Skip to content

[AUTO-CHERRYPICK] [Critical] Patch golang & golang-1.25 for CVE-2026-39821 - branch 3.0-dev#17770

Draft
CBL-Mariner-Bot wants to merge 2 commits into
3.0-devfrom
cblmargh/cherry-pick-pr-17627-to-3.0-dev
Draft

[AUTO-CHERRYPICK] [Critical] Patch golang & golang-1.25 for CVE-2026-39821 - branch 3.0-dev#17770
CBL-Mariner-Bot wants to merge 2 commits into
3.0-devfrom
cblmargh/cherry-pick-pr-17627-to-3.0-dev

Conversation

@CBL-Mariner-Bot

Copy link
Copy Markdown
Collaborator

This is an auto-generated pull request to cherry-pick commit 92dba45 to 3.0-dev. Original PR: #17627
In case of no merge conflicts, the PR is merged without approval because it's an automated cherry-pick of an already approved PR.
In case of merge conflicts, an AI-based conflict resolver will attempt to resolve conflicts and might make mistakes. The reviewer must check AI's work before approving.

@CBL-Mariner-Bot CBL-Mariner-Bot added the Auto Fast-track Cherry-pick Automatic cherry-pick from fast-track branch label Jun 19, 2026
@CBL-Mariner-Bot

Copy link
Copy Markdown
Collaborator Author

Auto Cherry-Pick SPEC Validation Summary

golang-1.25 SPEC summary

Source (fasttrack) Target (3.0-dev) Resolved
Version 1.25.11 1.25.11 1.25.11
Release 2 2 2
Patches 2 1 2
Conflict Yes

⚠️ Validation issues:

  • Version-release 1.25.11-2 is not higher than Source 1.25.11-2
  • Version-release 1.25.11-2 is not higher than Target 1.25.11-2
  • Unresolved conflict markers (<<<<<<< / >>>>>>>) found in file

golang SPEC summary

Source (fasttrack) Target (3.0-dev) Resolved
Version 1.26.4 1.26.4 1.26.4
Release 2 2 2
Patches 2 1 2
Conflict Yes

⚠️ Validation issues:

  • Version-release 1.26.4-2 is not higher than Source 1.26.4-2
  • Version-release 1.26.4-2 is not higher than Target 1.26.4-2
  • Unresolved conflict markers (<<<<<<< / >>>>>>>) found in file

⚠️ Manual review required — validation found issues that may need correction.

@CBL-Mariner-Bot

Copy link
Copy Markdown
Collaborator Author

Auto Cherry-Pick SPEC Validation Summary

golang-1.25 SPEC summary

Source (fasttrack) Target (3.0-dev) Resolved
Version 1.25.11 1.25.11 1.25.11
Release 2 2 2
Patches 2 1 2
Conflict Yes

⚠️ Validation issues:

  • Version-release 1.25.11-2 is not higher than Source 1.25.11-2
  • Version-release 1.25.11-2 is not higher than Target 1.25.11-2
  • Unresolved conflict markers (<<<<<<< / >>>>>>>) found in file

golang SPEC summary

Source (fasttrack) Target (3.0-dev) Resolved
Version 1.26.4 1.26.4 1.26.4
Release 2 2 2
Patches 2 1 2
Conflict Yes

⚠️ Validation issues:

  • Version-release 1.26.4-2 is not higher than Source 1.26.4-2
  • Version-release 1.26.4-2 is not higher than Target 1.26.4-2
  • Unresolved conflict markers (<<<<<<< / >>>>>>>) found in file

⚠️ Manual review required — validation found issues that may need correction.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3.0-dev PRs Destined for AzureLinux 3.0 Auto Fast-track Cherry-pick Automatic cherry-pick from fast-track branch Automatic PR Packaging

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants