Skip to content

Commit fe7c1f0

Browse files
CBL-Mariner-BotBinduSri-6522866jslobodzian
authored
Merge PR "[AUTO-CHERRYPICK] [High] Patch rust for CVE-2026-2006, CVE-2026-33056, CVE-2026-33055, CVE-2026-34743 - branch 3.0-dev" #16699
Co-authored-by: BinduSri-6522866 <v-badabala@microsoft.com> Co-authored-by: jslobodzian <joslobo@microsoft.com>
1 parent 458b7f0 commit fe7c1f0

21 files changed

Lines changed: 2321 additions & 14 deletions

SPECS-EXTENDED/rust-cbindgen/rust-cbindgen.spec

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
Summary: Tool for generating C bindings to Rust code
33
Name: rust-cbindgen
44
Version: 0.24.3
5-
Release: 9%{?dist}
5+
Release: 10%{?dist}
66
License: MIT
77
Vendor: Microsoft Corporation
88
Distribution: Azure Linux
@@ -96,6 +96,9 @@ RUSTFLAGS=%{rustflags} cargo test --release
9696
%endif
9797

9898
%changelog
99+
* Tue Apr 07 2026 BinduSri Adabala <v-badabala@microsoft.com> - 0.24.3-10
100+
- Bump release to rebuild with rust
101+
99102
* Wed Feb 11 2026 BinduSri Adabala <v-badabala@microsoft.com> - 0.24.3-9
100103
- Bump release to rebuild with rust
101104

SPECS-EXTENDED/tardev-snapshotter/tardev-snapshotter.spec

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
Summary: Tardev Snapshotter for containerd
44
Name: tardev-snapshotter
55
Version: 3.2.0.tardev1
6-
Release: 7%{?dist}
6+
Release: 8%{?dist}
77
License: ASL 2.0
88
Group: Tools/Container
99
Vendor: Microsoft Corporation
@@ -67,6 +67,9 @@ fi
6767
%config(noreplace) %{_unitdir}/%{name}.service
6868

6969
%changelog
70+
* Tue Apr 07 2026 BinduSri Adabala <v-badabala@microsoft.com> - 3.2.0.tardev1-8
71+
- Bump release to rebuild with rust
72+
7073
* Wed Feb 11 2026 BinduSri Adabala <v-badabala@microsoft.com> - 3.2.0.tardev1-7
7174
- Bump release to rebuild with rust
7275

SPECS/clamav/clamav.spec

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Summary: Open source antivirus engine
22
Name: clamav
33
Version: 1.0.9
4-
Release: 4%{?dist}
4+
Release: 5%{?dist}
55
License: ASL 2.0 AND BSD AND bzip2-1.0.4 AND GPLv2 AND LGPLv2+ AND MIT AND Public Domain AND UnRar
66
Vendor: Microsoft Corporation
77
Distribution: Azure Linux
@@ -136,6 +136,9 @@ fi
136136
%dir %attr(-,clamav,clamav) %{_sharedstatedir}/clamav
137137

138138
%changelog
139+
* Tue Apr 07 2026 BinduSri Adabala <v-badabala@microsoft.com> - 1.0.9-5
140+
- Bump release to rebuild with rust
141+
139142
* Wed Feb 11 2026 BinduSri Adabala <v-badabala@microsoft.com> - 1.0.9-4
140143
- Bump release to rebuild with rust
141144

SPECS/cloud-hypervisor/cloud-hypervisor.spec

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
Name: cloud-hypervisor
66
Summary: Cloud Hypervisor is an open source Virtual Machine Monitor (VMM) that runs on top of the KVM hypervisor and the Microsoft Hypervisor (MSHV).
77
Version: 48.0.246
8-
Release: 4%{?dist}
8+
Release: 5%{?dist}
99
License: ASL 2.0 OR BSD-3-clause
1010
Vendor: Microsoft Corporation
1111
Distribution: Azure Linux
@@ -139,6 +139,9 @@ cargo build --release --target=%{rust_musl_target} %{cargo_pkg_feature_opts} %{c
139139
%license LICENSES/CC-BY-4.0.txt
140140

141141
%changelog
142+
* Tue Apr 07 2026 BinduSri Adabala <v-badabala@microsoft.com> - 48.0.246-5
143+
- Bump release to rebuild with rust
144+
142145
* Mon Mar 09 2026 BinduSri Adabala <v-badabala@microsoft.com> - 48.0.246-4
143146
- Bump release to rebuild with rust
144147

SPECS/flux/flux.spec

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@
2222
Summary: Influx data language
2323
Name: flux
2424
Version: 0.194.5
25-
Release: 8%{?dist}
25+
Release: 9%{?dist}
2626
License: MIT
2727
Vendor: Microsoft Corporation
2828
Distribution: Azure Linux
@@ -146,6 +146,9 @@ RUSTFLAGS=%{rustflags} cargo test --release
146146
%{_includedir}/influxdata/flux.h
147147

