| Message ID | 20240816132639.3844618-1-aperez@igalia.com |
|---|---|
| State | Accepted |
| Headers | show |
| Series | package/bubblewrap: bump to version 0.10.0 | expand |
On Fri, 16 Aug 2024 16:26:37 +0300 Adrian Perez de Castro <aperez@igalia.com> wrote: > This version adds new --[ro-]bind-fd option, which other programs can > use to avoid TOCTOU attacks. Release notes: > > https://github.com/containers/bubblewrap/releases/tag/v0.10.0 > > Signed-off-by: Adrian Perez de Castro <aperez@igalia.com> > --- > package/bubblewrap/bubblewrap.hash | 5 +++-- > package/bubblewrap/bubblewrap.mk | 2 +- > 2 files changed, 4 insertions(+), 3 deletions(-) Applied to next, thanks. Thomas
diff --git a/package/bubblewrap/bubblewrap.hash b/package/bubblewrap/bubblewrap.hash index f61aca34f9..37276046b8 100644 --- a/package/bubblewrap/bubblewrap.hash +++ b/package/bubblewrap/bubblewrap.hash @@ -1,5 +1,6 @@ -# From https://github.com/containers/bubblewrap/releases/tag/v0.9.0 -sha256 c6347eaced49ac0141996f46bba3b089e5e6ea4408bc1c43bab9f2d05dd094e1 bubblewrap-0.9.0.tar.xz +# Locally generated after checking GPG signature from +# https://github.com/containers/bubblewrap/releases/tag/v0.10.0 +sha256 65d92cf44a63a51e1b7771f70c05013dce5bd6b0b2841c4b4be54b0c45565471 bubblewrap-0.10.0.tar.xz # Hash for license files: sha256 b7993225104d90ddd8024fd838faf300bea5e83d91203eab98e29512acebd69c COPYING diff --git a/package/bubblewrap/bubblewrap.mk b/package/bubblewrap/bubblewrap.mk index 9dd711ce47..94ae72d4d2 100644 --- a/package/bubblewrap/bubblewrap.mk +++ b/package/bubblewrap/bubblewrap.mk @@ -4,7 +4,7 @@ # ################################################################################ -BUBBLEWRAP_VERSION = 0.9.0 +BUBBLEWRAP_VERSION = 0.10.0 BUBBLEWRAP_SITE = https://github.com/containers/bubblewrap/releases/download/v$(BUBBLEWRAP_VERSION) BUBBLEWRAP_SOURCE = bubblewrap-$(BUBBLEWRAP_VERSION).tar.xz BUBBLEWRAP_DEPENDENCIES = host-pkgconf libcap
This version adds new --[ro-]bind-fd option, which other programs can use to avoid TOCTOU attacks. Release notes: https://github.com/containers/bubblewrap/releases/tag/v0.10.0 Signed-off-by: Adrian Perez de Castro <aperez@igalia.com> --- package/bubblewrap/bubblewrap.hash | 5 +++-- package/bubblewrap/bubblewrap.mk | 2 +- 2 files changed, 4 insertions(+), 3 deletions(-)