Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[release-4.13] OCPBUGS-11672: UPSTREAM: 2326: Update opencontainers/runc for CVE-2023-27561 #68

Conversation

mpatlasov
Copy link

This is a manual cherry-pick of #65.

(Automated cherry-pick #66 is broken because of CRLF/LF issue in vendor/github.com/MakeNowJust/heredoc/README.md)

@openshift-ci
Copy link

openshift-ci bot commented Apr 11, 2023

@mpatlasov: No Bugzilla bug is referenced in the title of this pull request.
To reference a bug, add 'Bug XXX:' to the title of this pull request and request another bug refresh with /bugzilla refresh.

In response to this:

[release-4.13] OCPBUGS-11672: UPSTREAM: 2326: Update opencontainers/runc for CVE-2023-27561

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@openshift-ci-robot openshift-ci-robot added jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. jira/valid-bug Indicates that a referenced Jira bug is valid for the branch this PR is targeting. bugzilla/valid-bug Indicates that a referenced Bugzilla bug is valid for the branch this PR is targeting. labels Apr 11, 2023
@openshift-ci-robot
Copy link

@mpatlasov: This pull request references Jira Issue OCPBUGS-11672, which is valid. The bug has been moved to the POST state.

6 validation(s) were run on this bug
  • bug is open, matching expected state (open)
  • bug target version (4.13.0) matches configured target version for branch (4.13.0)
  • bug is in the state New, which is one of the valid states (NEW, ASSIGNED, POST)
  • dependent bug Jira Issue OCPBUGS-8457 is in the state ON_QA, which is one of the valid states (MODIFIED, ON_QA, VERIFIED)
  • dependent Jira Issue OCPBUGS-8457 targets the "4.14.0" version, which is one of the valid target versions: 4.14.0
  • bug has dependents

No GitHub users were found matching the public email listed for the QA contact in Jira ([email protected]), skipping review request.

The bug has been updated to refer to the pull request using the external bug tracker.

In response to this:

This is a manual cherry-pick of #65.

(Automated cherry-pick #66 is broken because of CRLF/LF issue in vendor/github.com/MakeNowJust/heredoc/README.md)

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@openshift-ci openshift-ci bot requested review from dobsonj and gnufied April 11, 2023 23:56
@mpatlasov
Copy link
Author

/lgtm
/approve

@openshift-ci
Copy link

openshift-ci bot commented Apr 11, 2023

@mpatlasov: you cannot LGTM your own PR.

In response to this:

/lgtm
/approve

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@openshift-ci
Copy link

openshift-ci bot commented Apr 11, 2023

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: mpatlasov
Once this PR has been reviewed and has the lgtm label, please assign gnufied for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@mpatlasov mpatlasov force-pushed the manual-cherry-pick-65-to-release-4.13 branch 2 times, most recently from 5c6def8 to 938234c Compare April 12, 2023 00:51
@mpatlasov mpatlasov force-pushed the manual-cherry-pick-65-to-release-4.13 branch from 938234c to be91684 Compare April 12, 2023 00:54
@mpatlasov
Copy link
Author

PR blocked on verify-deps issue: even though go mod tidy; go mod vendor proceeds smoothly locally, in CI it emits an error:

ERROR: detected vendor inconsistency after 'go mod tidy; go mod vendor':
 M vendor/github.com/MakeNowJust/heredoc/README.md

@mpatlasov
Copy link
Author

/retest

3 similar comments
@jsafrane
Copy link

/retest

@mpatlasov
Copy link
Author

/retest

@mpatlasov
Copy link
Author

/retest

@openshift-ci
Copy link

openshift-ci bot commented Apr 13, 2023

@mpatlasov: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/verify-deps be91684 link true /test verify-deps

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@jsafrane
Copy link

/close
in favor of #69

@openshift-ci openshift-ci bot closed this Apr 14, 2023
@openshift-ci
Copy link

openshift-ci bot commented Apr 14, 2023

@jsafrane: Closed this PR.

In response to this:

/close
in favor of #69

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@openshift-ci-robot
Copy link

@mpatlasov: This pull request references Jira Issue OCPBUGS-11672. The bug has been updated to no longer refer to the pull request using the external bug tracker. All external bug links have been closed. The bug has been moved to the NEW state.

In response to this:

This is a manual cherry-pick of #65.

(Automated cherry-pick #66 is broken because of CRLF/LF issue in vendor/github.com/MakeNowJust/heredoc/README.md)

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bugzilla/valid-bug Indicates that a referenced Bugzilla bug is valid for the branch this PR is targeting. jira/valid-bug Indicates that a referenced Jira bug is valid for the branch this PR is targeting. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants