From 6b93d9e119fea5a9ee81a63ea77e5cd0a25604c8 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Tue, 19 Mar 2024 15:16:54 +0530 Subject: [PATCH 1/3] Update RELEASE_NOTES.md with CVE-2024-1753 Signed-off-by: Lokesh Mandvekar --- RELEASE_NOTES.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md index b30c4ade8d..ee9e1e0ed9 100644 --- a/RELEASE_NOTES.md +++ b/RELEASE_NOTES.md @@ -1,6 +1,9 @@ # Release Notes ## 5.0.0 +### Security +- Fixed [CVE-2024-1753](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1753) in Buildah and `podman build` which allowed a user to write files to the `/` directory of the host machine if selinux was not enabled. + ### Features - VMs created by `podman machine` can now use the native Apple hypervisor (`applehv`) when run on MacOS. - A new command has been added, `podman machine reset`, which will remove all existing `podman machine` VMs and relevant configurations. From e71ec6f1d94d2d97fb3afe08aae0d8adaf8bddf0 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Tue, 19 Mar 2024 15:17:46 +0530 Subject: [PATCH 2/3] New release: v5.0.0 Signed-off-by: Lokesh Mandvekar --- version/rawversion/version.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/version/rawversion/version.go b/version/rawversion/version.go index 493b993356..db7d474644 100644 --- a/version/rawversion/version.go +++ b/version/rawversion/version.go @@ -7,4 +7,4 @@ package rawversion // // NOTE: remember to bump the version at the top of the top-level README.md // file when this is bumped. -const RawVersion = "5.0.0-dev" +const RawVersion = "5.0.0" From f32338dfce2b0a2d48724ce96602331d21ab3aa2 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Tue, 19 Mar 2024 15:18:13 +0530 Subject: [PATCH 3/3] bump version to v5.0.1-dev Signed-off-by: Lokesh Mandvekar --- version/rawversion/version.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/version/rawversion/version.go b/version/rawversion/version.go index db7d474644..1e09485bd3 100644 --- a/version/rawversion/version.go +++ b/version/rawversion/version.go @@ -7,4 +7,4 @@ package rawversion // // NOTE: remember to bump the version at the top of the top-level README.md // file when this is bumped. -const RawVersion = "5.0.0" +const RawVersion = "5.0.1-dev"