From 184dfb89aa3a5bb75671c723920d5726b00ca34e Mon Sep 17 00:00:00 2001 From: "octo-sts[bot]" <157150467+octo-sts[bot]@users.noreply.github.com> Date: Mon, 16 Dec 2024 19:38:27 +0000 Subject: [PATCH] podman/5.3.1-r0: cve remediation (#36917) podman/5.3.1-r0: fix GHSA-v778-237x-gjrc Advisory data: https://github.com/wolfi-dev/advisories/blob/main/podman.advisories.yaml Co-authored-by: octo-sts[bot] <157150467+octo-sts@users.noreply.github.com> --- podman.yaml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/podman.yaml b/podman.yaml index 7091263b95e..7613ba37761 100644 --- a/podman.yaml +++ b/podman.yaml @@ -1,7 +1,7 @@ package: name: podman version: 5.3.1 - epoch: 0 + epoch: 1 description: "A tool for managing OCI containers and pods" copyright: - license: Apache-2.0 @@ -46,6 +46,10 @@ pipeline: tag: v${{package.version}} expected-commit: 4cbdfde5d862dcdbe450c0f1d76ad75360f67a3c + - uses: go/bump + with: + deps: golang.org/x/crypto@v0.31.0 + - runs: | make # Would be great to run these tests eventually, but requires podman and a privileged container to do networking stuff