Skip to content

[AUTO-CHERRYPICK] [Manual Cherry-Pick] Fasttrack golang & frr version up for HIGH CVEs - branch 3.0-dev #17347

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
CBL-Mariner-Bot wants to merge 3 commits into from
Closed

[AUTO-CHERRYPICK] [Manual Cherry-Pick] Fasttrack golang & frr version up for HIGH CVEs - branch 3.0-dev #17347

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
c28a2f6
[Manual Cherry-Pick] Fasttrack `golang` & `frr` version up for HIGH C…
Kanishk-Bansal May 19, 2026
f5e4171
Conflicts resolved by Auto-Cherry Pick for SPECS/azurelinux-image-too…
CBL-Mariner-Bot May 19, 2026
1d72ca9
azurelinux-image-tools: fix SPEC ordering after auto cherry-pick
jslobodzian May 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 5 additions & 4 deletions SPECS/azurelinux-image-tools/azurelinux-image-tools.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
Summary: Azure Linux Image Tools
Name: azurelinux-image-tools
Version: 1.3.0
Release: 2%{?dist}
Release: 3%{?dist}
License: MIT
URL: https://github.com/microsoft/azure-linux-image-tools/
Group: Applications/System
Expand All @@ -15,7 +15,8 @@ Source0: https://github.com/microsoft/azure-linux-image-tools/archive/ref
# Use generate_source_tarball.sh script with the package version to build this tarball.
#
Source1: %{name}-%{version}-vendor.tar.gz
Patch0: CVE-2026-33814.patch
Patch0: CVE-2026-27141.patch
Patch1: CVE-2026-33814.patch
BuildRequires: golang >= 1.25
BuildRequires: systemd-udev
Requires: %{name}-imagecustomizer = %{version}-%{release}
Expand Down Expand Up @@ -113,10 +114,10 @@ go test -C toolkit/tools ./...
%{_bindir}/osmodifier

%changelog
* Wed May 13 2026 Azure Linux Security Servicing Account <azurelinux-security@microsoft.com> - 1.3.0-2
* Wed May 13 2026 Azure Linux Security Servicing Account <azurelinux-security@microsoft.com> - 1.3.0-3
- Patch for CVE-2026-33814

* Tue Apr 28 2026 Aditya Singh <v-aditysing@microsoft.com> - 1.3.0-1
* Tue Apr 28 2026 Aditya Singh <v-aditysing@microsoft.com> - 1.3.0-2
- Upgrade to version 1.3.0 which includes fixes for CVE-2026-27141, CVE-2026-29181 and CVE-2026-39882

* Thu Mar 05 2026 Azure Linux Security Servicing Account <azurelinux-security@microsoft.com> - 1.2.0-2
Expand Down
Loading