Skip to content

Conversation

@k8s-infra-cherrypick-robot

This is an automated cherry-pick of #12593

/assign dmcgowan

@thaJeztah
Copy link
Member

Fuzzing broken? Perhaps it expected an older OS?

/tmp/not-out/tmp30d0y45k/fuzz_FuzzContainerStore: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.38' not found (required by /tmp/not-out/tmp30d0y45k/fuzz_FuzzContainerStore)

ERROR: 100.0% of fuzz targets seem to be broken. See the list above for a detailed information.

Copy link
Member

@mikebrow mikebrow left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@github-project-automation github-project-automation bot moved this from Needs Triage to Review In Progress in Pull Request Review Dec 7, 2025
This update includes a fix for a regression introduced in CVE-2025-52881
mitigation patches where the `mode=` argument was incorrectly applied to
tmpfs mounts regardless of whether the target path existed.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
@mikebrow mikebrow force-pushed the cherry-pick-12593-to-release/2.1 branch from 3e24f63 to 251f0a2 Compare December 8, 2025 00:29
@AkihiroSuda AkihiroSuda merged commit 6dc89d8 into containerd:release/2.1 Dec 8, 2025
55 checks passed
@github-project-automation github-project-automation bot moved this from Review In Progress to Done in Pull Request Review Dec 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Development

Successfully merging this pull request may close these issues.

9 participants