unofficial mirror of guix-patches@gnu.org 
 help / color / mirror / code / Atom feed
* [bug#71125] [PATCH] gnu: buildah: Update to 1.35.4 [security fixes].
@ 2024-05-22 18:52 Tomas Volf
  2024-05-30 13:28 ` bug#71125: " Maxim Cournoyer
  0 siblings, 1 reply; 4+ messages in thread
From: Tomas Volf @ 2024-05-22 18:52 UTC (permalink / raw)
  To: 71125; +Cc: Tomas Volf

This fixes CVE-2024-3727 and CVE-2024-28180.

* gnu/packages/containers.scm (buildah): Update to 1.35.4.

Change-Id: I5ee2b4591b39ee85d7236aedda7a2508df8e0e48
---
 gnu/packages/containers.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/containers.scm b/gnu/packages/containers.scm
index 917d152609..f733bb6b6c 100644
--- a/gnu/packages/containers.scm
+++ b/gnu/packages/containers.scm
@@ -609,7 +609,7 @@ (define-public podman-compose
 (define-public buildah
   (package
     (name "buildah")
-    (version "1.35.3")
+    (version "1.35.4")
     (source
      (origin
        (method git-fetch)
@@ -617,7 +617,7 @@ (define-public buildah
              (url "https://github.com/containers/buildah")
              (commit (string-append "v" version))))
        (sha256
-        (base32 "07hr2cfp4kblnmva02ap97id5nzhbqigdfvx7c8nyrkfzw0340n0"))
+        (base32 "1p21lh8ds688nv0valzgl6s20bwzsyvr1sa15ra2mprj79azvl4r"))
        (file-name (git-file-name name version))))
     (build-system gnu-build-system)
     (arguments
-- 
2.41.0





^ permalink raw reply related	[flat|nested] 4+ messages in thread

* bug#71125: [PATCH] gnu: buildah: Update to 1.35.4 [security fixes].
  2024-05-22 18:52 [bug#71125] [PATCH] gnu: buildah: Update to 1.35.4 [security fixes] Tomas Volf
@ 2024-05-30 13:28 ` Maxim Cournoyer
  2024-05-30 14:08   ` [bug#71125] " Tomas Volf
  0 siblings, 1 reply; 4+ messages in thread
From: Maxim Cournoyer @ 2024-05-30 13:28 UTC (permalink / raw)
  To: Tomas Volf; +Cc: 71125-done

Hi,

Tomas Volf <~@wolfsden.cz> writes:

> This fixes CVE-2024-3727 and CVE-2024-28180.
>
> * gnu/packages/containers.scm (buildah): Update to 1.35.4.

I see another patch of yours has landed meanwhile, updating it to
1.36.0.  I trust this is resolved.

-- 
Thanks,
Maxim




^ permalink raw reply	[flat|nested] 4+ messages in thread

* [bug#71125] [PATCH] gnu: buildah: Update to 1.35.4 [security fixes].
  2024-05-30 13:28 ` bug#71125: " Maxim Cournoyer
@ 2024-05-30 14:08   ` Tomas Volf
  2024-05-30 20:35     ` Maxim Cournoyer
  0 siblings, 1 reply; 4+ messages in thread
From: Tomas Volf @ 2024-05-30 14:08 UTC (permalink / raw)
  To: Maxim Cournoyer; +Cc: 71125-done

[-- Attachment #1: Type: text/plain, Size: 550 bytes --]

On 2024-05-30 09:28:03 -0400, Maxim Cournoyer wrote:
> Hi,
>
> Tomas Volf <~@wolfsden.cz> writes:
>
> > This fixes CVE-2024-3727 and CVE-2024-28180.
> >
> > * gnu/packages/containers.scm (buildah): Update to 1.35.4.
>
> I see another patch of yours has landed meanwhile, updating it to
> 1.36.0.  I trust this is resolved.

Yes, I believe so.  I should have paid more attention and close this (obsolete)
patch.  Sorry about that.

Tomas

--
There are only two hard things in Computer Science:
cache invalidation, naming things and off-by-one errors.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

^ permalink raw reply	[flat|nested] 4+ messages in thread

* [bug#71125] [PATCH] gnu: buildah: Update to 1.35.4 [security fixes].
  2024-05-30 14:08   ` [bug#71125] " Tomas Volf
@ 2024-05-30 20:35     ` Maxim Cournoyer
  0 siblings, 0 replies; 4+ messages in thread
From: Maxim Cournoyer @ 2024-05-30 20:35 UTC (permalink / raw)
  To: Tomas Volf; +Cc: 71125-done

Hi Tomas,

Tomas Volf <~@wolfsden.cz> writes:

> On 2024-05-30 09:28:03 -0400, Maxim Cournoyer wrote:
>> Hi,
>>
>> Tomas Volf <~@wolfsden.cz> writes:
>>
>> > This fixes CVE-2024-3727 and CVE-2024-28180.
>> >
>> > * gnu/packages/containers.scm (buildah): Update to 1.35.4.
>>
>> I see another patch of yours has landed meanwhile, updating it to
>> 1.36.0.  I trust this is resolved.
>
> Yes, I believe so.  I should have paid more attention and close this (obsolete)
> patch.  Sorry about that.

No worries!  Thanks for the heads-up.

-- 
Thanks,
Maxim




^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2024-05-30 20:37 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2024-05-22 18:52 [bug#71125] [PATCH] gnu: buildah: Update to 1.35.4 [security fixes] Tomas Volf
2024-05-30 13:28 ` bug#71125: " Maxim Cournoyer
2024-05-30 14:08   ` [bug#71125] " Tomas Volf
2024-05-30 20:35     ` Maxim Cournoyer

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).