Skip to content

[MANUAL CHERRYPICK] Upgrade etcd to 3.5.33 for CVE-2026-56852 (#18180) - branch 3.0-dev - #18288

Open
jslobodzian wants to merge 1 commit into
3.0-devfrom
jslobo/cp-pr-18180-to-3.0-dev
Open

[MANUAL CHERRYPICK] Upgrade etcd to 3.5.33 for CVE-2026-56852 (#18180) - branch 3.0-dev#18288
jslobodzian wants to merge 1 commit into
3.0-devfrom
jslobo/cp-pr-18180-to-3.0-dev

Conversation

@jslobodzian

Copy link
Copy Markdown
Collaborator

Manual cherry-pick of Fast-Track PR #18180 (commit 9a1391aad) to 3.0-dev.

3.0-dev already contains the prerequisite etcd 3.5.32 upgrade from #18002, so this applies only the intended 3.5.33 delta: source/vendor signatures, golang >= 1.25.12, cgmanifest, and changelog.

The resulting etcd SPEC matches fasttrack/3.0 for the 3.5.33 package content.

(cherry picked from commit 9a1391a)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: fdf35a14-fcfa-45ab-9771-00f595f914a5
@jslobodzian
jslobodzian requested a review from a team as a code owner August 3, 2026 02:04
@microsoft-github-policy-service microsoft-github-policy-service Bot added Packaging 3.0-dev PRs Destined for AzureLinux 3.0 labels Aug 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3.0-dev PRs Destined for AzureLinux 3.0 Packaging

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants