Skip to content

Update Rocky Linux repositories and host images for GhostLock (CVE-2026-43499)#2427

Merged
priteau merged 2 commits into
stackhpc/2025.1from
bump-rocky-repo-versions
Jul 15, 2026
Merged

Update Rocky Linux repositories and host images for GhostLock (CVE-2026-43499)#2427
priteau merged 2 commits into
stackhpc/2025.1from
bump-rocky-repo-versions

Conversation

@priteau

@priteau priteau commented Jul 15, 2026

Copy link
Copy Markdown
Member

No description provided.

@priteau priteau self-assigned this Jul 15, 2026
@priteau priteau requested a review from a team as a code owner July 15, 2026 08:42
@github-actions github-actions Bot added the waiting-review PR is waiting for a review label Jul 15, 2026

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the overcloud host image versions for Rocky 9 and Rocky 10, as well as various Rocky 10.2, Rocky 9.8, and Rocky 9 SIG security common repository versions to newer timestamps. I have no feedback to provide.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

priteau added 2 commits July 15, 2026 10:50
Rocky 9.8 repositories have been updated to bring in the latest
kernel version, required to address recent security disclosures:

* CVE-2026-43499 ('GhostLock')

Rocky 9.8 host images have been rebuilt using this kernel version.

DOCA OFED is not yet supported in Rocky Linux 9.8. Consider setting
`stackhpc_pulp_repo_rocky_9_minor_version` to `'7'` if using OFED is
mandatory.
Rocky 10.2 repositories have been updated to bring in the latest
kernel version, required to address recent security disclosures:

* CVE-2026-43499 ('GhostLock')

Rocky 10.2 host images have been rebuilt using this kernel version.

DOCA OFED is not yet supported in Rocky Linux 10.2. Consider setting
`stackhpc_pulp_repo_rocky_10_minor_version` to `'1'` if using OFED is
mandatory.
@priteau priteau force-pushed the bump-rocky-repo-versions branch from b2f7e69 to c660456 Compare July 15, 2026 08:51
@priteau priteau enabled auto-merge July 15, 2026 11:47
@priteau priteau merged commit b5516c1 into stackhpc/2025.1 Jul 15, 2026
35 of 37 checks passed
@priteau priteau deleted the bump-rocky-repo-versions branch July 15, 2026 13:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

waiting-review PR is waiting for a review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants