package/bubblewrap: security bump to version 0.13.0

While there are no CVEs for this Bubblewrap release, it includes a fix
to ensure that arguments that receive a path are not empty (which before
treated those as the root directory: a bit of a footgun!), and that is a
follow-up to the security fixes included in 0.12.0.

Additionally, it patches a number of build failures, which fixes e.g.:

  https://autobuild.buildroot.org/results/2eb2d222daaadc2eb16b42fa2ec102ab0689f038
  https://autobuild.buildroot.org/results/674413f089ce9b80a59058674b3ef6879e1d389c

Release notes:

  https://github.com/containers/bubblewrap/releases/tag/v0.13.0

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Adrian Perez de Castro
2026-09-24 23:41:47 +02:00
committed by Julien Olivain
parent a962be2eea
commit 0867818a73
2 changed files with 3 additions and 3 deletions

View File

@@ -1,5 +1,5 @@
# From https://github.com/containers/bubblewrap/releases/download/v0.12.0/bubblewrap-0.12.0.tar.xz.sha256sum
sha256 9760d007363e3abba7c747489910f9f82d9fca53ba3bd3282e396fa3c97a3314 bubblewrap-0.12.0.tar.xz
# From https://github.com/containers/bubblewrap/releases/tag/v0.13.0
sha256 4734237473c0e5d695e4e9034a34e43b2dbf5164655bd13fa59ae376b2b7a765 bubblewrap-0.13.0.tar.xz
# Hash for license files:
sha256 dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551 COPYING

View File

@@ -4,7 +4,7 @@
#
################################################################################
BUBBLEWRAP_VERSION = 0.12.0
BUBBLEWRAP_VERSION = 0.13.0
BUBBLEWRAP_SITE = https://github.com/containers/bubblewrap/releases/download/v$(BUBBLEWRAP_VERSION)
BUBBLEWRAP_SOURCE = bubblewrap-$(BUBBLEWRAP_VERSION).tar.xz
BUBBLEWRAP_DEPENDENCIES = host-pkgconf libcap