From 0867818a73dd5884898be9bb226062ffe7c45dfe Mon Sep 17 00:00:00 2001 From: Adrian Perez de Castro Date: Thu, 24 Sep 2026 23:41:47 +0200 Subject: [PATCH] package/bubblewrap: security bump to version 0.13.0 While there are no CVEs for this Bubblewrap release, it includes a fix to ensure that arguments that receive a path are not empty (which before treated those as the root directory: a bit of a footgun!), and that is a follow-up to the security fixes included in 0.12.0. Additionally, it patches a number of build failures, which fixes e.g.: https://autobuild.buildroot.org/results/2eb2d222daaadc2eb16b42fa2ec102ab0689f038 https://autobuild.buildroot.org/results/674413f089ce9b80a59058674b3ef6879e1d389c Release notes: https://github.com/containers/bubblewrap/releases/tag/v0.13.0 Signed-off-by: Adrian Perez de Castro Signed-off-by: Julien Olivain --- package/bubblewrap/bubblewrap.hash | 4 ++-- package/bubblewrap/bubblewrap.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/bubblewrap/bubblewrap.hash b/package/bubblewrap/bubblewrap.hash index e150e1495d..43b22dcb5e 100644 --- a/package/bubblewrap/bubblewrap.hash +++ b/package/bubblewrap/bubblewrap.hash @@ -1,5 +1,5 @@ -# From https://github.com/containers/bubblewrap/releases/download/v0.12.0/bubblewrap-0.12.0.tar.xz.sha256sum -sha256 9760d007363e3abba7c747489910f9f82d9fca53ba3bd3282e396fa3c97a3314 bubblewrap-0.12.0.tar.xz +# From https://github.com/containers/bubblewrap/releases/tag/v0.13.0 +sha256 4734237473c0e5d695e4e9034a34e43b2dbf5164655bd13fa59ae376b2b7a765 bubblewrap-0.13.0.tar.xz # Hash for license files: sha256 dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551 COPYING diff --git a/package/bubblewrap/bubblewrap.mk b/package/bubblewrap/bubblewrap.mk index cb31406c8f..dcc3c23d7c 100644 --- a/package/bubblewrap/bubblewrap.mk +++ b/package/bubblewrap/bubblewrap.mk @@ -4,7 +4,7 @@ # ################################################################################ -BUBBLEWRAP_VERSION = 0.12.0 +BUBBLEWRAP_VERSION = 0.13.0 BUBBLEWRAP_SITE = https://github.com/containers/bubblewrap/releases/download/v$(BUBBLEWRAP_VERSION) BUBBLEWRAP_SOURCE = bubblewrap-$(BUBBLEWRAP_VERSION).tar.xz BUBBLEWRAP_DEPENDENCIES = host-pkgconf libcap