GNU bug report logs - #71125
[PATCH] gnu: buildah: Update to 1.35.4 [security fixes].

Previous Next

Package: guix-patches;

Reported by: Tomas Volf <~@wolfsden.cz>

Date: Wed, 22 May 2024 18:53:01 UTC

Severity: normal

Tags: patch

Done: Maxim Cournoyer <maxim.cournoyer <at> gmail.com>

Bug is archived. No further changes may be made.

Full log


View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Maxim Cournoyer <maxim.cournoyer <at> gmail.com>
Cc: tracker <at> debbugs.gnu.org
Subject: bug#71125: closed ([PATCH] gnu: buildah: Update to 1.35.4
 [security fixes].)
Date: Thu, 30 May 2024 13:30:03 +0000
[Message part 1 (text/plain, inline)]
Your message dated Thu, 30 May 2024 09:28:03 -0400
with message-id <87frtze8f0.fsf <at> gmail.com>
and subject line Re: [bug#71125] [PATCH] gnu: buildah: Update to 1.35.4 [security fixes].
has caused the debbugs.gnu.org bug report #71125,
regarding [PATCH] gnu: buildah: Update to 1.35.4 [security fixes].
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs <at> gnu.org.)


-- 
71125: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=71125
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems
[Message part 2 (message/rfc822, inline)]
From: Tomas Volf <~@wolfsden.cz>
To: guix-patches <at> gnu.org
Cc: Tomas Volf <~@wolfsden.cz>
Subject: [PATCH] gnu: buildah: Update to 1.35.4 [security fixes].
Date: Wed, 22 May 2024 20:52:03 +0200
This fixes CVE-2024-3727 and CVE-2024-28180.

* gnu/packages/containers.scm (buildah): Update to 1.35.4.

Change-Id: I5ee2b4591b39ee85d7236aedda7a2508df8e0e48
---
 gnu/packages/containers.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/containers.scm b/gnu/packages/containers.scm
index 917d152609..f733bb6b6c 100644
--- a/gnu/packages/containers.scm
+++ b/gnu/packages/containers.scm
@@ -609,7 +609,7 @@ (define-public podman-compose
 (define-public buildah
   (package
     (name "buildah")
-    (version "1.35.3")
+    (version "1.35.4")
     (source
      (origin
        (method git-fetch)
@@ -617,7 +617,7 @@ (define-public buildah
              (url "https://github.com/containers/buildah")
              (commit (string-append "v" version))))
        (sha256
-        (base32 "07hr2cfp4kblnmva02ap97id5nzhbqigdfvx7c8nyrkfzw0340n0"))
+        (base32 "1p21lh8ds688nv0valzgl6s20bwzsyvr1sa15ra2mprj79azvl4r"))
        (file-name (git-file-name name version))))
     (build-system gnu-build-system)
     (arguments
-- 
2.41.0



[Message part 3 (message/rfc822, inline)]
From: Maxim Cournoyer <maxim.cournoyer <at> gmail.com>
To: Tomas Volf <~@wolfsden.cz>
Cc: 71125-done <at> debbugs.gnu.org
Subject: Re: [bug#71125] [PATCH] gnu: buildah: Update to 1.35.4 [security
 fixes].
Date: Thu, 30 May 2024 09:28:03 -0400
Hi,

Tomas Volf <~@wolfsden.cz> writes:

> This fixes CVE-2024-3727 and CVE-2024-28180.
>
> * gnu/packages/containers.scm (buildah): Update to 1.35.4.

I see another patch of yours has landed meanwhile, updating it to
1.36.0.  I trust this is resolved.

-- 
Thanks,
Maxim


This bug report was last modified 357 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.