From a5a834eb35f31f7821a6af32676937f07ca30a83 Mon Sep 17 00:00:00 2001 From: mitchell Date: Mon, 8 Dec 2025 14:02:50 -0500 Subject: [PATCH 1/2] Avoid concurrent map read/write. --- pkg/runtime/depot.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pkg/runtime/depot.go b/pkg/runtime/depot.go index 97284343ec..c67b46eed4 100644 --- a/pkg/runtime/depot.go +++ b/pkg/runtime/depot.go @@ -160,6 +160,9 @@ func (d *depot) SetCacheSize(mb int) { // Artifact metadata comes from the depot's cache, and may not exist for installed artifacts that // predate the cache. func (d *depot) Exists(id strfmt.UUID) (bool, *artifactInfo) { + d.mapMutex.Lock() + defer d.mapMutex.Unlock() + if _, ok := d.artifacts[id]; ok { if artifact, exists := d.config.Cache[id]; exists { return true, artifact From 9f302615d9027064a5c39b21fa2c73761a383f65 Mon Sep 17 00:00:00 2001 From: mitchell Date: Mon, 8 Dec 2025 14:10:25 -0500 Subject: [PATCH 2/2] Updated changelog. --- changelog.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/changelog.md b/changelog.md index f1c2659862..fde7948ab8 100644 --- a/changelog.md +++ b/changelog.md @@ -10,7 +10,11 @@ and this project adheres to ### Security -Addressed all known, fixable CVEs. +- Addressed all known, fixable CVEs. + +### Fixed + +- Fixed occasional panic due to a concurrent map read/write during runtime setup. ## 0.48.0