microsoft · Kavya Sree Kaitepalli (KavyaSree2610) · Aug 18, 2026 · Aug 19, 2026 · Aug 19, 2026 · Aug 19, 2026
@@ -2456,6 +2456,7 @@
                 "rubygem-yajl-ruby",
                 "rubygem-zip-zip",
                 "runc",
+                "rust-bootstrap",
                 "sdbus-cpp",
                 "sgx-backwards-compatibility",
                 "shim",

@@ -68,7 +68,7 @@ ExcludeArch: i686
 Summary:          389 Directory Server (%{variant})
 Name:             389-ds-base
 Version:          3.1.1
-Release:          11%{?dist}
+Release:          12%{?dist}
 License:          GPL-3.0-or-later AND (0BSD OR Apache-2.0 OR MIT) AND (Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT) AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR MIT OR Zlib) AND (Apache-2.0 OR MIT) AND (CC-BY-4.0 AND MIT) AND (MIT OR Apache-2.0) AND Unicode-DFS-2016 AND (MIT OR CC0-1.0) AND (MIT OR Unlicense) AND 0BSD AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MIT AND ISC AND MPL-2.0 AND PSF-2.0
 URL:              https://www.port389.org
 Vendor:           Microsoft Corporation
@@ -733,13 +733,16 @@ exit 0
 %endif
 
 %changelog
+* Wed Aug 19 2026 Kavya Sree Kaitepalli <kkaitepalli@microsoft.com> - 3.1.1-12
+- Bump release to rebuild with rust
+
 * Wed Feb 11 2026 BinduSri Adabala <v-badabala@microsoft.com> - 3.1.1-11
 - Bump release to rebuild with rust
 
 * Mon Feb 02 2026 Archana Shettigar <v-shettigara@microsoft.com> - 3.1.1-10
 - Bump release to rebuild with rust
 
-* Tue Jan 13 2025 Kavya Sree Kaitepalli <kkaitepalli@microsoft.com> - 3.1.1-9
+* Tue Jan 13 2026 Kavya Sree Kaitepalli <kkaitepalli@microsoft.com> - 3.1.1-9
 - Bump release to rebuild with rust
 - Add patch add explicit lifetime for ValueArrayRef iterator
 

@@ -5,7 +5,7 @@
 
 Name:           kata-containers-preview
 Version:        3.27.0~preview2
-Release:        1%{?dist}
+Release:        2%{?dist}
 
 Summary:        Kata Containers preview package developed for Pod Sandboxing on AKS
 License:        ASL 2.0
@@ -14,6 +14,9 @@ Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
 Source0:        https://github.com/microsoft/kata-containers/archive/refs/tags/%{upstream_ver}.tar.gz#/kata-containers-%{upstream_ver}.tar.gz
 Source1:        kata-containers-%{upstream_ver}-cargo.tar.gz
+Patch0:         rust-fix-unstable-name-collisions.patch
+# This patch can be removed when this package is upgraded to v3.32.0
+Patch1:         rust-1.96-protection-cpuid.patch
 BuildRequires:  azurelinux-release
 BuildRequires:  golang
 BuildRequires:  protobuf-compiler
@@ -115,6 +118,9 @@ popd
 %{tools_pkg}/tools/osbuilder/node-builder/azure-linux/agent-install/usr/lib/systemd/system/kata-agent.service
 
 %changelog
+* Wed Aug 19 2026 Kavya Sree Kaitepalli <kkaitepalli@microsoft.com> - 3.27.0~preview2-2
+- Bump release to rebuild with rust
+
 * Mon Apr 13 2026 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 3.27.0.preview2-1
 - Auto-upgrade to 3.27.0.preview2
 

