From unknown Fri Sep 05 09:32:19 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#71125 <71125@debbugs.gnu.org> To: bug#71125 <71125@debbugs.gnu.org> Subject: Status: [PATCH] gnu: buildah: Update to 1.35.4 [security fixes]. Reply-To: bug#71125 <71125@debbugs.gnu.org> Date: Fri, 05 Sep 2025 16:32:19 +0000 retitle 71125 [PATCH] gnu: buildah: Update to 1.35.4 [security fixes]. reassign 71125 guix-patches submitter 71125 Tomas Volf <~@wolfsden.cz> severity 71125 normal tag 71125 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Wed May 22 14:52:26 2024 Received: (at submit) by debbugs.gnu.org; 22 May 2024 18:52:26 +0000 Received: from localhost ([127.0.0.1]:57690 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1s9r4c-0000eS-Ew for submit@debbugs.gnu.org; Wed, 22 May 2024 14:52:26 -0400 Received: from lists.gnu.org ([209.51.188.17]:33432) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <~@wolfsden.cz>) id 1s9r4a-0000eM-6N for submit@debbugs.gnu.org; Wed, 22 May 2024 14:52:25 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <~@wolfsden.cz>) id 1s9r4S-0007WQ-OB for guix-patches@gnu.org; Wed, 22 May 2024 14:52:16 -0400 Received: from wolfsden.cz ([37.205.8.62]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <~@wolfsden.cz>) id 1s9r4P-0000s2-3m for guix-patches@gnu.org; Wed, 22 May 2024 14:52:16 -0400 Received: by wolfsden.cz (Postfix, from userid 104) id A325A297541; Wed, 22 May 2024 18:52:09 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail; t=1716403929; bh=k0ysUZRuYaUyU1RHs55tgXPTk3NKSpo8aEDzubVO+Bg=; h=From:To:Cc:Subject:Date; b=itY2d7LeyretyzYIlaL5om7cCzOK9EUGFPNGEnzERQCXEATjaiGO9RopJ+4pyhlgr msa/WSqj6Ao4DLFEgnlUFQMniuyBv4BPKiBxHyWx8AaZHIflLc1hmUsX13ftGt42lB YRZbDlkAIeFLSwfeCwEE4IO95k7gevNKzKcLuDn3IGZ2UFC8D+pdSBMyoWqILzDpYu ijFvn7x4DChtA/lLH0FjwICp7YofZ9BMO1zdcXrQSJ3r5MjcEF/p//nRVxwcRJ2ljx ctrt0bw9vDJXjpHapE4UGsltjkb5WKydPmtpGBiDRHkJAXm6wuPp+RkvKg5iJscK72 WfCuLl19uGTf52c949F4lzJFB03Y2WZ0nvdWrndKyj4otxkBArPOtHFV1+nL2jWxEc T6beQUJUVe9f18Y1Eum4GWUs4czxtrAaB8/wimS0xbzkwqAY/Ilin/UXa8bq0ODT4J 9xnelCVb4UfUKKhdcM8vSsaOz4+qCfzURR5rVNTJTXJld9Lr9b7NpaxCQj8EWz3/eD SGiaAp8VRC3peGqOppOGTu0BykbOuKDO779DwhrczfYBJhFLMOcmYNZNJBvPp6FGai CqYfI9fl+wYpgVinHAbaf+QnjfEpW3CBRi1mCAkdWk1IqGKqOBKwWaqcNULIY3vlcW pZsHDSQspu9H5Jy//PW585W8= X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on wolfsden X-Spam-Level: X-Spam-Status: No, score=-1.2 required=5.0 tests=ALL_TRUSTED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.6 Received: from localhost (unknown [193.32.127.139]) by wolfsden.cz (Postfix) with ESMTPSA id 533F6296B9B; Wed, 22 May 2024 18:52:09 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail; t=1716403929; bh=k0ysUZRuYaUyU1RHs55tgXPTk3NKSpo8aEDzubVO+Bg=; h=From:To:Cc:Subject:Date; b=itY2d7LeyretyzYIlaL5om7cCzOK9EUGFPNGEnzERQCXEATjaiGO9RopJ+4pyhlgr msa/WSqj6Ao4DLFEgnlUFQMniuyBv4BPKiBxHyWx8AaZHIflLc1hmUsX13ftGt42lB YRZbDlkAIeFLSwfeCwEE4IO95k7gevNKzKcLuDn3IGZ2UFC8D+pdSBMyoWqILzDpYu ijFvn7x4DChtA/lLH0FjwICp7YofZ9BMO1zdcXrQSJ3r5MjcEF/p//nRVxwcRJ2ljx ctrt0bw9vDJXjpHapE4UGsltjkb5WKydPmtpGBiDRHkJAXm6wuPp+RkvKg5iJscK72 WfCuLl19uGTf52c949F4lzJFB03Y2WZ0nvdWrndKyj4otxkBArPOtHFV1+nL2jWxEc T6beQUJUVe9f18Y1Eum4GWUs4czxtrAaB8/wimS0xbzkwqAY/Ilin/UXa8bq0ODT4J 9xnelCVb4UfUKKhdcM8vSsaOz4+qCfzURR5rVNTJTXJld9Lr9b7NpaxCQj8EWz3/eD SGiaAp8VRC3peGqOppOGTu0BykbOuKDO779DwhrczfYBJhFLMOcmYNZNJBvPp6FGai CqYfI9fl+wYpgVinHAbaf+QnjfEpW3CBRi1mCAkdWk1IqGKqOBKwWaqcNULIY3vlcW pZsHDSQspu9H5Jy//PW585W8= From: Tomas Volf <~@wolfsden.cz> To: guix-patches@gnu.org Subject: [PATCH] gnu: buildah: Update to 1.35.4 [security fixes]. Date: Wed, 22 May 2024 20:52:03 +0200 Message-ID: <3199a6f4c03372b649f40145a4da52837f9a1f70.1716403923.git.~@wolfsden.cz> X-Mailer: git-send-email 2.41.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=37.205.8.62; envelope-from=~@wolfsden.cz; helo=wolfsden.cz X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit Cc: Tomas Volf <~@wolfsden.cz> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) This fixes CVE-2024-3727 and CVE-2024-28180. * gnu/packages/containers.scm (buildah): Update to 1.35.4. Change-Id: I5ee2b4591b39ee85d7236aedda7a2508df8e0e48 --- gnu/packages/containers.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/containers.scm b/gnu/packages/containers.scm index 917d152609..f733bb6b6c 100644 --- a/gnu/packages/containers.scm +++ b/gnu/packages/containers.scm @@ -609,7 +609,7 @@ (define-public podman-compose (define-public buildah (package (name "buildah") - (version "1.35.3") + (version "1.35.4") (source (origin (method git-fetch) @@ -617,7 +617,7 @@ (define-public buildah (url "https://github.com/containers/buildah") (commit (string-append "v" version)))) (sha256 - (base32 "07hr2cfp4kblnmva02ap97id5nzhbqigdfvx7c8nyrkfzw0340n0")) + (base32 "1p21lh8ds688nv0valzgl6s20bwzsyvr1sa15ra2mprj79azvl4r")) (file-name (git-file-name name version)))) (build-system gnu-build-system) (arguments -- 2.41.0 From debbugs-submit-bounces@debbugs.gnu.org Thu May 30 09:29:24 2024 Received: (at 71125-done) by debbugs.gnu.org; 30 May 2024 13:29:24 +0000 Received: from localhost ([127.0.0.1]:35747 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sCfqN-0000oL-Ol for submit@debbugs.gnu.org; Thu, 30 May 2024 09:29:24 -0400 Received: from mail-oi1-f180.google.com ([209.85.167.180]:54587) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sCfqL-0000o3-9O for 71125-done@debbugs.gnu.org; Thu, 30 May 2024 09:29:21 -0400 Received: by mail-oi1-f180.google.com with SMTP id 5614622812f47-3d19dfb3dceso426402b6e.1 for <71125-done@debbugs.gnu.org>; Thu, 30 May 2024 06:29:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1717075685; x=1717680485; darn=debbugs.gnu.org; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=X60AlyJUUaUw6BLd2ZynpECYkAFWD6xIsrt8bkZOsV4=; b=Q44WJiuyT3M7exdr0qY2TMiV0RT0jdZcIxXwxQfcalKP4efdnThJKZEOpPjAkxBoAB 8Ov1Oc7rv4C+PD++jmudBJHDByxpQi7QjWzDs7ugZtCiU/Ww1jSFFDErR2UzrOT3Ptv8 BFklRaL9+5ELLmtJyLdAqkvkjh+00vQAokkinsRdVTcKerIqRpD2hNCjir1TcnYkeCva cB6JbjPEcf49qxJpZb0G/j1rXMb/ScPIulBb3V8FwbPovTdT0sHjTebG0a9AIjxDebz/ sD7UaaDMvIcJmHOw5YETyakRR9Ud9ftkCpN4onjUjYMl5tDGIorzUYzYn+OYkEaNQSDK 4eEw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1717075685; x=1717680485; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=X60AlyJUUaUw6BLd2ZynpECYkAFWD6xIsrt8bkZOsV4=; b=XjN3HApP4vCTz3tcbNCkR5AGbV3DGOvZDc17Oq5Lf7MfwkeDHFUAZBQ0AyZVQjwRuR g3XpYI1yEsrpZ5v+6Nxbp9hboHD3IvXx0xng6t4KlON3iAO33o0OzOnTOHMnv+owJxy+ IjOBjLup3s3vo/rUh4pdeLF5tBJTa0l7zvS7y0uC2oXuz77H/ilNJbHX15Y5ozaVfZMH 6tdZCJDAd7EfgvrMcXpIpo1hdZJhmKkWvEDhzgOG9/V2H5NxHvPj10QUqf1iaEKO2Bzz myQfWpZoitLCoXYi8L3cX05bQ/jLzfoIOkn04TqOlW47xgyij2vzhpAl/ptTBZisMkoj 2qQQ== X-Gm-Message-State: AOJu0Yy+KXN+7l3vD9Lagh2lz2xTkn0opLz8iI0GxKO97+BL+/Yq52IJ rj5NvhOfF1l1qQ0fdWlbOlJQHjSISn+JDEggwqJHKkZdvJ+92WMqAYV8S1ZE X-Google-Smtp-Source: AGHT+IEs9yn/bfZlOLNN2yJFucCU2rPTKxfIQn6ObO2eCN36HUcb2FsNFJZwtdHYuSuTQNag19tD4w== X-Received: by 2002:a05:6808:4393:b0:3d1:d340:b438 with SMTP id 5614622812f47-3d1dcca6663mr1989066b6e.19.1717075684652; Thu, 30 May 2024 06:28:04 -0700 (PDT) Received: from hurd (dsl-205-233-124-92.b2b2c.ca. [205.233.124.92]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-6ad8fd2c621sm28035056d6.113.2024.05.30.06.28.03 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 30 May 2024 06:28:04 -0700 (PDT) From: Maxim Cournoyer To: Tomas Volf <~@wolfsden.cz> Subject: Re: [bug#71125] [PATCH] gnu: buildah: Update to 1.35.4 [security fixes]. In-Reply-To: <3199a6f4c03372b649f40145a4da52837f9a1f70.1716403923.git.~@wolfsden.cz> (Tomas Volf's message of "Wed, 22 May 2024 20:52:03 +0200") References: <3199a6f4c03372b649f40145a4da52837f9a1f70.1716403923.git.~@wolfsden.cz> Date: Thu, 30 May 2024 09:28:03 -0400 Message-ID: <87frtze8f0.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 71125-done Cc: 71125-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, Tomas Volf <~@wolfsden.cz> writes: > This fixes CVE-2024-3727 and CVE-2024-28180. > > * gnu/packages/containers.scm (buildah): Update to 1.35.4. I see another patch of yours has landed meanwhile, updating it to 1.36.0. I trust this is resolved. -- Thanks, Maxim From debbugs-submit-bounces@debbugs.gnu.org Thu May 30 10:08:41 2024 Received: (at 71125-done) by debbugs.gnu.org; 30 May 2024 14:08:41 +0000 