Commits on Oct 2, 2024

1. CVE-2024-9407: validate "bind-propagation" flag settings …

   CVE-2024-9407: validate that the value for the "bind-propagation" flag
   when handling "bind" and "cache" mounts in `buildah run` or in RUN
   instructions is one of the values that we would accept without the
   "bind-propagation=" prefix.
   
   Paul: fix merged conflict in tests (cherry-picked from 732f770)
   
   Fixes https://issues.redhat.com/browse/RHEL-61147
   Fixes https://issues.redhat.com/browse/RHEL-61145
   
   Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
   Signed-off-by: Paul Holzinger <pholzing@redhat.com>

   

   nalind authored and Luap99 committed Oct 2, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for e289e28
   • Browse repository at this point

   Copy the full SHA

   e289e28 View commit details

   Browse the repository at this point in the history

2. vendor: update c/common to v0.60.4 …

   Update c/common to fix CVE-2024-9341
   
   Fixes CVE-2024-9341
   Fixes https://issues.redhat.com/browse/RHEL-61114
   Fixes https://issues.redhat.com/browse/RHEL-61112
   
   Signed-off-by: Paul Holzinger <pholzing@redhat.com>

   

   Luap99 committed Oct 2, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for b55cbb8
   • Browse repository at this point

   Copy the full SHA

   b55cbb8 View commit details

   Browse the repository at this point in the history