mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-01 21:23:51 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/bubblewrap: security bump to version 0.11.2

Browse Source 
Fixes CVE-2026-41163, which affects any system using bubblewrap 0.11.x
using a setuid bubblewrap.

Release notes:

  https://github.com/containers/bubblewrap/releases/tag/v0.11.2

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Adrian Perez de Castro
2026-05-07 16:08:11 +03:00
committed by Julien Olivain
parent e049f6fef1
commit 108f51c1b3
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
package/bubblewrap/bubblewrap.hash
View File

@@ -1,6 +1,5 @@
# Also checked GPG signature from
# https://github.com/containers/bubblewrap/releases/tag/v0.11.1
sha256 c1b7455a1283b1295879a46d5f001dfd088c0bb0f238abb5e128b3583a246f71 bubblewrap-0.11.1.tar.xz
# From https://github.com/containers/bubblewrap/releases/download/v0.11.2/bubblewrap-0.11.2.tar.xz.sha256sum
sha256 69abc30005d2186baf7737feacd8da35633b93cf5af38838ecff17c5f8e924f6 bubblewrap-0.11.2.tar.xz
# Hash for license files:
sha256 b7993225104d90ddd8024fd838faf300bea5e83d91203eab98e29512acebd69c COPYING

3
package/bubblewrap/bubblewrap.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
BUBBLEWRAP_VERSION = 0.11.1
BUBBLEWRAP_VERSION = 0.11.2
BUBBLEWRAP_SITE = https://github.com/containers/bubblewrap/releases/download/v$(BUBBLEWRAP_VERSION)
BUBBLEWRAP_SOURCE = bubblewrap-$(BUBBLEWRAP_VERSION).tar.xz
BUBBLEWRAP_DEPENDENCIES = host-pkgconf libcap
@@ -18,6 +18,7 @@ BUBBLEWRAP_CONF_OPTS = \
-Dman=disabled \
-Dpython=$(HOST_DIR)/bin/python \
-Drequire_userns=false \
-Dsupport_setuid=true \
-Dtests=false
ifeq ($(BR2_PACKAGE_BASH_COMPLETION),y)