Received: from localhost ([127.0.0.1]:38761 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sCgSP-0008E1-A4 for submit@debbugs.gnu.org; Thu, 30 May 2024 10:08:41 -0400 Received: from wolfsden.cz ([37.205.8.62]:34304) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <~@wolfsden.cz>) id 1sCgSK-0008Dg-4w for 71125-done@debbugs.gnu.org; Thu, 30 May 2024 10:08:39 -0400 Received: by wolfsden.cz (Postfix, from userid 104) id E28B924CCB4; Thu, 30 May 2024 14:08:23 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail; t=1717078103; bh=9HohzBXXenMDncvCieQX2tjyzclDc1FXZPHF1WMhFUs=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=YenFAytKTH/YH1p1SLfCuMZOtEIrnGHv8oBgHbqxAB6TJ95oDJEPoumITn7e9F7o0 YuQZ1OCuqc4vBjODRt6autwkZhnSrs+2sCJjax6ylsK0m2+v2GxwzFfvGkepmRaecO 5loD6PyVSTlN112AcDFBj+W32HwH+1UoX7G90murye35hl+yxna/o3RGVVmIbsJR1K gPB0Qfc9kSzpBOXBLZJww50oh5wt6dlnnI1trgalXftYMZOFbv23sWC8lOw6+2uiFx wngAnlfgoyiTrtHEx44Bn+PTAp4RVBrzPnWBM2uZ8ukFTXsHjOs81zzZuS3FeSu5f0 2EiOBOQuLyDcbBQx8HkkVOi3chjU3ZvpAK4LkA6QkHbyz+v+i8zi7y/DzRmHGt7gn6 3gmqOZDPD/StGmGRgfrw5y+wcs68s4Yb/s2w/hKRehF/nI1EFkPRZx1OcWn4w7jxbd v3EqNrwthaTtbNxswcdvvjug/5fs63GyVgleS5201947pAbAYqXBLX/9YS/543IBZZ 5ITRj4/B6JDJ2Dx6vE7h9UvOLZDrGhdxmuQw1TcBkOrLnT7vyz+g4W3et3l21Q5K/A 3pfX060wwA7+Tt/9v+msG+EoqIn6KkZvE4Lw3NB+W925oI7+qm/4lIQ3D79TMPxxQM y3tQz9qaEu7cnOQd2l/FtWKw= X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on wolfsden X-Spam-Level: X-Spam-Status: No, score=-1.2 required=5.0 tests=ALL_TRUSTED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,T_SCC_BODY_TEXT_LINE, URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.6 Received: from localhost (unknown [193.32.127.159]) by wolfsden.cz (Postfix) with ESMTPSA id C197824D9AB; Thu, 30 May 2024 14:08:22 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail; t=1717078102; bh=9HohzBXXenMDncvCieQX2tjyzclDc1FXZPHF1WMhFUs=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=oeSuJCLyG5GjPuSk9ElVd7iui0ZS6XYTISZTZhNfiQR7+5jxRPXvRd7c1VdWRHb+/ U5Z3NIQTBaHeiFSMIsIamqspAxWydwBRrkVoFIuPzphRjswg1wu/vFbGydqMwRUb6f H5hgV2ylTYkd+xI3ZO5q7sZctPLOL2Y9moH5lTiOClx5amRKrtUbvCdTYif38Qq5EJ NTjCXo+9CFBZZb1mNzpHNeq5fE4/VeQs9s63H+nhkT6ZFN//AnlGXDgn4sWjsW3DF5 8TdvhKC27dFEYdY1kvbTDPf7bVuitRtgrwZy+MZyGZfggur2+XYMznwxYad9M4ikr7 m7MRayxrwBDcTGv8sOrEywzoDMPP3OG1V8u8O9/ljIf/wkRdYQC53c/hYLNUIquOPI o0DlGPgGfAvCqrWGGLojA+yCTxIYXyeZe46R56E1a41UXG/WNwp2pKl/tiBdMKSFy9 XvhbQrk+FTtNvb6B+2wrTuKdmTgYDD8PxSVH0tHZNFQrh1+nmrm13rFuAB8p4eZ6K2 XoovYyg7HpaxVoNDsJ5Jhk2WAwrN2Wl22XReYJlcVMcB/119Ok3DRdZCEkBDyL4NxI 4FfZPUXwgwk5P3ZtK1nrdvdVwJIgeRUxUPpQuyGsLTJ46l4rQC6b2l2Bd1ATFmitJ3 1Mu44ypjUoBmSdcniLnuIPC0= Date: Thu, 30 May 2024 16:08:22 +0200 From: Tomas Volf <~@wolfsden.cz> To: Maxim Cournoyer Subject: Re: [bug#71125] [PATCH] gnu: buildah: Update to 1.35.4 [security fixes]. Message-ID: References: <3199a6f4c03372b649f40145a4da52837f9a1f70.1716403923.git.