148148
%changelog
149+
* Tue Apr 07 2026 BinduSri Adabala <v-badabala@microsoft.com> - 0.194.5-9
150+
- Bump release to rebuild with rust
151+
149152
* Wed Feb 11 2026 BinduSri Adabala <v-badabala@microsoft.com> - 0.194.5-8
150153
- Bump release to rebuild with rust
151154

SPECS/influxdb/influxdb.spec

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818
Summary: Scalable datastore for metrics, events, and real-time analytics
1919
Name: influxdb
2020
Version: 2.7.5
21-
Release: 14%{?dist}
21+
Release: 15%{?dist}
2222
License: MIT
2323
Vendor: Microsoft Corporation
2424
Distribution: Azure Linux
@@ -162,6 +162,9 @@ go test ./...
162162
%{_tmpfilesdir}/influxdb.conf
163163

164164
%changelog
165+
* Tue Apr 07 2026 BinduSri Adabala <v-badabala@microsoft.com> - 2.7.5-15
166+
- Bump release to rebuild with rust
167+
165168
* Mon Feb 23 2026 BinduSri Adabala <v-badabala@microsoft.com> - 2.7.5-14
166169
- Bump release to rebuild with rust
167170

SPECS/kata-containers-cc/kata-containers-cc.spec

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33

44
Name: kata-containers-cc
55
Version: 3.15.0.aks0
6-
Release: 8%{?dist}
6+
Release: 9%{?dist}
77
Summary: Kata Confidential Containers package developed for Confidential Containers on AKS
88
License: ASL 2.0
99
URL: https://github.com/microsoft/kata-containers
@@ -150,6 +150,9 @@ fi
150150
%{tools_pkg}/tools/osbuilder/node-builder/azure-linux/agent-install/usr/lib/systemd/system/kata-agent.service
151151

152152
%changelog
153+
* Tue Apr 07 2026 BinduSri Adabala <v-badabala@microsoft.com> - 3.15.0-aks0-9
154+
- Bump release to rebuild with rust
155+
153156
* Wed Feb 11 2026 BinduSri Adabala <v-badabala@microsoft.com> - 3.15.0-aks0-8
154157
- Bump release to rebuild with rust
155158

SPECS/kata-containers/kata-containers.spec

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
Name: kata-containers
44
Version: 3.19.1.kata2
5-
Release: 7%{?dist}
5+
Release: 8%{?dist}
66

77
Summary: Kata Containers package developed for Pod Sandboxing on AKS
88
License: ASL 2.0
@@ -117,6 +117,9 @@ popd
117117
%{tools_pkg}/tools/osbuilder/node-builder/azure-linux/agent-install/usr/lib/systemd/system/kata-agent.service
118118

119119
%changelog
120+
* Tue Apr 07 2026 BinduSri Adabala <v-badabala@microsoft.com> - 3.19.1.kata2-8
121+
- Bump release to rebuild with rust
122+
120123
* Mon Mar 09 2026 BinduSri Adabala <v-badabala@microsoft.com> - 3.19.1.kata2-7
121124
- Bump release to rebuild with rust
122125

SPECS/librsvg2/librsvg2.spec

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
Summary: An SVG library based on cairo
99
Name: librsvg2
1010
Version: 2.58.1
11-
Release: 6%{?dist}
11+
Release: 7%{?dist}
1212
License: LGPLv2+
1313
Vendor: Microsoft Corporation
1414
Distribution: Azure Linux
@@ -125,6 +125,9 @@ rm -vrf %{buildroot}%{_docdir}
125125
%{_bindir}/rsvg-convert
126126

127127
%changelog
128+
* Tue Apr 07 2026 BinduSri Adabala <v-badabala@microsoft.com> - 2.58.1-7
129+
- Bump release to rebuild with rust
130+
128131
* Wed Feb 11 2026 BinduSri Adabala <v-badabala@microsoft.com> - 2.58.1-6
129132
- Bump release to rebuild with rust
130133

SPECS/mesa/mesa.spec

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@
6767
Name: mesa
6868
Summary: Mesa graphics libraries
6969
Version: 24.0.1
70-
Release: 6%{?dist}
70+
Release: 7%{?dist}
7171
License: BSD
7272
Vendor: Microsoft Corporation
7373
Distribution: Azure Linux
@@ -741,6 +741,9 @@ popd
741741
%endif
742742

743743
%changelog
744+
* Tue Apr 07 2026 BinduSri Adabala <v-badabala@microsoft.com> - 24.0.1-7
745+
- Bump release to rebuild with rust
746+
744747
* Wed Feb 11 2026 BinduSri Adabala <v-badabala@microsoft.com> - 24.0.1-6
745748
- Bump release to rebuild with rust
746749

0 commit comments

Comments
 (0)