Skip to content

[code sync] Merge code from sonic-net/sonic-buildimage:202305 to 202305#289

Merged
mssonicbld merged 2 commits intoAzure:202305from
mssonicbld:sonicbld/202305-merge
Mar 10, 2024
Merged

[code sync] Merge code from sonic-net/sonic-buildimage:202305 to 202305#289
mssonicbld merged 2 commits intoAzure:202305from
mssonicbld:sonicbld/202305-merge

Conversation

@mssonicbld
Copy link
Collaborator

* a6437d8ab - (head/202305) [202305] Support FIPS for armhf (#18283) (2024-03-09) [xumia]<br>```

xumia and others added 2 commits March 9, 2024 11:39
* [Security] Fix the krb5 vulnerability issue (#17914)

### Why I did it
Fix the krb5 vulnerable issue
CVE-2021-36222  allows remote attackers to cause a NULL pointer dereference and daemon crash
CVE-2021-37750  NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field
DSA 5286-1  remote code execution

##### Work item tracking
- Microsoft ADO **(number only)**: 26577929

#### How I did it
Upgrade the krb5 version to 1.18.3-6+deb11u14+fips.

* [Build] Fix krb5 package not found issue (#17926)

Why I did it
Fix the build issue caused by the wrong version specified.

See the build error logs:

Try 4: /usr/bin/wget --retry-connrefused failed to get: -O
--2024-01-26 11:38:23--  https://sonicstorage.blob.core.windows.net/public/fips/bullseye/0.10/amd64/libk5crypto3_1.18.3-6+deb11u14+fips_amd64.deb
Resolving sonicstorage.blob.core.windows.net (sonicstorage.blob.core.windows.net)... 20.60.59.131
Connecting to sonicstorage.blob.core.windows.net (sonicstorage.blob.core.windows.net)|20.60.59.131|:443... connected.
HTTP request sent, awaiting response... 404 The specified blob does not exist.
2024-01-26 11:38:23 ERROR 404: The specified blob does not exist..

Try 5: /usr/bin/wget --retry-connrefused failed to get: -O
make[1]: *** [Makefile:12: /sonic/target/debs/bullseye/symcrypt-openssl_0.10_amd64.deb] Error 8
make[1]: Leaving directory '/sonic/src/sonic-fips'
Work item tracking
Microsoft ADO (number only): 26577929
The package not installed but PR passed issue is traced in another issue #17927

How I did it
Add the libkrb5-dev and the depended packages to fix docker-sonic-vs build failure.
The package libzmq3-dev has dependency on the libkrb5-dev.

* [202305] Support FIPS for armhf

* Remove no use mirror

* Fix fips options issue
@mssonicbld mssonicbld merged commit 36d7579 into Azure:202305 Mar 10, 2024
theasianpianist pushed a commit to theasianpianist/sonic-buildimage-msft that referenced this pull request Apr 9, 2024
…atically (#16877)

src/sonic-snmpagent

* 17a8bb2 - (HEAD -> 202205, origin/202205) Add ifhighspeed UT (Azure#296) (5 minutes ago) [Hua Liu]
* b5a52ff - Fix key missing exception when invalied transiver info in STATE_DB (Azure#289) (5 minutes ago) [Hua Liu]
* 09bb0c2 - Fix FdbUpdater crash when SAI_FDB_ENTRY_ATTR_BRIDGE_PORT_ID attribute missing. (Azure#286) (5 minutes ago) [Hua Liu]
* 792e403 - Support interface speed for PortChannels (Azure#262) (5 minutes ago) [Lukas Stockner]
prabhataravind pushed a commit that referenced this pull request Jul 7, 2025
…y (#22289)

#### Why I did it
src/linkmgrd
```
* 35c3549 - (HEAD -> master, origin/master, origin/HEAD) [active-standby] shutdown link prober when starting as isolated (#289) (29 hours ago) [Jing Zhang]
```
#### How I did it
#### How to verify it
#### Description for the changelog
bingwang-ms added a commit that referenced this pull request Mar 6, 2026
…AD automatically (#2036)

#### Why I did it
src/sonic-utilities
```
* 13ee5428 - (HEAD -> 202503, origin/202503) Merge pull request #289 from sdszhang/f2_hwsku_202503 (13 hours ago) [bingwang-ms]
* ec2512d3 - [Arista] Add TH5 HWSKU to list for pfcwd support (14 hours ago) [Dakota Crozier]
```
#### How I did it
#### How to verify it
#### Description for the changelog
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants