From 52c50abcd00c452c65d4e93bd7097371d8f1abc9 Mon Sep 17 00:00:00 2001 From: Adrian Perez de Castro Date: Thu, 24 Sep 2026 23:41:47 +0200 Subject: [PATCH] package/bubblewrap: security bump to version 0.13.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit While there are no CVEs for this Bubblewrap release, it includes a fix to ensure that arguments that receive a path are not empty (which before treated those as the root directory: a bit of a footgun!), and that is a follow-up to the security fixes included in 0.12.0. Additionally, it patches a number of build failures, which fixes e.g.: https://autobuild.buildroot.org/results/2eb2d222daaadc2eb16b42fa2ec102ab0689f038 https://autobuild.buildroot.org/results/674413f089ce9b80a59058674b3ef6879e1d389c Release notes: https://github.com/containers/bubblewrap/releases/tag/v0.13.0 Signed-off-by: Adrian Perez de Castro Signed-off-by: Julien Olivain (cherry picked from commit 0867818a73dd5884898be9bb226062ffe7c45dfe) Signed-off-by: Raphaël Mélotte --- package/bubblewrap/bubblewrap.hash | 4 ++-- package/bubblewrap/bubblewrap.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/bubblewrap/bubblewrap.hash b/package/bubblewrap/bubblewrap.hash index e150e1495d..43b22dcb5e 100644 --- a/package/bubblewrap/bubblewrap.hash +++ b/package/bubblewrap/bubblewrap.hash @@ -1,5 +1,5 @@ -# From https://github.com/containers/bubblewrap/releases/download/v0.12.0/bubblewrap-0.12.0.tar.xz.sha256sum -sha256 9760d007363e3abba7c747489910f9f82d9fca53ba3bd3282e396fa3c97a3314 bubblewrap-0.12.0.tar.xz +# From https://github.com/containers/bubblewrap/releases/tag/v0.13.0 +sha256 4734237473c0e5d695e4e9034a34e43b2dbf5164655bd13fa59ae376b2b7a765 bubblewrap-0.13.0.tar.xz # Hash for license files: sha256 dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551 COPYING diff --git a/package/bubblewrap/bubblewrap.mk b/package/bubblewrap/bubblewrap.mk index cb31406c8f..dcc3c23d7c 100644 --- a/package/bubblewrap/bubblewrap.mk +++ b/package/bubblewrap/bubblewrap.mk @@ -4,7 +4,7 @@ # ################################################################################ -BUBBLEWRAP_VERSION = 0.12.0 +BUBBLEWRAP_VERSION = 0.13.0 BUBBLEWRAP_SITE = https://github.com/containers/bubblewrap/releases/download/v$(BUBBLEWRAP_VERSION) BUBBLEWRAP_SOURCE = bubblewrap-$(BUBBLEWRAP_VERSION).tar.xz BUBBLEWRAP_DEPENDENCIES = host-pkgconf libcap