@@ -0,0 +1,44 @@
+From a63a948b4afcc266a06ef18f2cb46440c48e8bb6 Mon Sep 17 00:00:00 2001
+From: stevenhorsman <steven@uk.ibm.com>
+Date: Mon, 1 Jun 2026 17:04:43 +0100
+Subject: [PATCH] libs: Remove unnecessary unsafe blocks in protection.rs
+
+Rust 1.94 now warns about unnecessary unsafe blocks around
+x86_64::__cpuid() calls. Remove the unsafe blocks as they are
+no longer needed.
+
+This fixes the following clippy warnings:
+- warning: unnecessary `unsafe` block at line 129
+- warning: unnecessary `unsafe` block at line 142
+
+Signed-off-by: stevenhorsman <steven@uk.ibm.com>
+Generated-By: IBM Bob
+
+Upstream-Commit: https://github.com/kata-containers/kata-containers/commit/a63a948b4afcc266a06ef18f2cb46440c48e8bb6
+Upstream-Status: Backport
+---
+ src/libs/kata-sys-util/src/protection.rs | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/src/libs/kata-sys-util/src/protection.rs b/src/libs/kata-sys-util/src/protection.rs
+index 77d2698d0de5..38a38009a501 100644
+--- a/src/libs/kata-sys-util/src/protection.rs
++++ b/src/libs/kata-sys-util/src/protection.rs
+@@ -126,7 +126,7 @@ pub fn arch_guest_protection(
+         // shouldn't hurt to double-check and have better logging if anything
+         // goes wrong.
+
+-        let fn0 = unsafe { x86_64::__cpuid(0) };
++        let fn0 = x86_64::__cpuid(0);
+         // The values in [ ebx, edx, ecx ] spell out "AuthenticAMD" when
+         // interpreted byte-wise as ASCII.  No need to bother here with an
+         // actual conversion to string though.
+@@ -139,7 +139,7 @@ pub fn arch_guest_protection(
+         }
+
+         // AMD64 Architecture Prgrammer's Manual Fn8000_001f docs on pg. 640
+-        let fn8000_001f = unsafe { x86_64::__cpuid(0x8000_001f) };
++        let fn8000_001f = x86_64::__cpuid(0x8000_001f);
+         if fn8000_001f.eax & 0x10 == 0 {
+             return Err(ProtectionError::CheckFailed("SEV not supported".to_owned()));
+         }
@@ -0,0 +1,65 @@
+From 56d44062ea37b36e902fd89e91b09a897876d806 Mon Sep 17 00:00:00 2001
+From: stevenhorsman <steven@uk.ibm.com>
+Date: Fri, 17 Apr 2026 14:42:50 +0100
+Subject: [PATCH] libs: Fix unstable_name_collisions warnings
+
+Remove NixPath's is_empty() to avoid ambiguity with the future
+std::path::Path::is_empty() method and switch to
+path.as_os_str().is_empty as recommended by @burgerdev.
+
+This addresses unstable_name_collisions warnings in Rust 1.93.
+
+Fixes: #12835
+
+Upstream-Reference: https://github.com/kata-containers/kata-containers/commit/56d44062ea37b36e902fd89e91b09a897876d806
+
+Co-authored-by: Markus Rudy <mr@edgeless.systems>
+Signed-off-by: stevenhorsman <steven@uk.ibm.com>
+---
+ src/libs/kata-sys-util/src/mount.rs | 10 +++++-----
+ 1 file changed, 5 insertions(+), 5 deletions(-)
+
+diff --git a/src/libs/kata-sys-util/src/mount.rs b/src/libs/kata-sys-util/src/mount.rs
+index 892e95639b93..ce9f807fcecb 100644
+--- a/src/libs/kata-sys-util/src/mount.rs
++++ b/src/libs/kata-sys-util/src/mount.rs
+@@ -52,7 +52,7 @@ use std::time::Instant;
+
+ use lazy_static::lazy_static;
+ use nix::mount::{mount, MntFlags, MsFlags};
+-use nix::{unistd, NixPath};
++use nix::unistd;
+ use oci_spec::runtime as oci;
+
+ use crate::fs::is_symlink;
+@@ -225,7 +225,7 @@ pub fn create_mount_destination<S: AsRef<Path>, D: AsRef<Path>, R: AsRef<Path>>(
+ /// Caller needs to ensure safety of the `dst` to avoid possible file path based attacks.
+ pub fn bind_remount<P: AsRef<Path>>(dst: P, readonly: bool) -> Result<()> {
+     let dst = dst.as_ref();
+-    if dst.is_empty() {
++    if dst.as_os_str().is_empty() {
+         return Err(Error::NullMountPointPath);
+     }
+     let dst = dst
+@@ -262,10 +262,10 @@ pub fn bind_mount_unchecked<S: AsRef<Path>, D: AsRef<Path>>(
+
+     let src = src.as_ref();
+     let dst = dst.as_ref();
+-    if src.is_empty() {
++    if src.as_os_str().is_empty() {
+         return Err(Error::NullMountPointPath);
+     }
+-    if dst.is_empty() {
++    if dst.as_os_str().is_empty() {
+         return Err(Error::NullMountPointPath);
+     }
+     let abs_src = src
+@@ -760,7 +760,7 @@ pub fn umount_timeout<P: AsRef<Path>>(path: P, timeout: u64) -> Result<()> {
+ /// # Safety
+ /// Caller needs to ensure safety of the `path` to avoid possible file path based attacks.
+ pub fn umount_all<P: AsRef<Path>>(mountpoint: P, lazy_umount: bool) -> Result<()> {
+-    if mountpoint.as_ref().is_empty() || !mountpoint.as_ref().exists() {
++    if mountpoint.as_ref().as_os_str().is_empty() || !mountpoint.as_ref().exists() {
+         return Ok(());
+     }
+
@@ -20,7 +20,7 @@
 
