[release-1.37] Bump Buildah to v1.37.5 #5789
Conversation
Bump to v1.37.5 to incoroprate the fixes needed for CVE-2024-3675 [NO NEW TESTS NEEDED] Signed-off-by: tomsweeneyredhat <[email protected]>
TomSweeneyRedHat
force-pushed
the
dev/tsweeney/dev/tsweeney/v1.37.5
branch
from
db1fa13 to
5fd40b9
Compare
TomSweeneyRedHat
added
the
No New Tests
There was a problem hiding this comment.
Not worth to repush as CI already passed but I think you should highlight that this fixes CVE-2024-9676 and CVE-2024-9675 in the release text on github then at least
LGTM
There was a problem hiding this comment.
Not worth to repush as CI already passed but I think you should highlight that this fixes CVE-2024-9676 and CVE-2024-9675 in the release text on github then at least
agreed
/lgtm
/hold
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: lsm5, TomSweeneyRedHat The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
/hold cancel |
openshift-merge-bot
bot
merged commit 86250fa
into
containers:release-1.37
Bump to v1.37.5 to incorporate the fixes needed for CVE-2024-9675
What type of PR is this?
What this PR does / why we need it:
How to verify it
Which issue(s) this PR fixes:
Special notes for your reviewer:
Does this PR introduce a user-facing change?