From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms1.migadu.com with LMTPS id aF8yJGN/WGYrgAEAqHPOHw:P1 (envelope-from ) for ; Thu, 30 May 2024 15:30:11 +0200 Received: from aspmx1.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0.migadu.com with LMTPS id aF8yJGN/WGYrgAEAqHPOHw (envelope-from ) for ; Thu, 30 May 2024 15:30:11 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=Q44WJiuy; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1717075811; a=rsa-sha256; cv=none; b=nnzykZRGubL0J2zZ+8EzamLL0CE+NbTTn0/5ccznuVgGjDPEFPD/mw5vUuDA+zCKnNap2i uIUiTaLIswx6xryT+6/YhzKRnFe/XgfFL+2PQYcHuPmtJ4CHxJjO7Rakj7weVOAObzJ7YA UdB7FqjrMzHyO5nbz7rHDuC1KdUovLuLYF+jtQEnuTRmJFyfepxnRNvMXXgrmyMOtkMDvd Nphj+SFcWILFZtagQfStuFeC2hM5ySm45afirIEdffrCbnVp47gNtUffcpO7uOjP640gzq pzbDAVVPeiXH0lskd3BnLgz6kK18zqn5Nb9lztSp6CN6A6qQV1Q6fMOKvt5HHg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=Q44WJiuy; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1717075811; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-to:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=X60AlyJUUaUw6BLd2ZynpECYkAFWD6xIsrt8bkZOsV4=; b=pvdaCqX5Wz9+Dx6lbvNH+F8EQepTfYHQ478SQe1zOUt+jLZdyEpQuy4udOMSvN2jkzy7Os gzgjIFYojsg4a9eTeeupWcB7iKnyqduDfuUy260VhAqEA9mEBG8TOS7e7kJBkSyKE1xd+3 sXZimHAc/zl/GwhIZisHjqrm8Xk6dVUhozt+Lx/QdEeqmdwXyzjNGUl0dSmaqdSlma00x+ U0YPBCL23Sn3zrR9s3D3fV5gTcS9VLX6LC9iVz+1Rfu5pJZj+pqB7fEvycgVykRczVZUQH EjajWbv7HuxWtqIp3vj00avRJ5N+ePaKGx7hi5nWvLHhKp7pZi7qzSAJryW73w== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 6FC8A304E9 for ; Thu, 30 May 2024 15:30:11 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1sCfqv-0002sv-Dm; Thu, 30 May 2024 09:29:57 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sCfqr-0002qF-3w for guix-patches@gnu.org; Thu, 30 May 2024 09:29:53 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1sCfqq-0001nY-S3 for guix-patches@gnu.org; Thu, 30 May 2024 09:29:52 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1sCfr1-0000q9-8w for guix-patches@gnu.org; Thu, 30 May 2024 09:30:03 -0400 Subject: bug#71125: [PATCH] gnu: buildah: Update to 1.35.4 [security fixes]. Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-To: guix-patches@gnu.org Resent-Date: Thu, 30 May 2024 13:30:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: cc-closed 71125 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Tomas Volf <~@wolfsden.cz> Cc: 71125-done@debbugs.gnu.org Mail-Followup-To: 71125@debbugs.gnu.org, maxim.cournoyer@gmail.com, ~@wolfsden.cz Received: via spool by 71125-done@debbugs.gnu.org id=D71125.17170757643127 (code D ref 71125); Thu, 30 May 2024 13:30:03 +0000 Received: (at 71125-done) by debbugs.gnu.org; 30 May 2024 13:29:24 +0000 Received: from localhost ([127.0.0.1]:35747 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sCfqN-0000oL-Ol for submit@debbugs.gnu.org; Thu, 30 May 