From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms1.migadu.com with LMTPS id iOxCKmXVTmbABwEAqHPOHw:P1 (envelope-from ) for ; Thu, 23 May 2024 07:34:29 +0200 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0.migadu.com with LMTPS id iOxCKmXVTmbABwEAqHPOHw (envelope-from ) for ; Thu, 23 May 2024 07:34:29 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1716442469; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-to:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post; bh=X2C93VkJ7GDLwrS/2SAZnAmY63Hgf0GtTxYqMfzT8v8=; b=XCRiaU6yuj8Kl9A7Q8C8VfT2yblW+oWIdw0HkInM0A1uxkM/DdrZCZuZsm4njB0esbxv3f KdChYfpyy6VQ6YS3nmGb4u6r01bdXpLVImyQRJZsWD4fiaAq0ZG/OOecnMBnMd1sG5j+pj lS6wMFi8aySS76g+1OGQv2WRp6WcLW4umcNTSnH2JxM3/oUZ72BoaEyNqiASC2aMEupvP8 1b2AcIo77kYtNTeB7cKUHFWNMpyRyCWNY8ULbcFqYDVYC2okeaFGhYI5SiqqlaAc8EErOo mkvvpBAAR8fuXCq2fDFOPv/YGfNQpNeWtUQU36kbmFwezxFvsxKnmOSorUSvEA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Seal: i=1; s=key1; d=yhetil.org; t=1716442469; a=rsa-sha256; cv=none; b=h3aAXXHkSLfupg/oSDltGkWFMKccn6bax/TjA02iLkkbG9mR2Dm+DQR28BQ+Rx8mJUTngL HG0OZJL1JjKZ63itVcFZnUqOjRJm+RVexyFC6ZbIks7W5H3jN+jaAGxSNRyJ/mxtOd85gl BAuBQmNe/m5jwr9OOeT3BY+9fSiPshax2m/PuModDUx6U+cbD1/JFrhHvvfl/gDCOPDw9v bKDXo/5CbxN3BlyUXkyTPPz3npx4FG61D8fi4JhGFs4+us6wZPSIM7GMnejm7lRWQdBDl3 zTAyA2CuE0A1fafTlrdNT5CgQNrqJI3JEs0pUEsx56k4kVGpzPh6ctOIb14Wlg== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 88C547F7BE for ; Thu, 23 May 2024 07:34:29 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1sA15d-0001Mw-Nx; Thu, 23 May 2024 01:34:09 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sA15S-0001KO-LH for guix-patches@gnu.org; Thu, 23 May 2024 01:34:02 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1sA15Q-0004Ys-PE for guix-patches@gnu.org; Thu, 23 May 2024 01:33:58 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1sA15V-0006jU-T8 for guix-patches@gnu.org; Thu, 23 May 2024 01:34:01 -0400 Subject: bug#71126: [PATCH] gnu: podman: Update to 5.0.3 [security fixes]. Resent-From: Zheng Junjie Original-Sender: "Debbugs-submit" Resent-To: guix-patches@gnu.org Resent-Date: Thu, 23 May 2024 05:34:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: cc-closed 71126 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Tomas Volf <~@wolfsden.cz> Cc: 71126-done@debbugs.gnu.org Mail-Followup-To: 71126@debbugs.gnu.org, zhengjunjie@iscas.ac.cn, ~@wolfsden.cz Received: via spool by 71126-done@debbugs.gnu.org id=D71126.171644238925849 (code D ref 71126); Thu, 23 May 2024 05:34:01 +0000 Received: (at 71126-done) by debbugs.gnu.org; 23 May 2024 05:33:09 +0000 Received: from localhost ([127.0.0.1]:58409 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sA14f-0006ir-ER for submit@debbugs.gnu.org; Thu, 23 May 2024 01:33:09 -0400 Received: from smtp21.cstnet.cn ([159.226.251.21]:42932 helo=cstnet.cn) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sA14c-0006hY-UW for 71126-done@debbugs.gnu.org; Thu, 23 May 2024 01:33:08 -0400 Received: from m (unknown [107.174.64.25]) by APP-01 (Coremail) with SMTP id qwCowAC3vxsA1U5mRRvqBg--.42531S2; Thu, 23 May 2024 13:32:51 +0800 (CST) From: Zheng Junjie In-Reply-To: <2be30a7b58d9158bc2b9fb4bece9b36e64b9c959.1716404297.git.~@wolfsden.cz> (Tomas Volf's message of "Wed, 22 May 2024 20:58:17 +0200") References: <2be30a7b58d9158bc2b9fb4bece9b36e64b9c959.1716404297.git.~@wolfsden.cz> User-Agent: mu4e 1.12.4; emacs 30.0.50 Date: Thu, 23 May 2024 13:32:46 +0800 Message-ID: <87fru9rt35.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: qwCowAC3vxsA1U5mRRvqBg--.42531S2 X-Coremail-Antispam: 1UD129KBjvJXoW7XFy7uF1UXw43Cr17Gr17KFg_yoW8Jr17pr y8ZrWY9r18G345Aay0gF12yw15XrZ8tay8Gw4rAan7AanIgFWkWFWIyF45JF9rArs7uw47 CayrXF1jqF48AFJanT9S1TB71UUUUUUqnTZGkaVYY2UrUUUUjbIjqfuFe4nvWSU5nxnvy2 9KBjDU0xBIdaVrnRJUUUvGb7Iv0xC_KF4lb4IE77IF4wAFF20E14v26r1j6r4UM7CY07I2 0VC2zVCF04k26cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r1j6r18M28lY4IEw2IIxxk0rw A2F7IY1VAKz4vEj48ve4kI8wA2z4x0Y4vE2Ix0cI8IcVAFwI0_JFI_Gr1l84ACjcxK6xII jxv20xvEc7CjxVAFwI0_Gr0_Cr1l84ACjcxK6I8E87Iv67AKxVW8Jr0_Cr1UM28EF7xvwV C2z280aVCY1x0267AKxVW0oVCq3wAa7VASzI0EjI02j7AqF2xKxVCjxxvEa2IrM2AIxVAI cxkEcVAq07x20xvEncxIr21le4C267I2x7xF54xIwI1l5I8CrVACY4xI64kE6c02F40Ex7 xfMcIj6xIIjxv20xvE14v26r1Y6r17McIj6I8E87Iv67AKxVWUJVW8JwAm72CE4IkC6x0Y z7v_Jr0_Gr1lF7xvr2IY64vIr41l42xK82IYc2Ij64vIr41l4I8I3I0E4IkC6x0Yz7v_Jr 0_Gr1lx2IqxVAqx4xG67AKxVWUJVWUGwC20s026x8GjcxK67AKxVWUGVWUWwC2zVAF1VAY 17CE14v26r1Y6r17MIIYrxkI7VAKI48JMIIF0xvE2Ix0cI8IcVAFwI0_Jr0_JF4lIxAIcV C0I7IYx2IY6xkF7I0E14v26r1j6r4UMIIF0xvE42xK8VAvwI8IcIk0rVWUJVWUCwCI42IY 6I8E87Iv67AKxVWUJVW8JwCI42IY6I8E87Iv6xkF7I0E14v26r4j6r4UJbIYCTnIWIevJa 73UjIFyTuYvjxU5lksDUUUU X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Spam-Score: -8.66 X-Migadu-Queue-Id: 88C547F7BE X-Migadu-Scanner: mx10.migadu.com X-Migadu-Spam-Score: -8.66 X-TUID: s337pdQQ9N0b --=-=-= Content-Type: text/plain Tomas Volf <~@wolfsden.cz> writes: > This fixes CVE-2024-3727. > > * gnu/packages/containers.scm (podman): Update to 5.0.3. > > Change-Id: Iefe98746c993830ef12c49733b8407b10305d065 > --- > gnu/packages/containers.scm | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/gnu/packages/containers.scm b/gnu/packages/containers.scm > index 917d152609..3d6d8bc716 100644 > --- a/gnu/packages/containers.scm > +++ b/gnu/packages/containers.scm > @@ -454,7 +454,7 @@ (define-public catatonit > (define-public podman > (package > (name "podman") > - (version "5.0.2") > + (version "5.0.3") > (source > (origin > (method git-fetch) > @@ -462,7 +462,7 @@ (define-public podman > (url "https://github.com/containers/podman") > (commit (string-append "v" version)))) > (sha256 > - (base32 "0x8npz0i3dyiaw30vdlb5n8kiaflgjqnrdbdk0yn5zgf5k1jlb7i")) > + (base32 "1wgaiwh7m547j9irz6z6ckxcbw8fwzqixh55q1fk2g7kfclfc3iw")) > (file-name (git-file-name name version)))) > (build-system gnu-build-system) > (arguments push, see https://git.savannah.gnu.org/cgit/guix.git/commit/?id=2d49d727b34e9e2aa2cb69dabe5db0a55a38caf9 --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmZO1P4ACgkQO1qpk+Gi 3/B5yg/+LXaTy0n3lQjEM7KKIn+on09RezzbdnNfsGj0xYhCutqXNS5weqIirlA7 avmNz9qtbz/KbHBxQHDaHypzLFTbUK6YSx2hEF3gx8gonVJ0dg3Tx0r54l3q5loZ SBg1lq7gZGQV57DdmbjUpw0NQNb9ezCCSbCxErrLRyzGoPS3s2cCUXxvwSHv510c fyjuFZ3Eik2WGh6984l/comCk68t1KsIxe+o4vX4aPm3+fONQphwmtiffzj5Yugt BTveXZ2S9/T+dIYoC6J+CzrVL7m05U3Ulot0OHJqDP5GXwrO73TF00bIRVJ2wgfK 87C7IBb+CwXUVcPOkxpeIjJSySTxlsoalwjT35sFI+yRocEtm6yIkFq4Rdok1Xwq +whNHTzA25BWtqv4uuCyLeclhQUDDUlmRANsTPSBiW4NqGBqsou72aZbZTdcnQ3G qICgXvXOvLH+sBmZ3qaBe4vTksZmOynQSHspdgf5IEcJZXVUoa0UwSe3ao6FPJti Xp+sqp/wX308GSdwaZHNTidKLH7GG6FP2iwr5+xF7BollneFdfzqJD1trpCYRLUX aVZS+q8hRZrGGN4B0kMdQHGnKifnmnpjYXue33Z1h5bG5F/NhCPb5eHqCVQ6Qd/e 3vN2IpqwG6UzjKaif7P6d8UW3ImalEXOBZXk7NvDwvvUDVAZgis= =GD5n -----END PGP SIGNATURE----- --=-=-=--