Bump to v1.21.3

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>

CHANGELOG.md

@@ -1,6 +1,10 @@
 ![buildah logo](https://cdn.rawgit.com/containers/buildah/master/logos/buildah-logo_large.png)
 
 # Changelog
+## v1.21.3 (2021-07-01)
+    chroot: fix environment value leakage to intermediate processes
+    (CVE-2021-3602).
+
 ## v1.21.2 (2021-06-28)
   * vendor common@v0.38.12 and storage@v1.31.3
 

changelog.txt

@@ -1,3 +1,7 @@
+- Changelog for v1.21.3 (2021-07-01)
+  * chroot: fix environment value leakage to intermediate processes
+  (CVE-2021-3602).
+
 - Changelog for v1.21.2 (2021-06-28)
   * vendor common@v0.38.12 and storage@v1.31.3
 

contrib/rpm/buildah.spec

@@ -26,7 +26,7 @@
 
 Name:           buildah
 # Bump version in define/types.go too
-Version:        1.21.2
+Version:        1.21.3
 Release:        1.git%{shortcommit}%{?dist}
 Summary:        A command line tool used to creating OCI Images
 License:        ASL 2.0
@@ -100,8 +100,12 @@ make DESTDIR=%{buildroot} PREFIX=%{_prefix} install install.completions
 %{_datadir}/bash-completion/completions/*
 
 %changelog
+* Thu Jul 1 2021 Nalin Dahyabhai <nalin@redhat.com> 1.21.3-1
+- chroot: fix environment value leakage to intermediate processes
+  (CVE-2021-3602)
+
 * Mon Jun 28, 2021 Tom Sweeney <tsweeney@redhat.com> 1.21.2-1
-  * vendor common@v0.38.12 and storage@v1.31.3
+- vendor common@v0.38.12 and storage@v1.31.3
 
 * Thu Jun 3, 2021 Daniel J Walsh <dwalsh@redhat.com> 1.21.1-1
 - Fix handling of auth.json file while in a user namespace

define/types.go

@@ -28,7 +28,7 @@ const (
 	Package = "buildah"
 	// Version for the Package.  Bump version in contrib/rpm/buildah.spec
 	// too.
-	Version = "1.21.2"
+	Version = "1.21.3"
 
 	// DefaultRuntime if containers.conf fails.
 	DefaultRuntime = "runc"