[scarthgap][PATCH v2] podman: Upgrade 5.0.1 -> 5.0.3
<[email protected]> Fri, 24 Apr 2026 02:47:38 -0700
| Newsgroups | org.yoctoproject.lists.meta-virtualization |
|---|---|
| Message-ID | <[email protected]> |
From: Mingli Yu <[email protected]> Upgrade podman to 5.0.3 to include some bugfixes and some security fix such as CVE-2024-3727 [1]. Release notes: Security This release addresses CVE-2024-3727, a vulnerability in the containers/image library which allows attackers to trigger authenticated registry access on behalf of the victim user. Bugfixes Fixed a bug where podman machine start would fail if the machine had a volume with a long target path (#22226). Fixed a bug where podman machine start mounted volumes with paths that included dashes in the wrong location (#22505). Misc Updated Buildah to v1.35.4 Updated the containers/common library to v0.58.3 Updated the containers/image library to v5.30.1 [1] https://github.com/containers/podman/releases/tag/v5.0.3 Signed-off-by: Mingli Yu <[email protected]> --- recipes-containers/podman/podman_git.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/recipes-containers/podman/podman_git.bb b/recipes-containers/podman/podman_git.bb index ef9798f0..b80b8d5b 100644 --- a/recipes-containers/podman/podman_git.bb +++ b/recipes-containers/podman/podman_git.bb @@ -17,7 +17,7 @@ DEPENDS = " \ gettext-native \ " -SRCREV = "bb81e85a430fa95d23a15b77c717fd68bf06ebf2" +SRCREV = "d08315df35cb6e95f65bf3935f529295c6e54742" SRC_URI = " \ git://github.com/containers/libpod.git;branch=v5.0;protocol=https \ ${@bb.utils.contains('PACKAGECONFIG', 'rootless', 'file://50-podman-rootless.conf', '', d)} \ @@ -33,7 +33,7 @@ GO_IMPORT = "import" S = "${WORKDIR}/git" -PV = "5.0.1+git" +PV = "5.0.3+git" CVE_STATUS[CVE-2022-2989] = "fixed-version: fixed since v4.3.0" CVE_STATUS[CVE-2023-0778] = "fixed-version: fixed since v4.5.0" -- 2.49.0