Skip to content

Resync fasttrack/2.0#16677

Open
jslobodzian wants to merge 51 commits intofasttrack/2.0from
jon/merge-from-2.0
Open

Resync fasttrack/2.0#16677
jslobodzian wants to merge 51 commits intofasttrack/2.0from
jon/merge-from-2.0

Conversation

@jslobodzian
Copy link
Copy Markdown
Collaborator

Merge Checklist

All boxes should be checked before merging the PR (just tick any boxes which don't apply to this PR)

  • The toolchain has been rebuilt successfully (or no changes were made to it)
  • The toolchain/worker package manifests are up-to-date
  • Any updated packages successfully build (or no packages were changed)
  • Packages depending on static components modified in this PR (Golang, *-static subpackages, etc.) have had their Release tag incremented.
  • Package tests (%check section) have been verified with RUN_CHECK=y for existing SPEC files, or added to new SPEC files
  • All package sources are available
  • cgmanifest files are up-to-date and sorted (./cgmanifest.json, ./toolkit/scripts/toolchain/cgmanifest.json, .github/workflows/cgmanifest.json)
  • LICENSE-MAP files are up-to-date (./LICENSES-AND-NOTICES/SPECS/data/licenses.json, ./LICENSES-AND-NOTICES/SPECS/LICENSES-MAP.md, ./LICENSES-AND-NOTICES/SPECS/LICENSE-EXCEPTIONS.PHOTON)
  • All source files have up-to-date hashes in the *.signatures.json files
  • sudo make go-tidy-all and sudo make go-test-coverage pass
  • Documentation has been updated to match any changes to the build system
  • Ready to merge

Summary

What does the PR accomplish, why was it needed?

Change Log
  • Change
  • Change
  • Change
Does this affect the toolchain?

YES/NO

Associated issues
  • #xxxx
Links to CVEs
Test Methodology
  • Pipeline build id: xxxx

CBL-Mariner-Bot and others added 30 commits March 9, 2026 10:59
…DIUM] (#15557)

Co-authored-by: BinduSri-6522866 <v-badabala@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
Signed-off-by: Kanishk Bansal <kanbansal@microsoft.com>
Co-authored-by: Kanishk Bansal <kanbansal@microsoft.com>
Signed-off-by: Kanishk Bansal <kanbansal@microsoft.com>
Co-authored-by: akhila-guruju <v-guakhila@microsoft.com>
Co-authored-by: Kanishk Bansal <kanbansal@microsoft.com>
…26-28364 [HIGH] - branch main" #16152

Co-authored-by: Azure Linux Security Servicing Account <azurelinux-security@microsoft.com>
Co-authored-by: jykanase <v-jykanase@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
… - branch main" #16153

Signed-off-by: Kanishk Bansal <kanbansal@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
Co-authored-by: Kanishk Bansal <kanbansal@microsoft.com>
Co-authored-by: jslobodzian <joslobo@microsoft.com>
…026-27969, CVE-2026-27965 [CRITICAL] - branch main" #16154

Co-authored-by: Azure Linux Security Servicing Account <azurelinux-security@microsoft.com>
Co-authored-by: akhila-guruju <v-guakhila@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
Co-authored-by: jslobodzian <joslobo@microsoft.com>
…2026-1801, CVE-2026-1761, CVE-2026-1467 [HIGH] - branch main" #16155

Co-authored-by: Azure Linux Security Servicing Account <azurelinux-security@microsoft.com>
Co-authored-by: jykanase <v-jykanase@microsoft.com>
Co-authored-by: Sudipta Pandit <sudpandit@microsoft.com>
Co-authored-by: jslobodzian <joslobo@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
…_ex(): Check oct argument for NULL - branch main" #16156

Co-authored-by: Archana Shettigar <v-shettigara@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
Co-authored-by: jslobodzian <joslobo@microsoft.com>
…rypt_d2i_ex(): Check oct argument for NULL" - branch main" #16163

Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
…_ex(): Check oct argument for NULL - branch main" #16166

Co-authored-by: Archana Shettigar <v-shettigara@microsoft.com>
…nch main" #16175

Signed-off-by: Kanishk Bansal <kanbansal@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
Co-authored-by: Kanishk Bansal <kanbansal@microsoft.com>
…026-23868 [HIGH] - branch main" #16189

Co-authored-by: Azure Linux Security Servicing Account <azurelinux-security@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
…2026-26018, CVE-2026-26017 [HIGH] - branch main" #16190

