-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 23 Jan 2025 06:35:06 -0500
Source: golang-github-containers-buildah
Architecture: source
Version: 1.38.1+ds1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Reinhard Tartler <siretart@tauware.de>
Changes:
golang-github-containers-buildah (1.38.1+ds1-1) unstable; urgency=medium
.
* New upstream release
* Tighten dependencies on containers/{storage,image,common}
* Fix TOCTOU error when bind and cache mounts use "src" values
Fixes: CVE-2024-11218
* refresh patches/0006-tolerate-absence-of-netavark-binary-in-tests
* Expand patches/root-testfail-ignore.patch
Checksums-Sha1:
6d31814a7fe894eb5b6bf65592d1e475e676ee9d 4285 golang-github-containers-buildah_1.38.1+ds1-1.dsc
f2941ff97957d88115a2cf56e102c17142dd0b38 982688 golang-github-containers-buildah_1.38.1+ds1.orig.tar.xz
390815c030e4841ae5ea700882ffd18b5b68245d 11496 golang-github-containers-buildah_1.38.1+ds1-1.debian.tar.xz
Checksums-Sha256:
d7cd2359dbedf161f01ac2592579169395355922a307a2584ad71b9b972c4d49 4285 golang-github-containers-buildah_1.38.1+ds1-1.dsc
6aaa2398cd4b3fb3c13f92cbf2e88e0f8afeb6c32912187d45be1dcdd15b50d2 982688 golang-github-containers-buildah_1.38.1+ds1.orig.tar.xz
061721bcafffab89f93f06263c0379823a3f6c55a7fcd5c706d3fa39eca80185 11496 golang-github-containers-buildah_1.38.1+ds1-1.debian.tar.xz
Files:
551ba53fb256baf58f8bcdb2b3a1297c 4285 devel optional golang-github-containers-buildah_1.38.1+ds1-1.dsc
028b6b1b41b921080cad51bc0803c815 982688 devel optional golang-github-containers-buildah_1.38.1+ds1.orig.tar.xz
051657e113246b74cf8c229058b99917 11496 devel optional golang-github-containers-buildah_1.38.1+ds1-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=8rR0
-----END PGP SIGNATURE-----
