From 7e18e312205347656e1e1e2c17bf6529a6275174 Mon Sep 17 00:00:00 2001 From: Adrian Perez de Castro Date: Thu, 7 May 2026 16:08:11 +0300 Subject: [PATCH] package/bubblewrap: security bump to version 0.11.2 Fixes CVE-2026-41163, which affects any system using bubblewrap 0.11.x using a setuid bubblewrap. Release notes: https://github.com/containers/bubblewrap/releases/tag/v0.11.2 Signed-off-by: Adrian Perez de Castro Signed-off-by: Julien Olivain (cherry picked from commit 108f51c1b35479a8c1c3c3d9ab58589ef26217f3) Signed-off-by: Thomas Perale --- package/bubblewrap/bubblewrap.hash | 5 ++--- package/bubblewrap/bubblewrap.mk | 3 ++- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/bubblewrap/bubblewrap.hash b/package/bubblewrap/bubblewrap.hash index 696c20ee07..e87d3c81cb 100644 --- a/package/bubblewrap/bubblewrap.hash +++ b/package/bubblewrap/bubblewrap.hash @@ -1,6 +1,5 @@ -# Also checked GPG signature from -# https://github.com/containers/bubblewrap/releases/tag/v0.11.1 -sha256 c1b7455a1283b1295879a46d5f001dfd088c0bb0f238abb5e128b3583a246f71 bubblewrap-0.11.1.tar.xz +# From https://github.com/containers/bubblewrap/releases/download/v0.11.2/bubblewrap-0.11.2.tar.xz.sha256sum +sha256 69abc30005d2186baf7737feacd8da35633b93cf5af38838ecff17c5f8e924f6 bubblewrap-0.11.2.tar.xz # Hash for license files: sha256 b7993225104d90ddd8024fd838faf300bea5e83d91203eab98e29512acebd69c COPYING diff --git a/package/bubblewrap/bubblewrap.mk b/package/bubblewrap/bubblewrap.mk index afbb29eab9..7838ab90b3 100644 --- a/package/bubblewrap/bubblewrap.mk +++ b/package/bubblewrap/bubblewrap.mk @@ -4,7 +4,7 @@ # ################################################################################ -BUBBLEWRAP_VERSION = 0.11.1 +BUBBLEWRAP_VERSION = 0.11.2 BUBBLEWRAP_SITE = https://github.com/containers/bubblewrap/releases/download/v$(BUBBLEWRAP_VERSION) BUBBLEWRAP_SOURCE = bubblewrap-$(BUBBLEWRAP_VERSION).tar.xz BUBBLEWRAP_DEPENDENCIES = host-pkgconf libcap @@ -18,6 +18,7 @@ BUBBLEWRAP_CONF_OPTS = \ -Dman=disabled \ -Dpython=$(HOST_DIR)/bin/python \ -Drequire_userns=false \ + -Dsupport_setuid=true \ -Dtests=false ifeq ($(BR2_PACKAGE_BASH_COMPLETION),y)