From 4b5dea3787b474b5c41a285bc04719abd069716e Mon Sep 17 00:00:00 2001 From: eabdullin Date: Tue, 25 Nov 2025 08:48:11 +0000 Subject: [PATCH] import UBI buildah-1.41.6-1.el9_7 --- .buildah.metadata | 2 +- .gitignore | 2 +- SPECS/buildah.spec | 16 +++++++++++++--- 3 files changed, 15 insertions(+), 5 deletions(-) diff --git a/.buildah.metadata b/.buildah.metadata index 32e5129..e8e49a5 100644 --- a/.buildah.metadata +++ b/.buildah.metadata @@ -1 +1 @@ -de524682d204c7adee42f1354a29590d491103b6 SOURCES/release-1.41-ee5b574.tar.gz +e4544469d805e83899b0e23122d46da4efff27b5 SOURCES/release-1.41-2ece502.tar.gz diff --git a/.gitignore b/.gitignore index cb957c5..d83138c 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -SOURCES/release-1.41-ee5b574.tar.gz +SOURCES/release-1.41-2ece502.tar.gz diff --git a/SPECS/buildah.spec b/SPECS/buildah.spec index 457f6e6..11166c7 100644 --- a/SPECS/buildah.spec +++ b/SPECS/buildah.spec @@ -11,7 +11,7 @@ %global import_path github.com/containers/buildah %global branch release-1.41 -%global commit0 ee5b5742b0c5f8c879b140146b93971bb6a0d385 +%global commit0 2ece502d92acf1b3fab0fdf2329c41652440bf40 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) %if %{defined fedora} @@ -37,10 +37,10 @@ Epoch: 2 # If that's what you're reading, Version must be 0, and will be updated by Packit for # copr and koji builds. # If you're reading this on dist-git, the version is automatically filled in by Packit. -Version: 1.41.4 +Version: 1.41.6 # The `AND` needs to be uppercase in the License for SPDX compatibility License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 -Release: 3%{?dist} +Release: 1%{?dist} %if %{defined golang_arches_future} ExclusiveArch: %{golang_arches_future} %else @@ -193,6 +193,16 @@ rm %{buildroot}%{_datadir}/%{name}/test/system/tools/build/* %{_datadir}/%{name}/test %changelog +* Thu Nov 20 2025 Jindrich Novy - 2:1.41.6-1 +- update to the latest content of https://github.com/containers/buildah/tree/release-1.41 + (https://github.com/containers/buildah/commit/2ece502) +- fixes "[Minor Incident] CVE-2025-52881 buildah: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-9.7.z]" +- Resolves: RHEL-126925 + +* Thu Nov 20 2025 Jindrich Novy - 2:1.41.4-4 +- rebuild for CVE-2025-58183 +- Resolves: RHEL-125680 + * Fri Oct 24 2025 Jan Kaluza - 2:1.41.4-3 - fix the TMT tests - Related: RHEL-115166