 Name:           ripgrep
 Version:        13.0.0
-Release:        13%{?dist}
+Release:        14%{?dist}
 Summary:        A search tool that combines ag with grep
 License:        MIT AND Unlicense
 Vendor:         Microsoft Corporation
@@ -104,6 +104,9 @@ install -Dm 644 complete/_rg %{buildroot}%{_datadir}/zsh/site-functions/_rg
 %{_datadir}/zsh
 
 %changelog
+* Wed Aug 19 2026 Kavya Sree Kaitepalli <kkaitepalli@microsoft.com> - 13.0.0-14
+- Bump release to rebuild with rust
+
 * Wed Feb 11 2026 BinduSri Adabala <v-badabala@microsoft.com> - 13.0.0-13
 - Bump release to rebuild with rust
 

@@ -2,7 +2,7 @@
 Summary:        Tool for generating C bindings to Rust code
 Name:           rust-cbindgen
 Version:        0.24.3
-Release:        11%{?dist}
+Release:        12%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@@ -96,6 +96,9 @@ RUSTFLAGS=%{rustflags} cargo test --release
 %endif
 
 %changelog
+* Wed Aug 19 2026 Kavya Sree Kaitepalli <kkaitepalli@microsoft.com> - 0.24.3-12
+- Bump release to rebuild with rust
+
 * Fri Jun 05 2026 BinduSri Adabala <v-badabala@microsoft.com> - 0.24.3-11
 - Bump release to rebuild with rust
 

@@ -3,7 +3,7 @@
 Summary: Tardev Snapshotter for containerd
 Name: tardev-snapshotter
 Version: 3.2.0.tardev1
-Release: 9%{?dist}
+Release: 10%{?dist}
 License: ASL 2.0
 Group: Tools/Container
 Vendor: Microsoft Corporation
@@ -67,6 +67,9 @@ fi
 %config(noreplace) %{_unitdir}/%{name}.service
 
 %changelog
+* Wed Aug 19 2026 Kavya Sree Kaitepalli <kkaitepalli@microsoft.com> - 3.2.0.tardev1-10
+- Bump release to rebuild with rust
+
 * Fri Jun 05 2026 BinduSri Adabala <v-badabala@microsoft.com> - 3.2.0.tardev1-9
 - Bump release to rebuild with rust