Bump repositories for CVE-2026-31431 (Copy Fail)#2299
Conversation
There was a problem hiding this comment.
Code Review
This pull request updates the autogenerated version timestamps for various Pulp repositories in etc/kayobe/pulp-repo-versions.yml, including CentOS Stream, Docker, ELRepo, EPEL, Grafana, RabbitMQ, Rocky Linux, and Ubuntu. As there are no review comments provided, I have no further feedback to offer.
798942b to
25dd60c
Compare
|
/gemini review |
There was a problem hiding this comment.
Code Review
This pull request updates various repository version timestamps in etc/kayobe/pulp-repo-versions.yml to newer May 2026 versions. These updates address CVE-2026-31431 (Copy Fail), as documented in the newly added security release note. I have no feedback to provide as there were no review comments to assess.
This includes Rocky Linux kernels fixing the Copy Fail vulnerability. Mitigation on Ubuntu is applied through an updated kmod package [1]. [1] https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available
|
is the next step to build container images out of those repos ? |
It can be done in another pull request, since the priority here is to ship the new kernel to customers. |
and we need new doca build for new kernel for instance |
This includes Rocky Linux kernels fixing the Copy Fail vulnerability. Mitigation on Ubuntu is applied through an updated kmod package [1].
[1] https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available