge pull request #5352 from
> TomSweeneyRedHat/dev/tsweeney/buildah_1_34_1
>
> Signed-off-by: Yogita Urade
> ---
> recipes-containers/buildah/buildah_git.bb | 4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/recipes-containers/buildah/buildah_git.bb
> b/recipes-containers/buildah/buildah_git.bb
> index 64ee4f7d..90ffc238 100644
> --- a/recipes-containers/buildah/buildah_git.bb
> +++ b/recipes-containers/buildah/buildah_git.bb
> @@ -8,7 +8,7 @@ LIC_FILES_CHKSUM =
> "file://src/github.com/containers/buildah/LICENSE;md5=e3fc50a
>
> S = "${WORKDIR}/git"
>
> -BUILDAH_VERSION = "1.34.1"
> +BUILDAH_VERSION = "1.34.3"
>
> PV = "${BUILDAH_VERSION}"
>
> @@ -28,7 +28,7 @@ GO_WORKDIR = "${GO_INSTALL}"
> GOBUILDFLAGS += "-mod vendor"
>
> SRCREV_FORMAT = "buildah_storage"
> -SRCREV_buildah = "dbeb097c6fbf4bfd643f096992da572a97a8ec12"
> +SRCREV_buildah = "2db756331014a4f355507df47d2622d05532da1f"
> SRCREV_storage = "246ba3062e8b551026aef2708eee747014ce5c52"
>
> SRC_URI = " \
> --
> 2.40.0
>
>
>
>
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#8782):
https://lists.yoctoproject.org/g/meta-virtualization/message/8782
Mute This Topic: https://lists.yoctoproject.org/mt/106278054/21656
Group Owner: meta-virtualization+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
