Skip to content

[AUTO-CHERRYPICK] [HIGH] Patch glibc for CVE-2026-4046 - branch 3.0-dev#17350

Open
CBL-Mariner-Bot wants to merge 3 commits into
3.0-devfrom
cblmargh/cherry-pick-pr-17075-to-3.0-dev
Open

[AUTO-CHERRYPICK] [HIGH] Patch glibc for CVE-2026-4046 - branch 3.0-dev#17350
CBL-Mariner-Bot wants to merge 3 commits into
3.0-devfrom
cblmargh/cherry-pick-pr-17075-to-3.0-dev

Conversation

@CBL-Mariner-Bot
Copy link
Copy Markdown
Collaborator

This is an auto-generated pull request to cherry-pick commit 1def874 to 3.0-dev. Original PR: #17075
In case of no merge conflicts, the PR is merged without approval because it's an automated cherry-pick of an already approved PR.
In case of merge conflicts, an AI-based conflict resolver will attempt to resolve conflicts and might make mistakes. The reviewer must check AI's work before approving.

Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
(cherry picked from commit 1def874)
@CBL-Mariner-Bot CBL-Mariner-Bot added the Auto Fast-track Cherry-pick Automatic cherry-pick from fast-track branch label May 19, 2026
@microsoft-github-policy-service microsoft-github-policy-service Bot added Packaging specs-extended PR to fix SPECS-EXTENDED 3.0-dev PRs Destined for AzureLinux 3.0 Automatic PR labels May 19, 2026
- Resolve conflict markers in both specs' changelog sections.
- kubevirt: bump Release 4→5, fasttrack -4 (glibc rebuild, May 07)
  preserved, 3.0-dev -4 (CVE-2026-33814, May 13) renumbered to -5.
- qemu: bump Release 6→7, fasttrack -6 (glibc rebuild, May 07)
  preserved, 3.0-dev -6 (user_static, Apr 14) renumbered to -7.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@jslobodzian jslobodzian force-pushed the cblmargh/cherry-pick-pr-17075-to-3.0-dev branch from 2758d4b to 2ce5e27 Compare May 20, 2026 19:00
@jslobodzian jslobodzian marked this pull request as ready for review May 20, 2026 23:15
@jslobodzian jslobodzian requested review from a team as code owners May 20, 2026 23:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3.0-dev PRs Destined for AzureLinux 3.0 Auto Fast-track Cherry-pick Automatic cherry-pick from fast-track branch Automatic PR Packaging specs-extended PR to fix SPECS-EXTENDED

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants