Skip to content

Conversation

@cyphar
Copy link
Member

@cyphar cyphar commented Nov 7, 2025

Backport of #4977. (Draft until merged.)


This new version includes the fixes for CVE-2025-52881, so we can remove
the internal/third_party copy of the library we added in commit
ed6b169 ("selinux: use safe procfs API for labels") as well as the
"replace" directive in go.mod (which is problematic for "go get"
installs).

Fixes: ed6b169 ("selinux: use safe procfs API for labels")
Signed-off-by: Aleksa Sarai [email protected]

This new version includes the fixes for CVE-2025-52881, so we can remove
the internal/third_party copy of the library we added in commit
ed6b169 ("selinux: use safe procfs API for labels") as well as the
"replace" directive in go.mod (which is problematic for "go get"
installs).

Fixes: ed6b169 ("selinux: use safe procfs API for labels")
Signed-off-by: Aleksa Sarai <[email protected]>
(cherry picked from commit 96f1962)
Signed-off-by: Aleksa Sarai <[email protected]>
@cyphar cyphar added the backport/1.2-pr A backport PR to release-1.2 label Nov 7, 2025
@cyphar cyphar marked this pull request as ready for review November 8, 2025 02:00
@lifubang lifubang added this to the 1.2.9 milestone Nov 8, 2025
Copy link
Contributor

@kolyshkin kolyshkin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@lifubang lifubang merged commit 6e24b72 into opencontainers:release-1.2 Nov 11, 2025
40 checks passed
@cyphar cyphar deleted the 1.2-selinux-1.13 branch November 11, 2025 03:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport/1.2-pr A backport PR to release-1.2

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants