Repository navigation
fix(security): refresh Python and native runtime trust - #3321
Open
rtemperini wants to merge 4 commits into
Open
rtemperini wants to merge 4 commits into
rtemperini wants to merge 4 commits into
Conversation
github-actions
Bot
added
bug
rtemperini
marked this pull request as ready for review
October 22, 2026 13:01
github-actions
Bot
added
bug
github-actions
Bot
added
bug
rtemperini
commented
Oct 26, 2026
| ENV LANG=C.UTF-8 \ | ||
| LC_ALL=C.UTF-8 \ | ||
| PYTHONUNBUFFERED=1 \ | ||
| GRPC_DEFAULT_SSL_ROOTS_FILE_PATH=/etc/ssl/certs/ca-certificates.crt \ |
Author
There was a problem hiding this comment.
Added ca-certificates (>= 20250419~deb12u2) using APT’s native dependency constraint on Bookworm, allowing newer security updates. Verified the fixed package version against Debian and rebuilt the image successfully.
rtemperini
commented
Nov 2, 2026
| ARG CLAUDE_CODE_VERSION=2.1.285 | ||
| ARG CLAUDE_CODE_AMD64_SHA256=7b4414af1bc06eb6d91730759bd01c4c02a4976d0b8526237e9a6d8c33eaf102 | ||
| ARG CLAUDE_CODE_ARM64_SHA256=31efc4136bc678575f4c6730e248d34f89dbfea0468be1c5d012af199cd62ee8 | ||
| ARG CLAUDE_CODE_VERSION=2.1.308 |
Author
There was a problem hiding this comment.
Updated PinnedClaudeVersion in config.go to 2.1.308 to match the image, keeping strict version validation enabled. Could you take another look when you have a chance? Thanks!
rtemperini
force-pushed
the
codex/fix-emudhra-trust-main
branch
2 times, most recently
from
November 9, 2026 08:29
2a965ee to
7bae024
Compare
Signed-off-by: rtemperini <29879569+rtemperini@users.noreply.github.com>
Signed-off-by: rtemperini <29879569+rtemperini@users.noreply.github.com>
Signed-off-by: rtemperini <29879569+rtemperini@users.noreply.github.com>
Signed-off-by: rtemperini <29879569+rtemperini@users.noreply.github.com>
rtemperini
force-pushed
the
codex/fix-emudhra-trust-main
branch
from
November 11, 2026 08:16
7bae024 to
db29041
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Extend the Go-only mitigation in #3304 to the independent trust stores shipped in the runtime images.
ca-certificates >= 20250419~deb12u2through APT's native dependency constraint on Bookworm. Keep the UI build on Node 24 with a 24.22.1 minimum, allowing later patches.Remaining release blocker: the pinned Codex 0.161.0 embeds rustls-webpki 0.103.15 and webpki-roots 1.0.5. That binary still needs an upstream update before this PR can claim to remediate every runtime. This PR keeps the existing released Codex pin.
Local validation: rebuilt ARM64 Python ADK image passes all five trust checks. Lockfile validation, Python lint, and whitespace checks pass. The corresponding release-branch fix also reproduces the failure in published 0.10.4 and validates ARM64 slim/full and AMD64 slim images, plus 36 offline chain rejections. Native harness images and the complete application suite were not built/tested locally; vulnerability scans were not run locally.
A new release and rollout are required after merging. gRPC and httplib2 still contain inactive fallback bundles; the validation covers effective trust.
References: incident and fixed versions, uv 0.13.5, certifi, botocore, Codex stable dependencies.
Release-branch counterpart: #3320.