v1.26.7

What's Changed

• [release-1.26] CVE-2024-1753, Bump to Buildah v1.26.7 by @TomSweeneyRedHat in #5450
• [release-1.26] Mask /sys/devices/virtual/powercap by default by @openshift-cherrypick-robot in #5133
• [release-1.26] run the cross-compile test on M1 MacOS, not Intel by @openshift-cherrypick-robot in #5131

Full Changelog: v1.35.3...v1.26.7

v1.24.7

What's Changed

• [release-1.24] add: fail on bad HTTP response instead of writing to container for URL sources by @flouthoc in #4288
• [1.24] Define and use a safe, reliable test image by @edsantiago in #4384
• [release-1.24] [CI:BUILD] Cirrus: Migrate OSX task to M1 by @lsm5 in #4500
• [release-1.24] remove registry.centos.org by @edsantiago in #4827
• [release-1.24] Explicitly ref. quay images for CI by @cevich in #4850
• [release-1.24] Mask /sys/devices/virtual/powercap by default by @openshift-cherrypick-robot in #5134
• [release-1.24] conformance test: ignore file type bits when comparing layers by @cevich in #5260
• [release-1.24] bump golang.org/x/crypto to v0.17.0 by @lsm5 in #5245
• [release-1.24] Cirrus: disable cross_build task by @lsm5 in #5353
• [release-1.24] CVE-2024-1753, Bump to Buildah v1.24.7 by @TomSweeneyRedHat in #5451

Full Changelog: v1.35.3...v1.24.7

v1.35.3

What's Changed

• [release-1.35] Bump c/common to v0.58.1, Buildah to v1.35.3 by @TomSweeneyRedHat in #5441

Full Changelog: v1.35.2...v1.35.3

v1.31.5

What's Changed

*[release-1.31] bump to v1.31.5, fix conformance, CVE-2024-1753, CVE-2024-24786 by @TomSweeneyRedHat in #5444

• [release-1.31] Bump golang.org/x/crypto v0.17.0 by @TomSweeneyRedHat in #5337

Full Changelog: v1.35.2...v1.31.5

v1.32.3

What's Changed

• [release-1.32] Adresses CVE-2024-1753 and CVE-2024-24786, bump to V1.32.3 by TomSweeneyRedHat in #5424
• [release-1.32] .cirrus.yml: run tests relative to the release-1.32 branch by @nalind in #5048
• Fix for CVE-2023-39325 by @lsm5 in #5142
• [release-1.32] Recover release-branch CI by @cevich in #5431

Full Changelog: v1.35.2...v1.32.3

v1.29.3

What's Changed

• [release-1.29] bump to v1.29.3, fix conformance, CVE-2024-1753, CVE-2024-24786 by @TomSweeneyRedHat in #5434
• [release-1.29] conformance test: ignore file type bits when comparing layers by @nalind in #5257
• [release-1.29] bump golang.org/x/crypto to v0.17.0 by @lsm5 in #5244

Full Changelog: v1.35.2...v1.29.3

v1.27.4

What's Changed

• [release-1.27] Adresses CVE-2024-1753 and CVE-2024-24786, bump to V1.27.4by @TomSweeneyRedHat in #5435
• [release-1.27] Mask /sys/devices/virtual/powercap by default by @openshift-cherrypick-robot in #5128
• [release-1.27] Disable CI by @cevich in #4851
• [release-1.27] remove registry.centos.org by @edsantiago in #4826
• [release-1.27] Cirrus: Add CI self-destruct condition on EOL date by @cevich in #4770
• [release-1.27] [CI:BUILD] Cirrus: Migrate OSX task to M1 by @openshift-cherrypick-robot in #4504

Full Changelog: v1.35.2...v1.27.4

v1.35.2

What's Changed

• [release-1.35] GHSA-8r3f-844c-mc37 protobuf to 1.33 y @TomSweeneyRedHat in #5428
• [release-1.35] CVE-2024-1753 fix, bump to v1.35.1, then v1.35.2-dev by @TomSweeneyRedHat in #5416

Full Changelog: v1.35.1...v1.35.2

v1.34.3

What's Changed

• [release-1.34] CVE-2024-24786 protobuf to 1.33, Bump to Buildah v1.34.2, Bump to Buildah v1.34.3-dev, conformance tests by @TomSweeneyRedHat in #5423
• [v1.34] tests: skip_if_no_unshare(): check for --setuid by @edsantiago in #5365
• [release-1.34] CVE-2024-1753 fix, bump Buildah to v1.34.2, then to v1.34.3-dev by @TomSweeneyRedHat in #5419

Full Changelog: v1.35.1...v1.34.3

v1.33.7

What's Changed

• [release-1.33] CVE-2024-1753 container escape fix by @TomSweeneyRedHat in #5417
• [v1.33] tests: skip_if_no_unshare(): check for --setuid by @edsantiago in #5364

Full Changelog: v1.35.1...v1.33.7