Co-authored-by: Azure Linux Security Servicing Account <azurelinux-security@microsoft.com>
Co-authored-by: akhila-guruju <v-guakhila@microsoft.com>
Co-authored-by: jslobodzian <joslobo@microsoft.com>
…66471 - branch main" #16196

Co-authored-by: Akhila Guruju <v-guakhila@microsoft.com>
Co-authored-by: jslobodzian <joslobo@microsoft.com>
…VE-2026-4111 [HIGH] - branch main" #16213

Co-authored-by: Azure Linux Security Servicing Account <azurelinux-security@microsoft.com>
…026-23943, CVE-2026-23942, CVE-2026-23941 [HIGH] - branch main" #16215

Co-authored-by: Azure Linux Security Servicing Account <azurelinux-security@microsoft.com>
Co-authored-by: jslobodzian <joslobo@microsoft.com>
…e for CVE-2025-12385 [HIGH] - branch main" #16216

Co-authored-by: Azure Linux Security Servicing Account <azurelinux-security@microsoft.com>
Co-authored-by: BinduSri-6522866 <v-badabala@microsoft.com>
Co-authored-by: jslobodzian <joslobo@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
…26-27135 [HIGH] - branch main" #16265

Co-authored-by: Azure Linux Security Servicing Account <azurelinux-security@microsoft.com>
Co-authored-by: akhila-guruju <v-guakhila@microsoft.com>
…2026-27135 [HIGH] - branch main" #16266

Co-authored-by: Azure Linux Security Servicing Account <azurelinux-security@microsoft.com>
Co-authored-by: akhila-guruju <v-guakhila@microsoft.com>
CBL-Mariner-Bot and others added 21 commits March 24, 2026 12:19
…-2026-27135 [HIGH] - branch main" #16267

Co-authored-by: Azure Linux Security Servicing Account <azurelinux-security@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
Co-authored-by: jykanase <v-jykanase@microsoft.com>
…bs to version 5.9.5.2-1 - branch main" #16292

Signed-off-by: Kanishk Bansal <kanbansal@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
Co-authored-by: Kanishk Bansal <kanbansal@microsoft.com>
…ranch main" #16326

Co-authored-by: Andrew Phelps <anphel31@users.noreply.github.com>
…E-2026-4645 [HIGH] - branch main" #16327

Co-authored-by: Azure Linux Security Servicing Account <azurelinux-security@microsoft.com>
…-2026-4645 [HIGH] - branch main" #16328

Co-authored-by: Azure Linux Security Servicing Account <azurelinux-security@microsoft.com>
…26-32647, CVE-2026-28753, CVE-2026-27784, CVE-2026-27654, CVE-2026-27651, CVE-2026-28755 [HIGH] - branch main" #16331

Co-authored-by: Azure Linux Security Servicing Account <azurelinux-security@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
Co-authored-by: jslobodzian <joslobo@microsoft.com>
… - branch main" #16332

Co-authored-by: Archana Shettigar <v-shettigara@microsoft.com>
…CVE-2026-30922 [HIGH] - branch main" #16333

Co-authored-by: Azure Linux Security Servicing Account <azurelinux-security@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
…M] (#15731)

Co-authored-by: jykanase <v-jykanase@microsoft.com>
…anch main" #16360

Co-authored-by: Rachel Menge <rachelmenge@microsoft.com>
…6.56 for CVE-2026-33636, CVE-2026-33416 [HIGH] - branch main" #16361
 - branch main" #16362

Co-authored-by: jykanase <v-jykanase@microsoft.com>
…main" #16369

Signed-off-by: Kanishk Bansal <kanbansal@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
Co-authored-by: Kanishk Bansal <kanbansal@microsoft.com>
…6-33413 and CVE-2026-33343 - branch main" #16375

Co-authored-by: AkarshHCL <v-akarshc@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
Add patches to fix CVE-2026-29111 - ipc dbus communication issue

Signed-off-by: Kanishk Bansal <kanbansal@microsoft.com>
Co-authored-by: Kanishk Bansal <kanbansal@microsoft.com>
@jslobodzian jslobodzian requested a review from a team as a code owner April 15, 2026 00:16
@microsoft-github-policy-service microsoft-github-policy-service bot added Packaging fasttrack/2.0 PRs Destined for Azure Linux 2.0 labels Apr 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

fasttrack/2.0 PRs Destined for Azure Linux 2.0 Packaging

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants