Patch glibc for CVE-2023-4527, CVE-2023-4806, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2025-0395, CVE-2025-4802 [High]
#13864
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
microsoft-github-policy-service
bot
added
Packaging
specs-extended
Kanishk-Bansal
force-pushed
the
kanbansal/glibc/CVEs/3.0
branch
from
e7555e4 to
f69f687
Compare
…4-33600, CVE-2024-33601, CVE-2025-0395 [High] Signed-off-by: Kanishk Bansal <kanbansal@microsoft.com>
Kanishk-Bansal
force-pushed
the
kanbansal/glibc/CVEs/3.0
branch
from
f69f687 to
a7deb22
Compare
PawelWMS
reviewed
May 22, 2025
There was a problem hiding this comment.
The patches look good - nice job finding them all and fixing CVE-2023-5156! Leaving a few asks to help with documenting the changes.
|
Failing ptest are known issues - found no regressions. |
PawelWMS
added
the
CVEFixReadyForMaintainerReview
PawelWMS
approved these changes
May 30, 2025
There was a problem hiding this comment.
PR check fails due to a toolkit bug, not changes in this PR. Running a separate PR check with a slightly modified toolkit to work around that bug has finished fine and reported failing ptests only for known failures. Approving.
Kanishk-Bansal
changed the title
glibc for CVE-2023-4527, CVE-2023-4806, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2025-0395 [High]glibc for CVE-2023-4527, CVE-2023-4806, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2025-0395, CVE-2025-4802 [High]
Kanishk-Bansal
removed
the
CVEFixReadyForMaintainerReview
PawelWMS
approved these changes
Jun 2, 2025
PawelWMS
added
the
CVEFixReadyForMaintainerReview
mbykhovtsev-ms
approved these changes
Jun 16, 2025
rlmenge
approved these changes
Jun 16, 2025
jslobodzian
approved these changes
Jun 17, 2025
CBL-Mariner-Bot
pushed a commit
that referenced
this pull request
Jun 17, 2025
…024-33600, CVE-2024-33601, CVE-2025-0395, CVE-2025-4802 [High] (#13864) Signed-off-by: Kanishk Bansal <kanbansal@microsoft.com> Co-authored-by: Kanishk Bansal <kanbansal@microsoft.com> Co-authored-by: Pawel Winogrodzki <pawelwi@microsoft.com> (cherry picked from commit 10c1198)
|
Auto cherry-pick results: Auto cherry-pick pipeline run -> https://dev.azure.com/mariner-org/mariner/_build/results?buildId=839486&view=results |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Merge Checklist
All boxes should be checked before merging the PR (just tick any boxes which don't apply to this PR)
*-staticsubpackages, etc.) have had theirReleasetag incremented../cgmanifest.json,./toolkit/scripts/toolchain/cgmanifest.json,.github/workflows/cgmanifest.json)./LICENSES-AND-NOTICES/SPECS/data/licenses.json,./LICENSES-AND-NOTICES/SPECS/LICENSES-MAP.md,./LICENSES-AND-NOTICES/SPECS/LICENSE-EXCEPTIONS.PHOTON)*.signatures.jsonfilessudo make go-tidy-allandsudo make go-test-coveragepassSummary
What does the PR accomplish, why was it needed?
Change Log
Does this affect the toolchain?
YES
Associated issues
Links to CVEs
Test Methodology
Upstream Patch Reference