[v4.4.1-crio] CVE-2024-11218 Fix

[TomSweeneyRedHat]

This addresses the Buildah CVE-2024-11218 issue in the v4.4.1-crio branch.

Fixes: https://issues.redhat.com/browse/OCPBUGS-44536

[NO NEW TESTS NEEDED]

Does this PR introduce a user-facing change?

None

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: TomSweeneyRedHat

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [TomSweeneyRedHat]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[nalind]

/lgtm

[nalind]

/hold

[nalind]

/override "Windows Cross"
/label bloat_approved

[openshift-ci]

@nalind: The label(s) /label bloat_approved cannot be applied. These labels are supported: acknowledge-critical-fixes-only, platform/aws, platform/azure, platform/baremetal, platform/google, platform/libvirt, platform/openstack, ga, tide/merge-method-merge, tide/merge-method-rebase, tide/merge-method-squash, px-approved, docs-approved, qe-approved, no-qe, downstream-change-needed, rebase/manual, cluster-config-api-changed, approved, backport-risk-assessed, bugzilla/valid-bug, cherry-pick-approved, jira/valid-bug, staff-eng-approved. Is this label configured under labels -> additional_labels or labels -> restricted_labels in plugin.yaml?

In response to this:

/override "Windows Cross"
/label bloat_approved

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

@nalind: Overrode contexts on behalf of nalind: Windows Cross

In response to this:

/override "Windows Cross"
/label bloat_approved

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[mheon]

Windows cross job can be removed, but I'm OK to merge without it passing.

[Luap99]

/override "Windows Cross"

You cannot overwrite any job result, that is not compatible with cirrus and github merge protection will still block it if you try to do it on "Total Success" AFAIK.

[Luap99]

Manually merged, not CI should be turned of like done in 4.4.1-rhel, if this branch is still needed we should pick the same cirrus fix in this crio branch.