From 8c204cab6ee4bd75cf960e5306b19d897680b6bd Mon Sep 17 00:00:00 2001 From: Jindrich Novy Date: Mon, 15 Dec 2025 16:18:42 +0100 Subject: [PATCH] buildah-1.33.13-1.el8 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/65707d0) - fixes "[Minor Incident] CVE-2025-52881 container-tools:rhel8/buildah: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-8.10.z]" - Resolves: RHEL-126916 Signed-off-by: Jindrich Novy --- buildah.spec | 12 +++++++++--- sources | 2 +- 2 files changed, 10 insertions(+), 4 deletions(-) diff --git a/buildah.spec b/buildah.spec index 5277554..ca80480 100644 --- a/buildah.spec +++ b/buildah.spec @@ -12,13 +12,13 @@ go build -buildmode pie -compiler gc -tags="rpm_crashtraceback libtrust_openssl %global import_path github.com/containers/buildah %global branch release-1.33 -%global commit0 cf49e7c062abd192ccbbe8ae336c6ef3c00dcefb +%global commit0 65707d09fb432b535e71bbbc3ecb82e86f84b23a %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) Epoch: 2 Name: buildah -Version: 1.33.12 -Release: 3%{?dist} +Version: 1.33.13 +Release: 1%{?dist} Summary: A command line tool used for creating OCI Images License: ASL 2.0 URL: https://%{name}.io @@ -136,6 +136,12 @@ make DESTDIR=%{buildroot} PREFIX=%{_prefix} -C docs install %{_datadir}/%{name}/test %changelog +* Mon Dec 15 2025 Jindrich Novy - 2:1.33.13-1 +- update to the latest content of https://github.com/containers/buildah/tree/release-1.33 + (https://github.com/containers/buildah/commit/65707d0) +- fixes "[Minor Incident] CVE-2025-52881 container-tools:rhel8/buildah: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-8.10.z]" +- Resolves: RHEL-126916 + * Wed Dec 03 2025 Jindrich Novy - 2:1.33.12-3 - rebuild for CVE-2025-58183 - Resolves: RHEL-125644 diff --git a/sources b/sources index 13653f1..d204096 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (release-1.33-cf49e7c.tar.gz) = ccb9d72e6abf18c7a0e2a3dfca65f6787c51e288656a390f6874cdd8f9e628abc92bd678abda498782f207c3c44a9f8bfeb4b7acc73d42f87d6cbb6ddbd0ff39 +SHA512 (release-1.33-65707d0.tar.gz) = f517837cc03bfc52a82f3f6aa76ea2e0665804eaaf5c59676e1b677ab25f7769d1175a803acddcafb0371017d730476e609e20f0d5040314823418ba7693e628