-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 16 Oct 2024 08:07:46 -0400
Source: golang-github-containers-buildah
Architecture: source
Version: 1.37.4+ds1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Reinhard Tartler <siretart@tauware.de>
Closes: 1084980
Changes:
golang-github-containers-buildah (1.37.4+ds1-1) unstable; urgency=medium
.
* New upstream release, Closes: #1084980
Fixes: CVE-2024-9407, CVE-2024-9341: validate "bind-propagation" flag settings
Fixes: https://issues.redhat.com/browse/RHEL-61147
Fixes: https://issues.redhat.com/browse/RHEL-61145
* Backport upstream patch for CVE-2024-9675
* debian/control: tighten dependencies on containers/common
Checksums-Sha1:
2ef833821e768ae8d1a172ba562674b6a8997637 4105 golang-github-containers-buildah_1.37.4+ds1-1.dsc
33294850b8bd28c79241049497030f1a88890202 984988 golang-github-containers-buildah_1.37.4+ds1.orig.tar.xz
ab05e9d9eef6b0d65bf7515fd24d2d5a4031a8ad 11108 golang-github-containers-buildah_1.37.4+ds1-1.debian.tar.xz
Checksums-Sha256:
75181af27559c6931869599e261135fde028276ef66ed6db90718040c5d0c513 4105 golang-github-containers-buildah_1.37.4+ds1-1.dsc
998e51b09586debf271c675c2c05de6caf77937d3cc39b46d7b0e6e5ff5e095f 984988 golang-github-containers-buildah_1.37.4+ds1.orig.tar.xz
7428e3443fb19099d6f2ebb9e40bd66137d36639c338d5ee73ea580035984c10 11108 golang-github-containers-buildah_1.37.4+ds1-1.debian.tar.xz
Files:
1ca0a066449a53d2b2cf242f41a97015 4105 devel optional golang-github-containers-buildah_1.37.4+ds1-1.dsc
73943cce3f583d8242dbddaa84403781 984988 devel optional golang-github-containers-buildah_1.37.4+ds1.orig.tar.xz
4429577d15fdf247de01523997a330fa 11108 devel optional golang-github-containers-buildah_1.37.4+ds1-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=KRSU
-----END PGP SIGNATURE-----
Attachment:
pgpEIkUIFRPZM.pgp
Description: PGP signature