Re: [meta-virtualization][PATCH] alpine-oci-base: upgrade to 3.24.1

Bruce Ashfield <[email protected]> Fri, 3 Jul 2026 09:46:09 -0400
Newsgroups org.yoctoproject.lists.meta-virtualization
Message-ID <[email protected]>
merged.

Thanks for the updates, I haven't added these packaged images to
my regular update flows, so revision bumps are welcome!

Bruce

In message: [meta-virtualization][PATCH] alpine-oci-base: upgrade to 3.24.1
on 30/06/2026 Tim Orling via lists.yoctoproject.org wrote:

> Upstream release notes:
> https://alpinelinux.org/posts/Alpine-3.24.1-released.html
> 
> CVE: CVE-2026-34180
> CVE: CVE-2026-34181
> CVE: CVE-2026-34182
> CVE: CVE-2026-34183
> CVE: CVE-2026-42764
> CVE: CVE-2026-42766
> CVE: CVE-2026-42767
> CVE: CVE-2026-42768
> CVE: CVE-2026-42769
> CVE: CVE-2026-42770
> CVE: CVE-2026-45445
> CVE: CVE-2026-45446
> CVE: CVE-2026-45447
> CVE: CVE-2026-7383
> CVE: CVE-2026-9076
> 
> The full git commit log:
> https://git.alpinelinux.org/aports/log/?h=v3.24.1
> 
> Signed-off-by: Tim Orling <[email protected]>
> ---
>  .../{alpine-oci-base_3.23.bb => alpine-oci-base_3.24.bb}    | 6 +++---
>  1 file changed, 3 insertions(+), 3 deletions(-)
>  rename recipes-containers/oci-base-images/{alpine-oci-base_3.23.bb => alpine-oci-base_3.24.bb} (83%)
> 
> diff --git a/recipes-containers/oci-base-images/alpine-oci-base_3.23.bb b/recipes-containers/oci-base-images/alpine-oci-base_3.24.bb
> similarity index 83%
> rename from recipes-containers/oci-base-images/alpine-oci-base_3.23.bb
> rename to recipes-containers/oci-base-images/alpine-oci-base_3.24.bb
> index 7bf067d3..88e14789 100644
> --- a/recipes-containers/oci-base-images/alpine-oci-base_3.23.bb
> +++ b/recipes-containers/oci-base-images/alpine-oci-base_3.24.bb
> @@ -21,11 +21,11 @@ LIC_FILES_CHKSUM = "file://${COMMON_LICENSE_DIR}/MIT;md5=0835ade698e0bcf8506ecda
>  inherit container-bundle
>  
>  # Remote container from Docker Hub
> -CONTAINER_BUNDLES = "docker.io/library/alpine:3.23"
> +CONTAINER_BUNDLES = "docker.io/library/alpine:3.24"
>  
>  # REQUIRED: Pinned digest for reproducible builds
> -# Get with: skopeo inspect docker://docker.io/library/alpine:3.23 | jq -r '.Digest'
> -CONTAINER_DIGESTS[docker.io_library_alpine_3.23] = "sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11"
> +# Get with: skopeo inspect docker://docker.io/library/alpine:3.24 | jq -r '.Digest'
> +CONTAINER_DIGESTS[docker.io_library_alpine_3.24] = "sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b"
>  
>  # Enable deployment to DEPLOY_DIR_IMAGE for use as OCI base layer
>  CONTAINER_BUNDLE_DEPLOY = "1"
> -- 
> 2.54.0
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#9908): https://lists.yoctoproject.org/g/meta-virtualization/message/9908
> Mute This Topic: https://lists.yoctoproject.org/mt/120052438/1050810
> Group Owner: [email protected]
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [[email protected]]
> -=-=-=-=-=-=-=-=-=-=-=-
>