Skip to content

[High] Patch packer for CVE-2026-39833#17587

Open
BinduSri-6522866 wants to merge 3 commits into
microsoft:fasttrack/3.0from
Kanishk-Bansal:topic/CVE-2026-39833/packer-3.0
Open

[High] Patch packer for CVE-2026-39833#17587
BinduSri-6522866 wants to merge 3 commits into
microsoft:fasttrack/3.0from
Kanishk-Bansal:topic/CVE-2026-39833/packer-3.0

Conversation

@BinduSri-6522866
Copy link
Copy Markdown

@BinduSri-6522866 BinduSri-6522866 commented Jun 1, 2026

Summary:

  • Patch packer for CVE-2026-39833
    • ssh/agent/keyring_test.go and ssh/test/agent_unix_test.go files are not present in our source code, so patch could not be applied for those two files.
  • Modified CVE-2026-39832
    • ssh/agent/keyring_test.go and ssh/agent/client_test.go files are not preset in our source code, so patch could not be applied for those two files.

Change Log:

  • modified: ../SPECS/packer/CVE-2026-39832.patch
  • new file: ../SPECS/packer/CVE-2026-39833.patch
  • modified: ../SPECS/packer/packer.spec

Test Methodology
Local Build:
packer-1.9.5-15.azl3.src.rpm.log
packer-1.9.5-15.azl3.src.rpm.test.log
Buddy Build: https://dev.azure.com/mariner-org/mariner/_build/results?buildId=1130253&view=results

Comment thread SPECS/packer/packer.spec
@Kanishk-Bansal
Copy link
Copy Markdown

/azurepipelines run

@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines successfully started running 1 pipeline(s).

@Kanishk-Bansal Kanishk-Bansal marked this pull request as ready for review June 1, 2026 10:34
@Kanishk-Bansal Kanishk-Bansal requested a review from a team as a code owner June 1, 2026 10:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

fasttrack/3.0 PRs Destined for Azure Linux 3.0 Packaging security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants