Skip to content

[202505] fix: security vulnerability docker-ptf (#27059) - #27091

Merged
yejianquan merged 1 commit into
sonic-net:202505from
auspham:austinpham/202505/37730545-fix-ptf-vulnerability
May 2, 2026
Merged

[202505] fix: security vulnerability docker-ptf (#27059)#27091
yejianquan merged 1 commit into
sonic-net:202505from
auspham:austinpham/202505/37730545-fix-ptf-vulnerability

Conversation

@auspham

@auspham auspham commented Apr 30, 2026

Copy link
Copy Markdown
Contributor

Why I did it

Cherry-pick #27059

CVE Package Why unfixable
GHSA-x744-4wpc-v9h2 (HIGH) github.com/docker/docker v28.5.2 → needs v29.3.1 v29.3.1 doesn't exist as a Go module tag; Docker moved to moby/moby/v2 but gnmic's source code imports the old path
GHSA-pxq6-2prw-chj9 (MEDIUM) github.com/docker/docker v28.5.2 → needs v29.3.1 Same reason as above
GHSA-vffh-x6r8-xx99 (MEDIUM) github.com/prometheus/prometheus v0.306.0 → needs v0.311.2+ Upgrading pulls in k8s.io/kube-openapi which has a broken transitive dep on go-openapi/testify/v2/assert/yaml (module doesn't exist), so go mod tidy fails
Work item tracking
  • Microsoft ADO (number only):

How I did it

Remove gnmic package related

How to verify it

Which release branch to backport (provide reason below if selected)

  • 202305
  • 202311
  • 202405
  • 202411
  • 202505
  • 202511

Tested branch (Please provide the tested image version)

Description for the changelog

Link to config_db schema for YANG module changes

A picture of a cute animal (not mandatory but encouraged)

Signed-off-by: Austin Pham (agent) <austinpham@microsoft.com>
@auspham
auspham requested a review from lguohan as a code owner April 30, 2026 03:28
@mssonicbld

Copy link
Copy Markdown
Collaborator

/azp run Azure.sonic-buildimage

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines successfully started running 1 pipeline(s).

@auspham auspham changed the title fix: security vulnerability docker-ptf [202505] fix: security vulnerability docker-ptf Apr 30, 2026
@auspham auspham changed the title [202505] fix: security vulnerability docker-ptf [202505] fix: security vulnerability docker-ptf (#27059) Apr 30, 2026
@auspham

auspham commented May 1, 2026

Copy link
Copy Markdown
Contributor Author

/azpw retry

@mssonicbld

Copy link
Copy Markdown
Collaborator

Retrying failed(or canceled) jobs...

@mssonicbld

Copy link
Copy Markdown
Collaborator

Retrying failed(or canceled) stages in build 1101990:

✅Stage Test:

  • Job impacted-area-kvmtest-t0-sonic by Elastictest: retried.
  • Job impacted-area-kvmtest-t0-2vlans by Elastictest: retried.
  • Job impacted-area-kvmtest-t1-lag by Elastictest: retried.
  • Job impacted-area-kvmtest-dualtor by Elastictest: retried.
  • Job impacted-area-kvmtest-t0 by Elastictest: retried.

@auspham

auspham commented May 1, 2026

Copy link
Copy Markdown
Contributor Author

/azpw retry

@mssonicbld

Copy link
Copy Markdown
Collaborator

Retrying failed(or canceled) jobs...

@mssonicbld

Copy link
Copy Markdown
Collaborator

Retrying failed(or canceled) stages in build 1101990:

✅Stage Test:

  • Job impacted-area-kvmtest-dualtor by Elastictest: retried.
  • Job impacted-area-kvmtest-t0-sonic by Elastictest: retried.
  • Job impacted-area-kvmtest-t0 by Elastictest: retried.
  • Job impacted-area-kvmtest-t0-2vlans by Elastictest: retried.
  • Job impacted-area-kvmtest-t1-lag by Elastictest: retried.

@auspham

auspham commented May 2, 2026

Copy link
Copy Markdown
Contributor Author

/azpw retry

@mssonicbld

Copy link
Copy Markdown
Collaborator

Retrying failed(or canceled) jobs...

@mssonicbld

Copy link
Copy Markdown
Collaborator

No failed(or canceled) stages or jobs found in the most recent build 1101990.

@auspham

auspham commented May 2, 2026

Copy link
Copy Markdown
Contributor Author

/azpw retry

@mssonicbld

Copy link
Copy Markdown
Collaborator

Retrying failed(or canceled) jobs...

@mssonicbld

Copy link
Copy Markdown
Collaborator

Retrying failed(or canceled) stages in build 1101990:

✅Stage Test:

  • Job impacted-area-kvmtest-t0-2vlans by Elastictest: retried.
  • Job impacted-area-kvmtest-t0-sonic by Elastictest: retried.
  • Job impacted-area-kvmtest-t1-lag by Elastictest: retried.

@yejianquan
yejianquan merged commit 168bf62 into sonic-net:202505 May 2, 2026
22 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants