Address CVE-2024-3727

[TomSweeneyRedHat]

This addrress the CVE-2024-3727 by pulling in the top of main for

c/image, c/common, and c/buildah, all of which have the fix.

Addresses: CVE-2024-3727
No associated Jira cards at the moment.

Does this PR introduce a user-facing change?

None

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: TomSweeneyRedHat

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [TomSweeneyRedHat]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[packit-as-a-service]

Ephemeral COPR build failed. @containers/packit-build please check.

[mheon]

Bloat check failed. I'll add the label.

[mheon]

I think there's an actual bug in a test that's failing.
<+015ms> # $ podman run --rm --mount source=/tmp/podman_bats.HT8hWQ/v2*,destination=/tmp/foobar, ro=false quay.io/libpod/testimage:20240123 touch /tmp/podman_bats.HT8hWQ/v2_EPFu0yWqTV

Note the space between /tmp/foobar, and ro=false

Not sure how this is passing on main right now?

[openshift-merge-robot]

PR needs rebase.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[Luap99]

I think there's an actual bug in a test that's failing. <+015ms> # $ podman run --rm --mount source=/tmp/podman_bats.HT8hWQ/v2*,destination=/tmp/foobar, ro=false quay.io/libpod/testimage:20240123 touch /tmp/podman_bats.HT8hWQ/v2_EPFu0yWqTV

Note the space between /tmp/foobar, and ro=false

Not sure how this is passing on main right now?

This fails because c/common returns a new error message, but the whole tests was broken and is fixed in #22638 so you just have to rebase.

Also in general before opening new vendor PR's it would be always good to first merge the existing ones.

[TomSweeneyRedHat]

Something is totally scrozzled in my sandbox. I'm killing this and restarting.