2024 09:29:24 -0400 Received: from mail-oi1-f180.google.com ([209.85.167.180]:54587) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sCfqL-0000o3-9O for 71125-done@debbugs.gnu.org; Thu, 30 May 2024 09:29:21 -0400 Received: by mail-oi1-f180.google.com with SMTP id 5614622812f47-3d19dfb3dceso426402b6e.1 for <71125-done@debbugs.gnu.org>; Thu, 30 May 2024 06:29:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1717075685; x=1717680485; darn=debbugs.gnu.org; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=X60AlyJUUaUw6BLd2ZynpECYkAFWD6xIsrt8bkZOsV4=; b=Q44WJiuyT3M7exdr0qY2TMiV0RT0jdZcIxXwxQfcalKP4efdnThJKZEOpPjAkxBoAB 8Ov1Oc7rv4C+PD++jmudBJHDByxpQi7QjWzDs7ugZtCiU/Ww1jSFFDErR2UzrOT3Ptv8 BFklRaL9+5ELLmtJyLdAqkvkjh+00vQAokkinsRdVTcKerIqRpD2hNCjir1TcnYkeCva cB6JbjPEcf49qxJpZb0G/j1rXMb/ScPIulBb3V8FwbPovTdT0sHjTebG0a9AIjxDebz/ sD7UaaDMvIcJmHOw5YETyakRR9Ud9ftkCpN4onjUjYMl5tDGIorzUYzYn+OYkEaNQSDK 4eEw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1717075685; x=1717680485; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=X60AlyJUUaUw6BLd2ZynpECYkAFWD6xIsrt8bkZOsV4=; b=XjN3HApP4vCTz3tcbNCkR5AGbV3DGOvZDc17Oq5Lf7MfwkeDHFUAZBQ0AyZVQjwRuR g3XpYI1yEsrpZ5v+6Nxbp9hboHD3IvXx0xng6t4KlON3iAO33o0OzOnTOHMnv+owJxy+ IjOBjLup3s3vo/rUh4pdeLF5tBJTa0l7zvS7y0uC2oXuz77H/ilNJbHX15Y5ozaVfZMH 6tdZCJDAd7EfgvrMcXpIpo1hdZJhmKkWvEDhzgOG9/V2H5NxHvPj10QUqf1iaEKO2Bzz myQfWpZoitLCoXYi8L3cX05bQ/jLzfoIOkn04TqOlW47xgyij2vzhpAl/ptTBZisMkoj 2qQQ== X-Gm-Message-State: AOJu0Yy+KXN+7l3vD9Lagh2lz2xTkn0opLz8iI0GxKO97+BL+/Yq52IJ rj5NvhOfF1l1qQ0fdWlbOlJQHjSISn+JDEggwqJHKkZdvJ+92WMqAYV8S1ZE X-Google-Smtp-Source: AGHT+IEs9yn/bfZlOLNN2yJFucCU2rPTKxfIQn6ObO2eCN36HUcb2FsNFJZwtdHYuSuTQNag19tD4w== X-Received: by 2002:a05:6808:4393:b0:3d1:d340:b438 with SMTP id 5614622812f47-3d1dcca6663mr1989066b6e.19.1717075684652; Thu, 30 May 2024 06:28:04 -0700 (PDT) Received: from hurd (dsl-205-233-124-92.b2b2c.ca. [205.233.124.92]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-6ad8fd2c621sm28035056d6.113.2024.05.30.06.28.03 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 30 May 2024 06:28:04 -0700 (PDT) From: Maxim Cournoyer In-Reply-To: <3199a6f4c03372b649f40145a4da52837f9a1f70.1716403923.git.~@wolfsden.cz> (Tomas Volf's message of "Wed, 22 May 2024 20:52:03 +0200") References: <3199a6f4c03372b649f40145a4da52837f9a1f70.1716403923.git.~@wolfsden.cz> Date: Thu, 30 May 2024 09:28:03 -0400 Message-ID: <87frtze8f0.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Queue-Id: 6FC8A304E9 X-Migadu-Scanner: mx12.migadu.com X-Migadu-Spam-Score: 2.65 X-Spam-Score: 2.65 X-TUID: CLFOn9j9AfNM Hi, Tomas Volf <~@wolfsden.cz> writes: > This fixes CVE-2024-3727 and CVE-2024-28180. > > * gnu/packages/containers.scm (buildah): Update to 1.35.4. I see another patch of yours has landed meanwhile, updating it to 1.36.0. I trust this is resolved. -- Thanks, Maxim