[rpms/lorax] f43: - creator: Use safe_joinpaths in mount_boot_part_over_root (bcl@redhat.com)

[rpms/lorax] f43: - creator: Use safe_joinpaths in mount_boot_part_over_root (bcl@redhat.com)

[Brian C. Lane]

            A new commit has been pushed.

            Repo   : rpms/lorax
            Branch : f43
            Commit : da6837848e89aadecdb749b8afcd28491837082d
            Author : Brian C. Lane <bcl@redhat.com>
            Date   : 2026-08-12T12:03:05-07:00
            Stats  : +17/-44 in 4 file(s)
            URL    : https://src.fedoraproject.org/rpms/lorax/c/da6837848e89aadecdb749b8afcd28491837082d?branch=f43

            Log:
            - creator: Use safe_joinpaths in mount_boot_part_over_root (bcl@redhat.com)
- creator: Use safe_joinpaths in make_livecd (bcl@redhat.com)
- creator: Use safe_joinpaths in make_live_images (bcl@redhat.com)
- ltmpl: Check for paths inside outroot on hardlink, symlink, copy, move (bcl@redhat.com)
- sysutils: Add safe_joinpaths function (bcl@redhat.com)
- ltmpl: Add tests for access outside outroot (bcl@redhat.com)
- treebuilder: Check for symlink when writing module-info (bcl@redhat.com)
- findkernels: Exclude kernel symlinks pointing outside root (bcl@redhat.com)
- novirt_install: Use remove on /tmp paths and /mnt/sysimage (bcl@redhat.com)
- sysutils: Add a test for remove and symlinked directories (bcl@redhat.com)
- runtime-install: drop tigervnc (awilliam@redhat.com)

---
diff --git a/.gitignore b/.gitignore
index 9fa627f..7b56a29 100644
--- a/.gitignore
+++ b/.gitignore
@@ -264,3 +264,4 @@
 /lorax-43.9.tar.gz
 /lorax-43.10.tar.gz
 /lorax-43.11.tar.gz
+/lorax-43.12.tar.gz

diff --git a/0001-runtime-install-drop-tigervnc.patch b/0001-runtime-install-drop-tigervnc.patch
deleted file mode 100644
index 76424cd..0000000
--- a/0001-runtime-install-drop-tigervnc.patch
+++ /dev/null
@@ -1,31 +0,0 @@
-From 2892e1edcea0d92ce09a573822b4d42799eedd8f Mon Sep 17 00:00:00 2001
-From: Adam Williamson <awilliam@redhat.com>
-Date: Thu, 2 Oct 2025 12:07:50 -0700
-Subject: [PATCH] runtime-install: drop tigervnc
-
-anaconda dropped VNC support in
-https://github.com/rhinstaller/anaconda/pull/5829 . There is no
-point to having these any more, and they pull Xorg and its deps
-into the image unnecessarily.
-
-Signed-off-by: Adam Williamson <awilliam@redhat.com>
----
- share/templates.d/99-generic/runtime-install.tmpl | 2 --
- 1 file changed, 2 deletions(-)
-
-diff --git a/share/templates.d/99-generic/runtime-install.tmpl b/share/templates.d/99-generic/runtime-install.tmpl
-index 6ed14fdc..49545065 100644
---- a/share/templates.d/99-generic/runtime-install.tmpl
-+++ b/share/templates.d/99-generic/runtime-install.tmpl
-@@ -122,8 +122,6 @@ installpkg selinux-policy-targeted audit
- 
- ## network tools/servers
- installpkg ethtool openssh-server nfs-utils openssh-clients
--installpkg tigervnc-server-minimal
--installpkg tigervnc-server-module
- installpkg net-tools
- installpkg bridge-utils
- installpkg nmap-ncat
--- 
-2.51.0
-

diff --git a/lorax.spec b/lorax.spec
index 5213595..06c4104 100644
--- a/lorax.spec
+++ b/lorax.spec
@@ -4,8 +4,8 @@
 %global forgeurl https://github.com/weldr/lorax
 
 Name:           lorax
-Version:        43.11
-Release:        3%{?dist}
+Version:        43.12
+Release:        1%{?dist}
 Summary:        Tool for creating the anaconda install images
 License:        GPL-2.0-or-later
 
@@ -14,10 +14,6 @@ License:        GPL-2.0-or-later
 Url:            %{forgeurl}
 Source0:        %{forgesource}
 
-# https://github.com/weldr/lorax/pull/1495
-# drop tigervnc to save space, anaconda now uses RDP
-Patch:          0001-runtime-install-drop-tigervnc.patch
-
 BuildRequires:  python3-devel
 BuildRequires:  python3-pip
 BuildRequires:  python3-setuptools
@@ -144,7 +140,7 @@ Lorax templates for creating the boot.iso and live isos are placed in
 /usr/share/lorax/templates.d/99-generic
 
 %prep
-%forgeautosetup -p1
+%forgeautosetup
 
 %build
 
@@ -188,11 +184,18 @@ make DESTDIR=$RPM_BUILD_ROOT mandir=%{_mandir} install
 %{_datadir}/lorax/templates.d/*
 
 %changelog
-* Fri Oct 03 2025 Adam Williamson <awilliam@redhat.com> - 43.11-3
-- Backport PR #1495 to drop tigervnc from installer images
-
-* Thu Sep 25 2025 Brian C. Lane <bcl@redhat.com> - 43.11-2
-- Pass 43 to CI testing so it uses the correct repository
+* Wed Aug 12 2026 Brian C. Lane <bcl@redhat.com> 43.12-1
+- creator: Use safe_joinpaths in mount_boot_part_over_root (bcl@redhat.com)
+- creator: Use safe_joinpaths in make_livecd (bcl@redhat.com)
+- creator: Use safe_joinpaths in make_live_images (bcl@redhat.com)
+- ltmpl: Check for paths inside outroot on hardlink, symlink, copy, move (bcl@redhat.com)
+- sysutils: Add safe_joinpaths function (bcl@redhat.com)
+- ltmpl: Add tests for access outside outroot (bcl@redhat.com)
+- treebuilder: Check for symlink when writing module-info (bcl@redhat.com)
+- findkernels: Exclude kernel symlinks pointing outside root (bcl@redhat.com)
+- novirt_install: Use remove on /tmp paths and /mnt/sysimage (bcl@redhat.com)
+- sysutils: Add a test for remove and symlinked directories (bcl@redhat.com)
+- runtime-install: drop tigervnc (awilliam@redhat.com)
 
 * Wed Sep 24 2025 Brian C. Lane <bcl@redhat.com> 43.11-1
 - runtime-install: skip qcom-accel-firmware (awilliam@redhat.com)

diff --git a/sources b/sources
index b5c6429..34228e4 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (lorax-43.11.tar.gz) = dfc9f77da7f756360afcdf9832fb13fef2f975a0aa45c91d3824529044892f0bcceb0359de9664800ee7c9826c61a9ee89ad8603cf15cc9e2d85eb903eadd577
+SHA512 (lorax-43.12.tar.gz) = 8c7906affd44f131d0d1df318f04370af7df5d7bb335093400bca1b62f013e29edf9144644788c4ceececb446ad4f0e27d717d1d8e2aebd3bc4f83b356d946ad