38 Pull requests merged by 14 people

• Revert "[High] Patch python3 for CVE-2025-4138, CVE-2025-4330, CVE-2025-4517, CVE-2025-4516, CVE-2024-12718, CVE-2025-4435, CVE-2023-5752, and CVE-2023-45803"

  #14054 merged Jun 19, 2025

• Patch glibc for CVE-2025-4802 & CVE-2025-0395 [High]

  #13934 merged Jun 19, 2025

• [3.0] Fixing influxdb default config, upgrading entry point script to use new command for server configuration

  #13915 merged Jun 19, 2025

• Revert "Patch glibc for CVE-2023-4527, CVE-2023-4806, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2025-0395, CVE-2025-4802 [High]"

  #14037 merged Jun 18, 2025

• Port fasttrack PR check to PRs that target dev branches

  #10850 merged Jun 18, 2025

• [AUTO-CHERRYPICK] [High] Patch libsoup for CVE-2025-32907 - branch main

  #14026 merged Jun 18, 2025

• [AUTO-CHERRYPICK] Patch glibc for CVE-2023-4527, CVE-2023-4806, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2025-0395, CVE-2025-4802 [High] - branch 3.0-dev

  #14025 merged Jun 18, 2025

• [AUTO-CHERRYPICK] [HIGH] Patch coredns for CVE-2025-47950 - branch main

  #14024 merged Jun 18, 2025

• [AUTO-CHERRYPICK] [High] Patch libsoup for CVE-2025-4476, CVE-2025-32907 - branch 3.0-dev

  #14012 merged Jun 18, 2025

• [MEDIUM] patch cmake for CVE-2025-4947

  #13959 merged Jun 18, 2025

• Remove Unused rubygem Packages from Core [Bug 57244258]

  #13925 merged Jun 18, 2025

• [High] Patch python3 for CVE-2025-4138, CVE-2025-4330, CVE-2025-4517, CVE-2025-4516, CVE-2024-12718, CVE-2025-4435, CVE-2023-5752, and CVE-2023-45803

  #13994 merged Jun 17, 2025

• [High] Patch libsoup for CVE-2025-32907

  #14000 merged Jun 17, 2025

• Patch glibc for CVE-2023-4527, CVE-2023-4806, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2025-0395, CVE-2025-4802 [High]

  #13864 merged Jun 17, 2025

• [HIGH] Patch coredns for CVE-2025-47950

  #14021 merged Jun 17, 2025

• Upgrade wireshark to 4.4.7 and fix build issues

  #14008 merged Jun 17, 2025

• [Medium] Upgrade ruby to 3.1.7 to fix CVE-2024-39908

  #13764 merged Jun 17, 2025

• [High] Patch libsoup for CVE-2025-4476, CVE-2025-32907

  #13853 merged Jun 16, 2025

• [AUTOPATCHER-kernel] Kernel upgrade to version 5.15.184.1 - branch main

  #13927 merged Jun 16, 2025

• [AUTOPATCHER-CORE] Upgrade postgresql to 16.9 for CVE-2025-4207

  #13825 merged Jun 16, 2025

• Added cassandra-driver package to SPECS-EXTENDED

  #13937 merged Jun 16, 2025

• [Medium] Patch rubygem-rexml for CVE-2024-43398 & Upgrade rubygem-rexml to 3.2.9

  #13841 merged Jun 16, 2025

• [Medium] Patch systemd & systemd-bootstrap for CVE-2023-7008

  #13866 merged Jun 16, 2025

• Prevent stripping of BTF data from kernel modules

  #13813 merged Jun 13, 2025

• [AUTO-CHERRYPICK] Patch frr for CVE-2024-55553 [High] - branch main

  #14006 merged Jun 13, 2025

• [AUTO-CHERRYPICK] [High] Patch python3 for CVE-2025-4516, CVE-2025-4517, CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435 - branch 3.0-dev

  #14005 merged Jun 13, 2025

• [AUTO-CHERRYPICK] [High] patch grub2 for CVE-2025-0624 - branch 3.0-dev

  #14004 merged Jun 13, 2025

• [AUTO-CHERRYPICK] [High] Patch opa for CVE-2025-46569 - branch 3.0-dev

  #14003 merged Jun 13, 2025

• [AUTO-CHERRYPICK] Upgrade mysql to 8.0.42 for fixing 25 CVEs - branch main

  #14002 merged Jun 13, 2025

• [AUTO-CHERRYPICK] [High] patch grub2 for CVE-2025-0624 - branch main

  #13990 merged Jun 13, 2025

• [AUTO-CHERRYPICK] [High] patch reaper for CVE-2025-48387 & CVE-2024-6484 - branch main

  #13989 merged Jun 13, 2025

• [AUTO-CHERRYPICK] Upgrade bind to 9.20.9 for CVE-2025-40775 - branch 3.0-dev

  #13988 merged Jun 13, 2025

• [AUTO-CHERRYPICK] Upgrade mysql to 8.0.42 for fixing 25 CVEs - branch 3.0-dev

  #13987 merged Jun 13, 2025

• [AUTO-CHERRYPICK] Patch javapackages-bootstrap for CVE-2024-25710 [HIGH] - branch 3.0-dev

  #13986 merged Jun 13, 2025

• [AUTO-CHERRYPICK] Updated clang, compiler-rt, libcxx, lld, lldb, and llvm to version 18.1.8. - branch 3.0-dev

  #13958 merged Jun 13, 2025

• [High] patch grub2 for CVE-2025-0624

  #13939 merged Jun 13, 2025

• Patch frr for CVE-2024-55553 [High]

  #13999 merged Jun 13, 2025

• [Low] Patch valkey for CVE-2025-49112

  #13996 merged Jun 13, 2025

40 Pull requests opened by 17 people

• [Medium] Patch systemd for CVE-2025-4598

  #13997 opened Jun 13, 2025

• Add minimal-os image config for arm64

  #14001 opened Jun 13, 2025

• [Medium] patch qt5-qtbase for CVE-2025-30348

  #14007 opened Jun 15, 2025

• [Medium] Patch systemd for CVE-2025-4598

  #14009 opened Jun 16, 2025

• Upgrade: python-pyperclip version to 1.8.2

  #14010 opened Jun 16, 2025

• [Low] Patch apparmor for CVE-2023-53154

  #14011 opened Jun 16, 2025

• Update Precacher to No Longer Fatally Error by Default

  #14013 opened Jun 16, 2025

• Update Precacher to No Longer Fatally Error by Default [2.0]

  #14014 opened Jun 16, 2025

• [Medium] Patch gh for CVE-2025-48938

  #14015 opened Jun 17, 2025

• Addressed multiple grub2 CVEs

  #14017 opened Jun 17, 2025

• Addressed multiple grub2 CVEs

  #14018 opened Jun 17, 2025

• [Medium] patch python-requests for CVE-2024-47081

  #14019 opened Jun 17, 2025

• [MEDIUM] Patch libtpms for CVE-2025-49133

  #14020 opened Jun 17, 2025

• [Medium] patch python-requests for CVE-2024-47081

  #14022 opened Jun 17, 2025

• [HIGH] Patch coredns for CVE-2025-47950

  #14023 opened Jun 17, 2025

• [AUTO-CHERRYPICK] [High] Patch python3 for CVE-2025-4138, CVE-2025-4330, CVE-2025-4517, CVE-2025-4516, CVE-2024-12718, CVE-2025-4435, CVE-2023-5752, and CVE-2023-45803 - branch main

  #14027 opened Jun 17, 2025

• [2.0] Update toolkit go version to 1.23, update dependency install scripts, add install-prereqs-and-configure target

  #14028 opened Jun 17, 2025

• Cherry-pick of golang version bumps

  #14029 opened Jun 18, 2025

• [Medium] Patch valkey for CVE-2025-27151

  #14030 opened Jun 18, 2025

• Create SPECS-EXTENDED-SIGNED

  #14031 opened Jun 18, 2025

• [Medium] Patch nbdkit for CVE-2025-47711 & CVE-2025-47712

  #14032 opened Jun 18, 2025

• Add PR package update check to main

  #14034 opened Jun 18, 2025

• Add PR package update check to fasttrack/2.0

  #14035 opened Jun 18, 2025

• [Low] Patch telegraf for CVE-2025-29923

  #14036 opened Jun 18, 2025

• [AUTO-CHERRYPICK] Revert "Patch `glibc` for CVE-2023-4527, CVE-2023-4806, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2025-0395, CVE-2025-4802 [High]" - branch 3.0-dev

  #14038 opened Jun 18, 2025

• Cassandra: adding support for aarch64

  #14039 opened Jun 19, 2025

• cim-schema: deleting source tarballs from local directories

  #14040 opened Jun 19, 2025

• Patch `frr` for CVE-2024-55553 [High]

  #14041 opened Jun 19, 2025

• [High] Patch protobuf for CVE-2025-4565

  #14042 opened Jun 19, 2025

• [Medium] Patch nbdkit for CVE-2025-47711 & CVE-2025-47712

  #14043 opened Jun 19, 2025

• [High] Patch protobuf for CVE-2025-4565

  #14044 opened Jun 19, 2025

• [MEDIUM] Patch for iputils CVE-2025-47268

  #14045 opened Jun 19, 2025

• [AUTOPATCHER-kernel] Kernel upgrade to version 5.15.185.1 - branch main

  #14046 opened Jun 19, 2025

• [AUTOPATCHER-kernel] Kernel upgrade to version 6.6.93.1 - branch 3.0-dev

  #14047 opened Jun 19, 2025

• [AUTO-CHERRYPICK] Patch `glibc` for CVE-2025-4802 & CVE-2025-0395 [High] - branch main

  #14048 opened Jun 19, 2025

• [MEDIUM] Patch for iputils CVE-2025-47268

  #14049 opened Jun 19, 2025

• update network timeout to 20min by default to allow for larger filesi…

  #14051 opened Jun 19, 2025

• [Low] Patch cmake for CVE-2025-5916 & CVE-2025-5917 & CVE-2025-5918

  #14052 opened Jun 19, 2025

• [Medium] Patch erlang for CVE-2025-4748

  #14053 opened Jun 19, 2025

• [AUTO-CHERRYPICK] Revert "[High] Patch python3 for CVE-2025-4138, CVE-2025-4330, CVE-2025-4517, CVE-2025-4516, CVE-2024-12718, CVE-2025-4435, CVE-2023-5752, and CVE-2023-45803" - branch main

  #14055 opened Jun 19, 2025

1 Issue closed by 1 person

• git shouldn't depend (transitively) on openssh-server

  #9568 closed Jun 18, 2025

1 Issue opened by 1 person

• [NodeJS][CBL-Mariner]: Support NodeJS 20, 22 and 24

  #14016 opened Jun 17, 2025

33 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• containerd2: add updated multi-snapshotters support patch

  #13881 commented on Jun 19, 2025 • 6 new comments

• containerd2: add updated tardev-snapshotter support patch

  #13899 commented on Jun 20, 2025 • 2 new comments

• [Medium] Upgrade binutils to fix CVE-2025-1179

  #13943 commented on Jun 19, 2025 • 2 new comments

• [Medium] Patch edk2 for CVE-2024-38796 and CVE-2023-45231

  #13659 commented on Jun 16, 2025 • 1 new comment

• [Low] patch elfutils for CVE-2025-1352

  #13905 commented on Jun 19, 2025 • 0 new comments

• Added cqlsh package to SPECS-EXTENDED

  #13936 commented on Jun 18, 2025 • 0 new comments

• [Medium] Patch shim-unsigned-x64 for CVE-2024-9143

  #13946 commented on Jun 13, 2025 • 0 new comments

• [MEDIUM] Patch perl for CVE-2025-40909

  #13957 commented on Jun 13, 2025 • 0 new comments

• Add new unversioned symlink for python3 package

  #13960 commented on Jun 19, 2025 • 0 new comments

• PR CHECK TESTS, TEST PR, DO NOT MERGE

  #13961 commented on Jun 19, 2025 • 0 new comments

• [Medium] Patch shim-unsigned-x64 for CVE-2024-13176

  #13962 commented on Jun 16, 2025 • 0 new comments

• [MEDIUM] Patch for perl CVE-2025-40909

  #13964 commented on Jun 18, 2025 • 0 new comments

• [MEDIUM] Patch glib for CVE-2025-4373

  #13974 commented on Jun 19, 2025 • 0 new comments

• Add vsock loopback module

  #13975 commented on Jun 19, 2025 • 0 new comments

• [AUTOPATCHER-CORE] Upgrade opensc to 0.26.1 for fixing multiple CVEs

  #13981 commented on Jun 16, 2025 • 0 new comments

• Patch rust for CVE-2025-4574 [Medium]

  #13985 commented on Jun 19, 2025 • 0 new comments

• Update toolkit go version to 1.23, update dependency install scripts, add install-prereqs-and-configure target

  #13991 commented on Jun 18, 2025 • 0 new comments

• Add Package mongosh to EXTENDED

  #13995 commented on Jun 17, 2025 • 0 new comments

• Fix failures in running firewalld service

  #13903 commented on Jun 16, 2025 • 0 new comments

• [Medium] Patch systemd-bootstrap for CVE-2023-7008

  #13883 commented on Jun 19, 2025 • 0 new comments

• [Medium] Patch cloud-hypervisor for CVE-2024-43806

  #13878 commented on Jun 13, 2025 • 0 new comments

• [Medium] Patch kata-containers for CVE-2025-4574

  #13844 commented on Jun 17, 2025 • 0 new comments

• [MEDIUM] Patch gdb for CVE-2021-32256 & CVE-2025-5244

  #13814 commented on Jun 17, 2025 • 0 new comments

• [MEDIUM] Patch CVE-2023-2976 & Upgrade commons-io to fix CVE-2024-47554 in javapackages-bootstrap

  #13807 commented on Jun 17, 2025 • 0 new comments

• Add libxcrypt-devel to build-essential

  #13757 commented on Jun 19, 2025 • 0 new comments

• Patch kata-containers-cc for CVE-2024-43806 [Medium]

  #13672 commented on Jun 17, 2025 • 0 new comments

• [MEDIUM] Patch gcc for CVE-2021-32256

  #13503 commented on Jun 18, 2025 • 0 new comments

• [Low] Patch kubernetes for CVE-2024-45310

  #13469 commented on Jun 18, 2025 • 0 new comments

• Add Image Customizer configuration for linuxguard, baremetal, hyperv-guest, qemu-guest, marketplace-gen1, and marketplace-gen2 images

  #13251 commented on Jun 18, 2025 • 0 new comments

• Add configuration for new seed image

  #13145 commented on Jun 14, 2025 • 0 new comments

• Set unique names for subpackages in kernel-rt spec

  #13084 commented on Jun 17, 2025 • 0 new comments

• Upgrade: ibus to version 1.5.31

  #12978 commented on Jun 16, 2025 • 0 new comments

• Upgrade: tbb version to 2021.13.0

  #12568 commented on Jun 16, 2025 • 0 new comments