From 0d0c931ce80fc03c9ac6365707f46f4380c43d37 Mon Sep 17 00:00:00 2001 From: Jindrich Novy Date: Thu, 20 Aug 2026 11:50:23 +0200 Subject: [PATCH] rebuild with Go 1.25.11 to fix CVE-2026-33818, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862 Resolves: RHEL-241525 RHEL-241893 RHEL-242090 RHEL-242326 Signed-off-by: Jindrich Novy --- crun.spec | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/crun.spec b/crun.spec index 862dfb2..4ed59df 100644 --- a/crun.spec +++ b/crun.spec @@ -1,7 +1,7 @@ Summary: OCI runtime written in C Name: crun Version: 1.14.3 -Release: 2%{?dist} +Release: 3%{?dist} Source0: https://github.com/containers/%{name}/releases/download/%{version}/%{name}-%{version}.tar.gz License: GPLv2+ URL: https://github.com/containers/crun @@ -49,6 +49,10 @@ rm -rf %{buildroot}%{_prefix}/lib* %{_mandir}/man1/* %changelog +* Thu Aug 20 2026 Jindrich Novy - 1.14.3-3 +- rebuild with Go 1.25.11 to fix CVE-2026-33818, CVE-2026-56853, CVE-2026-56858, + CVE-2026-56859, CVE-2026-56860, CVE-2026-56862 + * Mon Feb 19 2024 Jindrich Novy - 1.14.3-2 - remove BR libgcrypt-devel, no longer needed - Related: Jira:RHEL-2110