[meta-virtualization][kirkstone][PATCH 1/1] buildah: upgrade 1.26.8 -> 1.26.9

[meta-virtualization][kirkstone][PATCH 1/1] buildah: upgrade 1.26.8 -> 1.26.9

[Praveen Kumar]

This upgrade fixes:
CVE-2024-11218

Changes in this Upgrade:
=========================
This upgrade from Buildah 1.26.8 to 1.26.9 includes important security and stability fixes:
- Fixes CVE-2024-11218
- Resolves TOCTOU error when bind and cache mounts use "src" values
- Fixes cache locks with multiple mounts
- Enhances volume handling and mount label options

For full details, refer to:
https://github.com/containers/buildah/releases/tag/v1.26.9

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
---
 recipes-containers/buildah/buildah_git.bb | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/recipes-containers/buildah/buildah_git.bb b/recipes-containers/buildah/buildah_git.bb
index 45d7b31d..10597d8a 100644
--- a/recipes-containers/buildah/buildah_git.bb
+++ b/recipes-containers/buildah/buildah_git.bb
@@ -8,9 +8,9 @@ LIC_FILES_CHKSUM = "file://src/github.com/containers/buildah/LICENSE;md5=e3fc50a
 
 S = "${WORKDIR}/git"
 
-SRCREV_buildah = "e2feca77516568553dc1318019cea90ae000e0f3"
+SRCREV_buildah = "9aaa280f29910a9a0a13b83dd522508f1fa40a91"
 
-PV = "1.26.8"
+PV = "1.26.9"
 
 inherit go
 inherit goarch
-- 
2.40.0

Re: [meta-virtualization][kirkstone][PATCH 1/1] buildah: upgrade 1.26.8 -> 1.26.9

[Bruce Ashfield]

merged.

Bruce

In message: [meta-virtualization][kirkstone][PATCH 1/1] buildah: upgrade 1.26.8 -> 1.26.9
on 27/03/2025 Praveen Kumar via lists.yoctoproject.org wrote:

> This upgrade fixes:
> CVE-2024-11218
> 
> Changes in this Upgrade:
> =========================
> This upgrade from Buildah 1.26.8 to 1.26.9 includes important security and stability fixes:
> - Fixes CVE-2024-11218
> - Resolves TOCTOU error when bind and cache mounts use "src" values
> - Fixes cache locks with multiple mounts
> - Enhances volume handling and mount label options
> 
> For full details, refer to:
> https://github.com/containers/buildah/releases/tag/v1.26.9
> 
> Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
> ---
>  recipes-containers/buildah/buildah_git.bb | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/recipes-containers/buildah/buildah_git.bb b/recipes-containers/buildah/buildah_git.bb
> index 45d7b31d..10597d8a 100644
> --- a/recipes-containers/buildah/buildah_git.bb
> +++ b/recipes-containers/buildah/buildah_git.bb
> @@ -8,9 +8,9 @@ LIC_FILES_CHKSUM = "file://src/github.com/containers/buildah/LICENSE;md5=e3fc50a
>  
>  S = "${WORKDIR}/git"
>  
> -SRCREV_buildah = "e2feca77516568553dc1318019cea90ae000e0f3"
> +SRCREV_buildah = "9aaa280f29910a9a0a13b83dd522508f1fa40a91"
>  
> -PV = "1.26.8"
> +PV = "1.26.9"
>  
>  inherit go
>  inherit goarch
> -- 
> 2.40.0
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#9178): https://lists.yoctoproject.org/g/meta-virtualization/message/9178
> Mute This Topic: https://lists.yoctoproject.org/mt/111932455/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>