[rpms/lorax] f44: - creator: Use safe_joinpaths in mount_boot_part_over_root (bcl@redhat.com)

[rpms/lorax] f44: - creator: Use safe_joinpaths in mount_boot_part_over_root (bcl@redhat.com)

[Brian C. Lane]

            A new commit has been pushed.

            Repo   : rpms/lorax
            Branch : f44
            Commit : 764a7f329bef0a9eb694b3b5e6e394294603b0af
            Author : Brian C. Lane <bcl@redhat.com>
            Date   : 2026-08-12T11:52:25-07:00
            Stats  : +15/-2 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/lorax/c/764a7f329bef0a9eb694b3b5e6e394294603b0af?branch=f44

            Log:
            - creator: Use safe_joinpaths in mount_boot_part_over_root (bcl@redhat.com)
- creator: Use safe_joinpaths in make_livecd (bcl@redhat.com)
- creator: Use safe_joinpaths in make_live_images (bcl@redhat.com)
- ltmpl: Check for paths inside outroot on hardlink, symlink, copy, move (bcl@redhat.com)
- sysutils: Add safe_joinpaths function (bcl@redhat.com)
- ltmpl: Add tests for access outside outroot (bcl@redhat.com)
- treebuilder: Check for symlink when writing module-info (bcl@redhat.com)
- findkernels: Exclude kernel symlinks pointing outside root (bcl@redhat.com)
- novirt_install: Use remove on /tmp paths and /mnt/sysimage (bcl@redhat.com)
- sysutils: Add a test for remove and symlinked directories (bcl@redhat.com)

---
diff --git a/.gitignore b/.gitignore
index dccc390..fb1b33f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -270,3 +270,4 @@
 /lorax-44.4.tar.gz
 /lorax-44.5.tar.gz
 /lorax-44.6.tar.gz
+/lorax-44.7.tar.gz

diff --git a/lorax.spec b/lorax.spec
index c579835..20a5ad4 100644
--- a/lorax.spec
+++ b/lorax.spec
@@ -4,7 +4,7 @@
 %global forgeurl https://github.com/weldr/lorax
 
 Name:           lorax
-Version:        44.6
+Version:        44.7
 Release:        1%{?dist}
 Summary:        Tool for creating the anaconda install images
 License:        GPL-2.0-or-later
@@ -187,6 +187,18 @@ make DESTDIR=$RPM_BUILD_ROOT mandir=%{_mandir} install
 %{_datadir}/lorax/templates.d/*
 
 %changelog
+* Wed Aug 12 2026 Brian C. Lane <bcl@redhat.com> 44.7-1
+- creator: Use safe_joinpaths in mount_boot_part_over_root (bcl@redhat.com)
+- creator: Use safe_joinpaths in make_livecd (bcl@redhat.com)
+- creator: Use safe_joinpaths in make_live_images (bcl@redhat.com)
+- ltmpl: Check for paths inside outroot on hardlink, symlink, copy, move (bcl@redhat.com)
+- sysutils: Add safe_joinpaths function (bcl@redhat.com)
+- ltmpl: Add tests for access outside outroot (bcl@redhat.com)
+- treebuilder: Check for symlink when writing module-info (bcl@redhat.com)
+- findkernels: Exclude kernel symlinks pointing outside root (bcl@redhat.com)
+- novirt_install: Use remove on /tmp paths and /mnt/sysimage (bcl@redhat.com)
+- sysutils: Add a test for remove and symlinked directories (bcl@redhat.com)
+
 * Wed Mar 11 2026 Brian C. Lane <bcl@redhat.com> 44.6-1
 - Revert "Drop all installs of shim-ia32 (it no longer exists)" (bcl@redhat.com)
 

diff --git a/sources b/sources
index f4f6990..51bc40a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (lorax-44.6.tar.gz) = b69525d8d99e2e3d51293fee2cb2ec83430779b5b7b7b11666cd4bf2baae583b90ebafd6445546c5e5332c975eb00fff8f73c0b55d2b1afb45ec43cf366df646
+SHA512 (lorax-44.7.tar.gz) = 502ce227ee1eb40ad879d67ea05af8bd714e1a6232f370a583ecfd3b5723c37f80301f82d21f9008ef423001fe57fa117ae937f4269e5a2d0bfde7984f81a661