Re: [meta-virtualization][kirkstone][PATCH 1/1] buildah: upgrade 1.26.8 -> 1.26.9

[Bruce Ashfield <bruce.ashfield@gmail.com>]

merged.

Bruce

In message: [meta-virtualization][kirkstone][PATCH 1/1] buildah: upgrade 1.26.8 -> 1.26.9
on 27/03/2025 Praveen Kumar via lists.yoctoproject.org wrote:

> This upgrade fixes:
> CVE-2024-11218
> 
> Changes in this Upgrade:
> =========================
> This upgrade from Buildah 1.26.8 to 1.26.9 includes important security and stability fixes:
> - Fixes CVE-2024-11218
> - Resolves TOCTOU error when bind and cache mounts use "src" values
> - Fixes cache locks with multiple mounts
> - Enhances volume handling and mount label options
> 
> For full details, refer to:
> https://github.com/containers/buildah/releases/tag/v1.26.9
> 
> Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
> ---
>  recipes-containers/buildah/buildah_git.bb | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/recipes-containers/buildah/buildah_git.bb b/recipes-containers/buildah/buildah_git.bb
> index 45d7b31d..10597d8a 100644
> --- a/recipes-containers/buildah/buildah_git.bb
> +++ b/recipes-containers/buildah/buildah_git.bb
> @@ -8,9 +8,9 @@ LIC_FILES_CHKSUM = "file://src/github.com/containers/buildah/LICENSE;md5=e3fc50a
>  
>  S = "${WORKDIR}/git"
>  
> -SRCREV_buildah = "e2feca77516568553dc1318019cea90ae000e0f3"
> +SRCREV_buildah = "9aaa280f29910a9a0a13b83dd522508f1fa40a91"
>  
> -PV = "1.26.8"
> +PV = "1.26.9"
>  
>  inherit go
>  inherit goarch
> -- 
> 2.40.0
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#9178): https://lists.yoctoproject.org/g/meta-virtualization/message/9178
> Mute This Topic: https://lists.yoctoproject.org/mt/111932455/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>