[AutoPR- Security] Patch hvloader for CVE-2026-22795 [MEDIUM]#165

Draft

azurelinux-security wants to merge 1030 commits intomainfrom

azure-autosec/hvloader/2.0/1042823

This pull request is big! We're only showing the most recent 250 commits

Commits on Apr 7, 2025

Merge branch '2.0' into fasttrack/2.0
jslobodzian
committed
Merge branch 'fasttrack/2.0' into kanbansal/etcd/CVE-2025-30204/2.0
jslobodzian
authored
Merge branch 'fasttrack/2.0' into kgodara/2.0/coredns/CVE-2025-29786
jslobodzian
authored
Merge branch 'fasttrack/2.0' into kkaitepalli/cmake-2.0-CVE-2024-48615
jslobodzian
authored
Merge branch 'fasttrack/2.0' into sthelkar/grpc_2.0
jslobodzian
authored
Merge branch 'fasttrack/2.0' into ankitapareek/2.0-CVE-2025-2312-cifs-utils
jslobodzian
authored
Merge branch 'fasttrack/2.0' into ankitapareek/2.0-CVE-2025-30219-rabbitmq-server
jslobodzian
authored
Patch cmake for CVE-2024-48615 [High] (#13286)
jslobodzian
authored
Upgrade etcd to 3.5.21 for CVE-2025-30204 [High] (#13197)
jslobodzian
authored
Merge branch 'fasttrack/2.0' into kgodara/2.0/coredns/CVE-2025-29786
jslobodzian
authored
Patch coredns for CVE-2025-29786 [HIGH] (#13237)
jslobodzian
authored
Merge branch 'fasttrack/2.0' into ankitapareek/2.0-CVE-2025-2312-cifs-utils
jslobodzian
authored
Merge branch 'fasttrack/2.0' into ankitapareek/2.0-CVE-2025-30219-rabbitmq-server
jslobodzian
authored
Patch rabbitmq-server for CVE-2025-30219 [Medium] (#13200)
jslobodzian
authored
Patch `cifs-utils` to address CVE-2025-2312 [Medium] (#13198)
jslobodzian
authored
Merge branch 'fasttrack/2.0' into sthelkar/grpc_2.0
jslobodzian
authored
Patch grpc for CVE-2023-31130 [Medium] (#11977)
jslobodzian
authored
Patch augeas for CVE-2025-2588 [MEDIUM] (#13207)
jslobodzian
authored
Merge branch 'fasttrack/2.0' into v-smalavathu/telegraf/CVE-2025-22870_2-telegraf
jslobodzian
authored
[Medium] Patch telegraf for CVE-2025-22870 and CVE-2024-51744 (#13245)
jslobodzian
authored
Merge branch 'fasttrack/2.0' into sumsharma/terraform_CVE-2023-48795
jslobodzian
authored
Patch terraform for CVE-2023-48795 [Medium] (#13272)
jslobodzian
authored
Merge branch 'fasttrack/2.0' into sumsharma/kubevirt_cve-2023-48795
jslobodzian
authored
Patch kubevirt for CVE-2023-48795 [Medium] (#13273)
jslobodzian
authored
add patch to resolve CVE-2025-21614 for cri-o
henryli001
committed

Commits on Apr 9, 2025

Commits on Apr 10, 2025

Commits on Apr 14, 2025

[Low] Patch kubevirt for CVE-2024-51744 (#13137)

jykanase
and
Kanishk-Bansal
authored

Commits on Apr 15, 2025

Commits on Apr 17, 2025

Commits on Apr 18, 2025

Commits on Apr 21, 2025

Commits on Apr 22, 2025

Commits on Apr 23, 2025

[AUTOPATCHER-CORE] Upgrade pgbouncer to 1.24.1 to fix CVE-2025-2291 [High] (#13528)

CBL-Mariner-Bot
and
mayankfz
authored

Commits on Apr 24, 2025

Merge branch 'main' into 2.0
jslobodzian
committed

Commits on Apr 25, 2025

Commits on Apr 28, 2025

shadow-utils: patch CVE-2023-4641[Medium] (#11925)

arc9693
and
Adub17030MS
authored
Patch hvloader for CVE-2022-36763, CVE-2022-36764, CVE-2022-36765 [High] (#13583)

mayankfz
and
Mayank Singh
authored

Commits on Apr 29, 2025

Commits on May 5, 2025

Commits on May 6, 2025

Patch hvloader for CVE-2023-45236, CVE-2023-45237 [High] (#13621)

mayankfz
and
Mayank Singh
authored

Commits on May 8, 2025

Switched the fast-track PR check to run on an AZL 3.0 agent pool. (#1… (#13701)
PawelWMS
authored

Commits on May 13, 2025

[AUTO-PR] Cherry-picked CVE-2025-22247 fix in `openvm-tools` (#13761)

CBL-Mariner-Bot
and
anphel31
authored
Patch `syslog-ng` for CVE-2024-47619 [High] (#13734)

Kanishk-Bansal
and
Kanishk Bansal
authored
Upgrade `maven` to 3.8.1 to fix CVE-2021-26291 in `javapackages-bootstrap` [Critical] (#13769)

Kanishk-Bansal
and
Kanishk Bansal
authored

Commits on May 14, 2025

Revert "Upgrade `maven` to 3.8.1 to fix CVE-2021-26291 in `javapackages-bootstrap` [Critical]" (#13786)
Kanishk-Bansal
authored

Commits on Jun 2, 2025

Commits on Jun 6, 2025

Merge branch '2.0' into fasttrack/2.0
jslobodzian
committed

Commits on Jun 11, 2025

Commits on Jun 12, 2025

Upgrade `mysql` to 8.0.42 for fixing 25 CVEs (#13955)

Kanishk-Bansal
and
Kanishk Bansal
authored

Commits on Jun 13, 2025

Patch `frr` for CVE-2024-55553 [High] (#13999)

Kanishk-Bansal
and
Kanishk Bansal
authored

Commits on Jun 17, 2025

Commits on Jun 19, 2025

Commits on Jun 20, 2025

Add PR package update check to fasttrack/2.0 (#14035)

rikenm1
and
jslobodzian
authored

Commits on Jun 23, 2025

Revert "Patch `glibc` for CVE-2025-4802 & CVE-2025-0395 [High] (#13934)" (#14079)
sameluch
authored

Commits on Jun 24, 2025

[High] Patch protobuf for CVE-2025-4565 (#14042)

akhila-guruju
and
sameluch
authored

Commits on Jun 26, 2025

Upgrade clamav to 1.0.9 to address CVE-2025-20260 [CRITICAL] (#14089)

authored

Commits on Jun 30, 2025

Commits on Jul 1, 2025

Commits on Jul 8, 2025

Commits on Jul 10, 2025

Commits on Jul 14, 2025

[AutoPR- Security] Patch gdk-pixbuf2 for CVE-2025-7345 (#14276)
azurelinux-security
authored

Commits on Jul 15, 2025

Commits on Jul 18, 2025

Commits on Jul 25, 2025

Commits on Jul 29, 2025

Commits on Aug 6, 2025

Commits on Aug 7, 2025

msft-golang: upgrade version 1.24.1 -> 1.24.5 (#14442)

mfrw
authored and
jslobodzian
committed

Commits on Aug 8, 2025

[AutoPR- Security] Patch ceph for CVE-2024-48916 [HIGH] (#14419)

azurelinux-security
and
realsdx
authored

Commits on Aug 11, 2025

[AutoPR- Security] Patch libsoup for CVE-2025-4948 [HIGH] (#14413)

authored

Commits on Aug 12, 2025

Commits on Aug 15, 2025

Patch luajit for CVE-2024-25177[HIGH] (#14436)

authored

Commits on Aug 18, 2025

[AUTOPATCHER-CORE] Upgrade postgresql to 14.19 for CVE-2025-8714, CVE-2025-8715, CVE-2025-8713 (#14531)
CBL-Mariner-Bot
authored

Commits on Sep 2, 2025

Merge branch 'main' into mbykhovtsev/aug-release
mbykhovtsev-ms
committed

Commits on Sep 3, 2025

Merge branch 'main' of https://github.com/microsoft/CBL-Mariner into mbykhovtsev/aug-release
mbykhovtsev-ms
committed

Commits on Sep 4, 2025

[High] Patch golang & golang-1.18 for CVE-2025-47907, golang for CVE-2025-4674, CVE-2025-47906 and [Medium] Patch golang & golang-1.18 for CVE-2025-4673 (#14552)
akhila-guruju
authored

Commits on Sep 5, 2025

Merge branch 'main' of https://github.com/microsoft/CBL-Mariner into mbykhovtsev/aug-release
mbykhovtsev-ms
committed

Commits on Sep 8, 2025

Merge branch 'main' of https://github.com/microsoft/CBL-Mariner into mbykhovtsev/aug-release
mbykhovtsev-ms
committed

Commits on Sep 9, 2025

[2.0] August 2025 release (#14594)
anphel31
authored

Commits on Sep 23, 2025

Commits on Sep 29, 2025

Revert "[MEDIUM] Patch glib for CVE-2024-34397 (#14223)"
PawelWMS
committed

Commits on Sep 30, 2025

Revert "[MEDIUM] Patch glib for CVE-2024-34397 (#14223)" (#14745)
anphel31
authored

Commits on Oct 3, 2025

Commits on Oct 7, 2025

Commits on Oct 8, 2025

Commits on Oct 10, 2025

Commits on Oct 17, 2025

Commits on Oct 21, 2025

Merge branch '2.0' into fasttrack/2.0
PawelWMS
committed

Commits on Oct 28, 2025

[AutoPR- Security] Patch coredns for CVE-2025-59530 [HIGH] (#14932)
azurelinux-security
authored

Commits on Nov 3, 2025

Merge branch '2.0' into fasttrack/2.0
jslobodzian
committed

Commits on Nov 6, 2025

Commits on Nov 11, 2025

Commits on Nov 12, 2025

Commits on Nov 18, 2025

Commits on Nov 21, 2025

Patch qemu for CVE-2024-7409 [HIGH] (#14520)

kgodara912
and
Kshitiz Godara
authored
[AutoPR- Security] Patch kubevirt for CVE-2025-64324 [HIGH] (#15140)

authored

Commits on Dec 1, 2025

Commits on Dec 3, 2025

Commits on Dec 4, 2025

Upgrade `msft-golang` to 1.24.11 (#15221)

Kanishk-Bansal
and
Kanishk Bansal
authored

Commits on Dec 16, 2025

Commits on Dec 19, 2025

[AutoPR- Security] Patch local-path-provisioner for CVE-2025-65637 [HIGH] (#15267)

azurelinux-security
and
jslobodzian
authored

Commits on Dec 22, 2025

Commits on Dec 26, 2025

Revert "[AutoPR- Security] Patch python-urllib3 for CVE-2025-66471, C… (#15399)
jslobodzian
authored

Commits on Dec 29, 2025

Commits on Dec 30, 2025

Commits on Jan 8, 2026

Merge branch '2.0' into fasttrack/2.0
jslobodzian
committed

Commits on Jan 20, 2026

Commits on Jan 23, 2026

Commits on Jan 29, 2026

[AutoPR- Security] Patch libxml2 for CVE-2026-0992, CVE-2026-0990, CVE-2025-7425 [HIGH] (#15583)

azurelinux-security
and
akhila-guruju
authored

Commits on Feb 4, 2026

Patch hvloader for CVE-2026-22795
azurelinux-security
committed