~@wolfsden.cz> <87frtze8f0.fsf@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="2AG0MAcwm2Dxuqpy" Content-Disposition: inline In-Reply-To: <87frtze8f0.fsf@gmail.com> X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 71125-done Cc: 71125-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --2AG0MAcwm2Dxuqpy Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On 2024-05-30 09:28:03 -0400, Maxim Cournoyer wrote: > Hi, > > Tomas Volf <~@wolfsden.cz> writes: > > > This fixes CVE-2024-3727 and CVE-2024-28180. > > > > * gnu/packages/containers.scm (buildah): Update to 1.35.4. > > I see another patch of yours has landed meanwhile, updating it to > 1.36.0. I trust this is resolved. Yes, I believe so. I should have paid more attention and close this (obsolete) patch. Sorry about that. Tomas -- There are only two hard things in Computer Science: cache invalidation, naming things and off-by-one errors. --2AG0MAcwm2Dxuqpy Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEt4NJs4wUfTYpiGikL7/ufbZ/wakFAmZYiFYACgkQL7/ufbZ/ wakv+RAAi0cKcFqd+VDvvixn05XWpmmBKWpZf1XzPaxxQyCpFJsRqIgMqiKBtaTe FR5l7sOYvUzfuzRYpBXXsVdysTlKSCA/5in3PNSZ2VRSaoYQIy3EoURcctKh89Dx wmCS4QTpAVThWHCdTHGO7+BAyvRAk1F4hylUgkO9RoDdVSDiahRaX77TKXe3hyyY lp0T0XGNXk6K8hZ3VFvihPKWBUes8mSFxIKU+OOzw/WMxyTDkgjeEbgBtACMBpAx kdKaFJAdnVuG6reW+rZEYB5gdS7O/b7BG4AY7HkABZ7uc5dT4ugQNbrlsiHCr/Hi P50g/hpkcnSdNl0fmuf2PkeAwYZMkJNLSMHxjsO/Y2/oyhoeEeHnSc/bh0SA7hd2 tDwnd2QK6cwYaCv8msfcpxB+8Q7SLSdH2WJYzm3S+jfhJ7CyoSjIkT8yqd7wMENN utnrJa8syZ4rPvQQakBdyi8bW9nyqC42sod1Dqlsjx9rZx8C4vCKxjSzAb98UxUk 8PVq/PzzAKGoII48URuxPjs6lmuhKeiRNf65VHgQiU6aIO01iLgYkiGBDy4fIA67 3rJd+8bSyh4qhJ/YX8GeJqtEDA9gwYcFUd8wzeK/Dd0MOcqfr+B3VAUwFRckCjM5 M2QOF1zWK4yxeDAce6nZ2ZMr3PZd2Gg/+u/LGnp0KoKfU82koHc= =udTM -----END PGP SIGNATURE----- --2AG0MAcwm2Dxuqpy-- From debbugs-submit-bounces@debbugs.gnu.org Thu May 30 16:36:59 2024 Received: (at 71125-done) by debbugs.gnu.org; 30 May 2024 20:36:59 +0000 Received: from localhost ([127.0.0.1]:52635 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sCmWB-0006iS-CV for submit@debbugs.gnu.org; Thu, 30 May 2024 16:36:59 -0400 Received: from mail-qk1-f176.google.com ([209.85.222.176]:46108) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sCmW8-0006hu-0T for 71125-done@debbugs.gnu.org; Thu, 30 May 2024 16:36:57 -0400 Received: by mail-qk1-f176.google.com with SMTP id af79cd13be357-794db1ee9f1so96495985a.0 for <71125-done@debbugs.gnu.org>; Thu, 30 May 2024 13:36:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1717101339; x=1717706139; darn=debbugs.gnu.org; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=Lq7smRCr4825eQqkIrt+b+6ojbkUw5Yt6vhY1VmlwE8=; b=Vq2JRhIIbelJeFQHLF8ufN2J4Du/maerOprUu/ZOsjLUGDz+hwQCLphiaWn4ebdMW5 KlhQGgtoICQKMy8NGDc3knzi71idmGAG3G3Uah+g0zaMBYnd/WiBlDYSKhnVsoW8yMDE snAc4N9BErerx/s1PovlhmjkxCnnRepPnzoLYTs3930ycXbTM7sVlTvqZRUDhzL/JGg2 5kUmNUI2e9r7QRQkzoa1/aHZlpCq6GcUZwWnFdlyJMsWjNFLA8lp1wECaSZRJr5a09oT cwcog5U1r/Ks3RFRAPd9Q3YwXyTVPaPz0GToedHuQuf7bQn4jcN8a9JzqO52xhRaYmab ieKA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1717101339; x=1717706139; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=Lq7smRCr4825eQqkIrt+b+6ojbkUw5Yt6vhY1VmlwE8=; b=aGkf2Wb0ijYm8MZvf93lAVXhbPnrGMz/GB53nnCgUG6k5F9Ospmb+KU2Wu8L6nsqQI XxN30tIFgf6GOhYeSxAvDrS9Kwk8obNg+aAgRkje4D4ET8twccYZUgOtihYlqgn7dd9n nyiYW5fWQprFb1nvBkkstqs0zLnh9CVk/rwZzKCauZOw59pytza2BnchDRfExp85tykN 29iBzRbjAIDV354eQECUN9qz8Uha3dd+tbo3uDhNGYvEJRXt29aHbjwKQp1hG77sPplV vkvtKLSQaaZt/HLcyM04qEv5ruhLN1E6IcikLfwB4U1mWZmZNVvMBS/1YDSnvglvl447 x/ng== X-Gm-Message-State: AOJu0YyL1wDV7kDzDU+3iOY1+XA6/7EFzlPCrKqEvIQA7XuyPyOAN36J ZmdEVy7LPWC68MBJe5/XKdBG1t52ejxWRLgyQc8kuMAmtttcrO349IPFEMbg X-Google-Smtp-Source: AGHT+IGHDTAT0i43v7t6umEnI32NGVqafqLTVLMt4qsPrufQO4sLrscebonctZD4261dJDIU+30QpQ== X-Received: by 2002:a05:6214:4b0c:b0:6ae:bded:4cd8 with SMTP id 6a1803df08f44-6aebded4e2bmr1460366d6.61.1717101338476; Thu, 30 May 2024 13:35:38 -0700 (PDT) Received: from hurd (dsl-205-233-124-92.b2b2c.ca. [205.233.124.92]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-6ae4b4070d1sm1465506d6.82.2024.05.30.13.35.37 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 30 May 2024 13:35:38 -0700 (PDT) From: Maxim Cournoyer To: Tomas Volf <~@wolfsden.cz> Subject: Re: [bug#71125] [PATCH] gnu: buildah: Update to 1.35.4 [security fixes]. In-Reply-To: (Tomas Volf's message of "Thu, 30 May 2024 16:08:22 +0200") References: <3199a6f4c03372b649f40145a4da52837f9a1f70.1716403923.git.~@wolfsden.cz> <87frtze8f0.fsf@gmail.com> Date: Thu, 30 May 2024 16:35:36 -0400 Message-ID: <87y17rca1z.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 71125-done Cc: 71125-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Tomas, Tomas Volf <~@wolfsden.cz> writes: > On 2024-05-30 09:28:03 -0400, Maxim Cournoyer wrote: >> Hi, >> >> Tomas Volf <~@wolfsden.cz> writes: >> >> > This fixes CVE-2024-3727 and CVE-2024-28180. >> > >> > * gnu/packages/containers.scm (buildah): Update to 1.35.4. >> >> I see another patch of yours has landed meanwhile, updating it to >> 1.36.0. I trust this is resolved. > > Yes, I believe so. I should have paid more attention and close this (obsolete) > patch. Sorry about that. No worries! Thanks for the heads-up. -- Thanks, Maxim From unknown Fri Sep 05 09:32:19 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Fri, 28 Jun 2024 11:24:06 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator