Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 924456

Summary: app-containers/buildah-1.33.6 stabilization for amd64 arm64
Product: Gentoo Linux Reporter: Rahil Bhimjiani <me>
Component: StabilizationAssignee: Zac Medico <zmedico>
Status: RESOLVED FIXED    
Severity: normal CC: eschwartz93, me, proxy-maint, zmedico
Priority: Normal Keywords: CC-ARCHES, PullRequest, REGRESSION, SECURITY, STABLEREQ
Version: unspecifiedFlags: nattka: sanity-check+
Hardware: All   
OS: Linux   
See Also: https://github.com/gentoo/gentoo/pull/35261
https://github.com/containers/buildah/issues/5320
Whiteboard:
Package list:
=app-containers/buildah-1.33.6 amd64 arm64
Runtime testing required: ---
Bug Depends on:    
Bug Blocks: 923650    

Description Rahil Bhimjiani 2024-02-14 07:16:12 UTC
Masking 1.34.0 because of no security patches from upstream. Stable users need to downgrade to 1.33.5 which has security fixes.

https://github.com/gentoo/gentoo/pull/35261/commits
Comment 1 Joonas Niilola gentoo-dev 2024-02-15 07:38:06 UTC
amd64 done
Comment 2 Zac Medico gentoo-dev 2024-02-17 16:57:56 UTC
Since 1.33.6 was release only a few days ago let's give it some more time in ~arch and finish up with the 1.33.5 stabilization for now. Thanks!
Comment 3 Larry the Git Cow gentoo-dev 2024-03-07 01:25:09 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=feb2fbb1380da93733c29ca730ea82bfc9a1da76

commit feb2fbb1380da93733c29ca730ea82bfc9a1da76
Author:     Zac Medico <zmedico@gentoo.org>
AuthorDate: 2024-02-14 07:07:54 +0000
Commit:     Zac Medico <zmedico@gentoo.org>
CommitDate: 2024-03-07 01:24:39 +0000

    app-containers/buildah: mask 1.34.0 for amd64 (arm64 first must stabilize 1.33.x)
    
    Masking because it isn't getting security fixes from upstream and seems
    like 1.34.x is more suitable for podman 5.x (yet to be released)
    
    https://github.com/containers/buildah/issues/5320
    
    Bug: https://bugs.gentoo.org/924456
    From: https://github.com/gentoo/gentoo/pull/35261
    Signed-off-by: Zac Medico <zmedico@gentoo.org>

 app-containers/buildah/buildah-1.34.0.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
Comment 4 Arthur Zamarin archtester Gentoo Infrastructure gentoo-dev Security 2024-03-17 09:18:46 UTC
arm64 done

all arches done