From 44d8cca58987e3ad10c7c7c1741bb615692c270d Mon Sep 17 00:00:00 2001 From: "Brian C. Lane" Date: Wed, 12 Aug 2026 14:41:14 -0700 Subject: [PATCH] - creator: Use safe_joinpaths in mount_boot_part_over_root (bcl) Resolves: RHEL-238020 - creator: Use safe_joinpaths in make_livecd (bcl) Related: RHEL-238020 - creator: Use safe_joinpaths in make_live_images (bcl) Related: RHEL-238020 - ltmpl: Check for paths inside outroot on hardlink, symlink, copy, move (bcl) Related: RHEL-238020 - sysutils: Add safe_joinpaths function (bcl) Related: RHEL-238020 - ltmpl: Add tests for access outside outroot (bcl) Related: RHEL-238020 - treebuilder: Check for symlink when writing module-info (bcl) Related: RHEL-238020 - findkernels: Exclude kernel symlinks pointing outside root (bcl) Related: RHEL-238020 - novirt_install: Use remove on /tmp paths and /mnt/sysimage (bcl) Related: RHEL-238020 - sysutils: Add a test for remove and symlinked directories (bcl) Related: RHEL-238020 --- .gitignore | 1 + lorax.spec | 24 +++++++++++++++++++++++- sources | 2 +- 3 files changed, 25 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index ef8098b..e230a81 100644 --- a/.gitignore +++ b/.gitignore @@ -256,3 +256,4 @@ /lorax-40.5.14.tar.gz /lorax-40.5.15.tar.gz /lorax-40.5.16.tar.gz +/lorax-40.5.17.tar.gz diff --git a/lorax.spec b/lorax.spec index 44bc7fd..a50588b 100644 --- a/lorax.spec +++ b/lorax.spec @@ -3,7 +3,7 @@ %define debug_package %{nil} Name: lorax -Version: 40.5.16 +Version: 40.5.17 Release: 1%{?dist} Summary: Tool for creating the anaconda install images @@ -182,6 +182,28 @@ make DESTDIR=$RPM_BUILD_ROOT mandir=%{_mandir} install %{_datadir}/lorax/templates.d/* %changelog +* Wed Aug 12 2026 Brian C. Lane 40.5.17-1 +- creator: Use safe_joinpaths in mount_boot_part_over_root (bcl) + Resolves: RHEL-238020 +- creator: Use safe_joinpaths in make_livecd (bcl) + Related: RHEL-238020 +- creator: Use safe_joinpaths in make_live_images (bcl) + Related: RHEL-238020 +- ltmpl: Check for paths inside outroot on hardlink, symlink, copy, move (bcl) + Related: RHEL-238020 +- sysutils: Add safe_joinpaths function (bcl) + Related: RHEL-238020 +- ltmpl: Add tests for access outside outroot (bcl) + Related: RHEL-238020 +- treebuilder: Check for symlink when writing module-info (bcl) + Related: RHEL-238020 +- findkernels: Exclude kernel symlinks pointing outside root (bcl) + Related: RHEL-238020 +- novirt_install: Use remove on /tmp paths and /mnt/sysimage (bcl) + Related: RHEL-238020 +- sysutils: Add a test for remove and symlinked directories (bcl) + Related: RHEL-238020 + * Tue Apr 14 2026 Brian C. Lane 40.5.16-1 - findkernels: Enable support for 64k kernel flavor (bcl) Resolves: RHEL-163728 diff --git a/sources b/sources index 521d7a0..1a044be 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (lorax-40.5.16.tar.gz) = 6a09e0b6f094b4fe0d531aaff717bee5d9f6b2988ef9acc142d6f88c650539377b0360df80d2d4de85de92e8b2d37421143a57272cf343cad93a76ecadebb77d +SHA512 (lorax-40.5.17.tar.gz) = 3e942e739f518a8ea367b03152d2c20b701b9a92cf5cdc4cb341418c56906240b4c39b3e096e6218b93ba493e9ba7fa5b4dd1b21af31b67847d867a35f118061