Skip to content

[AUTO-CHERRYPICK] [AutoPR- Security] Patch telegraf for CVE-2026-58253, CVE-2026-58252, CVE-2026-58251, CVE-2026-58250, CVE-2026-58209, CVE-2026-58208, CVE-2026-58207 [HIGH] - branch 3.0-dev#18010

Open
CBL-Mariner-Bot wants to merge 2 commits into
3.0-devfrom
cblmargh/cherry-pick-pr-17999-to-3.0-dev
Open

Conversation

@CBL-Mariner-Bot

Copy link
Copy Markdown
Collaborator

This is an auto-generated pull request to cherry-pick commit a8b5243 to 3.0-dev. Original PR: #17999
In case of no merge conflicts, the PR is merged without approval because it's an automated cherry-pick of an already approved PR.
In case of merge conflicts, an AI-based conflict resolver will attempt to resolve conflicts and might make mistakes. The reviewer must check AI's work before approving.

… CVE-2026-58251, CVE-2026-58250, CVE-2026-58209, CVE-2026-58208, CVE-2026-58207 [HIGH] (#17999)

Co-authored-by: Sushil Sati <v-sushilsati@microsoft.com>
(cherry picked from commit a8b5243)
@CBL-Mariner-Bot CBL-Mariner-Bot added the Auto Fast-track Cherry-pick Automatic cherry-pick from fast-track branch label Jul 14, 2026
@microsoft-github-policy-service microsoft-github-policy-service Bot added Packaging 3.0-dev PRs Destined for AzureLinux 3.0 labels Jul 14, 2026
@CBL-Mariner-Bot CBL-Mariner-Bot marked this pull request as ready for review July 14, 2026 15:06
@CBL-Mariner-Bot

Copy link
Copy Markdown
Collaborator Author

All conflicts resolved.

@CBL-Mariner-Bot CBL-Mariner-Bot requested a review from a team as a code owner July 14, 2026 15:06
@CBL-Mariner-Bot

Copy link
Copy Markdown
Collaborator Author

Auto Cherry-Pick SPEC Validation Summary

telegraf SPEC summary

Source (fasttrack) Target (3.0-dev) Resolved
Version 1.31.0 1.31.0 None
Release 24 25 25
Patches 52 48 55
Conflict Yes

⚠️ Validation issues:

  • Version-release None-25 is not higher than Source 1.31.0-24
  • Version-release None-25 is not higher than Target 1.31.0-25
  • Duplicate changelog entry for 1.31.0-22 (appears 2 times)
  • Directive present in both Source and Target was dropped: BuildRequires: golang
  • Directive present in both Source and Target was dropped: BuildRequires: systemd-devel

⚠️ Manual review required — validation found issues that may need correction.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3.0-dev PRs Destined for AzureLinux 3.0 Auto Fast-track Cherry-pick Automatic cherry-pick from fast-track branch Automatic PR Packaging

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants