[meta-virtualization][scarthgap][PATCH 1/1] buildah: upgrade to 1.34.3

[meta-virtualization][scarthgap][PATCH 1/1] buildah: upgrade to 1.34.3

[yurade]

From: Yogita Urade <yogita.urade@windriver.com>

Includes fix for: CVE-2024-1753

Changelog:
=========
2db756331 (tag: v1.34.3) [release-1.34] Bump Buildah to v1.34.3
699d1ed51 [release-1.34] CVE-2024-24786 protobuf to 1.33
4ffe07267 Merge pull request #5419 from TomSweeneyRedHat/dev/tsweeney/cve-1.34
968e8ab62 [release-1.34] Bump to Buildah v1.34.3-dev
776a1463d (tag: v1.34.2) [release-1.34] Bump to Buildah v1.34.2
afc086b65 conformance tests: don't break on trailing zeroes in layer blobs
3deda1913 [release-1.34] CVE-2024-1753 container escape fix
14d60c988 Merge pull request #5365 from edsantiago/skip_unshare_on_rhel--1.34
4f775b4a1 tests: skip_if_no_unshare(): check for --setuid
dbeb097c6 Merge pull request #5352 from TomSweeneyRedHat/dev/tsweeney/buildah_1_34_1

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
---
 recipes-containers/buildah/buildah_git.bb | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/recipes-containers/buildah/buildah_git.bb b/recipes-containers/buildah/buildah_git.bb
index 64ee4f7d..90ffc238 100644
--- a/recipes-containers/buildah/buildah_git.bb
+++ b/recipes-containers/buildah/buildah_git.bb
@@ -8,7 +8,7 @@ LIC_FILES_CHKSUM = "file://src/github.com/containers/buildah/LICENSE;md5=e3fc50a
 
 S = "${WORKDIR}/git"
 
-BUILDAH_VERSION = "1.34.1"
+BUILDAH_VERSION = "1.34.3"
 
 PV = "${BUILDAH_VERSION}"
 
@@ -28,7 +28,7 @@ GO_WORKDIR = "${GO_INSTALL}"
 GOBUILDFLAGS += "-mod vendor"
 
 SRCREV_FORMAT = "buildah_storage"
-SRCREV_buildah = "dbeb097c6fbf4bfd643f096992da572a97a8ec12"
+SRCREV_buildah = "2db756331014a4f355507df47d2622d05532da1f"
 SRCREV_storage = "246ba3062e8b551026aef2708eee747014ce5c52"
 
 SRC_URI = " \
-- 
2.40.0

Re: [meta-virtualization][scarthgap][PATCH 1/1] buildah: upgrade to 1.34.3

[Bruce Ashfield]

I couldn't merge this prviously, as this would have made the
scarthgap version of buildah newer than the one on master.

But I've bumped master to 1.36, so this is now merged to
scarthgap

Bruce

In message: [meta-virtualization][scarthgap][PATCH 1/1] buildah: upgrade to 1.34.3
on 24/05/2024 Urade, Yogita via lists.yoctoproject.org wrote:

> From: Yogita Urade <yogita.urade@windriver.com>
> 
> Includes fix for: CVE-2024-1753
> 
> Changelog:
> =========
> 2db756331 (tag: v1.34.3) [release-1.34] Bump Buildah to v1.34.3
> 699d1ed51 [release-1.34] CVE-2024-24786 protobuf to 1.33
> 4ffe07267 Merge pull request #5419 from TomSweeneyRedHat/dev/tsweeney/cve-1.34
> 968e8ab62 [release-1.34] Bump to Buildah v1.34.3-dev
> 776a1463d (tag: v1.34.2) [release-1.34] Bump to Buildah v1.34.2
> afc086b65 conformance tests: don't break on trailing zeroes in layer blobs
> 3deda1913 [release-1.34] CVE-2024-1753 container escape fix
> 14d60c988 Merge pull request #5365 from edsantiago/skip_unshare_on_rhel--1.34
> 4f775b4a1 tests: skip_if_no_unshare(): check for --setuid
> dbeb097c6 Merge pull request #5352 from TomSweeneyRedHat/dev/tsweeney/buildah_1_34_1
> 
> Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
> ---
>  recipes-containers/buildah/buildah_git.bb | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/recipes-containers/buildah/buildah_git.bb b/recipes-containers/buildah/buildah_git.bb
> index 64ee4f7d..90ffc238 100644
> --- a/recipes-containers/buildah/buildah_git.bb
> +++ b/recipes-containers/buildah/buildah_git.bb
> @@ -8,7 +8,7 @@ LIC_FILES_CHKSUM = "file://src/github.com/containers/buildah/LICENSE;md5=e3fc50a
>  
>  S = "${WORKDIR}/git"
>  
> -BUILDAH_VERSION = "1.34.1"
> +BUILDAH_VERSION = "1.34.3"
>  
>  PV = "${BUILDAH_VERSION}"
>  
> @@ -28,7 +28,7 @@ GO_WORKDIR = "${GO_INSTALL}"
>  GOBUILDFLAGS += "-mod vendor"
>  
>  SRCREV_FORMAT = "buildah_storage"
> -SRCREV_buildah = "dbeb097c6fbf4bfd643f096992da572a97a8ec12"
> +SRCREV_buildah = "2db756331014a4f355507df47d2622d05532da1f"
>  SRCREV_storage = "246ba3062e8b551026aef2708eee747014ce5c52"
>  
>  SRC_URI = " \
> -- 
> 2.40.0
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#8750): https://lists.yoctoproject.org/g/meta-virtualization/message/8750
> Mute This Topic: https://lists.yoctoproject.org/mt/106278054/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>