Skip to content

[4.17] DFBUGS-4878: fixing CVEs filed by PSRIT team for ODF 4.17 compat branch#2791

Merged
openshift-merge-bot[bot] merged 2 commits into
red-hat-storage:release-4.17-compatibilityfrom
avazeer:cve_apr26_4_17_compat
May 19, 2026
Merged

[4.17] DFBUGS-4878: fixing CVEs filed by PSRIT team for ODF 4.17 compat branch#2791
openshift-merge-bot[bot] merged 2 commits into
red-hat-storage:release-4.17-compatibilityfrom
avazeer:cve_apr26_4_17_compat

Conversation

@avazeer
Copy link
Copy Markdown
Contributor

@avazeer avazeer commented May 11, 2026 •
edited by openshift-ci Bot
Loading

Fixing the following CVEs in this PR:
CVE-2025-12816 ,CVE-2025-13465,CVE-2025-15284,CVE-2025-66031,CVE-2025-68157,CVE-2025-68458,CVE-2025-69873,CVE-2026-22029,CVE-2026-26996,CVE-2026-27904,CVE-2026-29063,CVE-2026-4800

Fixing the following CVE bugs in this PR:
DFBUGS-4878,DFBUGS-5388,DFBUGS-5021,DFBUGS-4784,DFBUGS-6632,DFBUGS-6636,DFBUGS-5616,DFBUGS-5245,DFBUGS-6645,DFBUGS-6649,DFBUGS-6028,DFBUGS-6208

@avazeer
Copy link
Copy Markdown
Contributor Author

avazeer commented May 13, 2026

/test odf-console-e2e-aws

@avazeer avazeer changed the title fixing CVEs filed by PSRIT team for ODF 4.17 compat branch [4.17] DFBUGS-4878: fixing CVEs filed by PSRIT team for ODF 4.17 compat branch May 18, 2026
@openshift-ci-robot openshift-ci-robot added jira/severity-important Referenced Jira bug's severity is important for the branch this PR is targeting. jira/valid-reference Indicates that this PR references a valid jira ticket of any type labels May 18, 2026
@openshift-ci-robot
Copy link
Copy Markdown

openshift-ci-robot commented May 18, 2026 •
edited by openshift-ci Bot
Loading

@avazeer: This pull request references [Jira Issue DFBUGS-4878](https://redhat.atlassian.net/browse/DFBUGS-4878), which is invalid:

  • expected the vulnerability to target the "odf-4.17.26" version, but no target version was set

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

The bug has been updated to refer to the pull request using the external bug tracker.

Details

In response to this:

Fixing the following CVEs in this PR:
CVE-2025-12816 ,CVE-2025-13465,CVE-2025-15284,CVE-2025-66031,CVE-2025-68157,CVE-2025-68458,CVE-2025-69873,CVE-2026-22029,CVE-2026-26996,CVE-2026-27904,CVE-2026-29063,CVE-2026-4800

Fixing the following CVE bugs in this PR:
DFBUGS-4878,DFBUGS-5388,DFBUGS-5021,DFBUGS-4784,DFBUGS-6632,DFBUGS-6636,DFBUGS-5616,DFBUGS-5245,DFBUGS-6645,DFBUGS-6649,DFBUGS-6028,DFBUGS-6208

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot openshift-ci-robot added the jira/invalid-bug Indicates that the referenced jira bug is invalid for the branch this PR is targeting label May 18, 2026
@avazeer
Copy link
Copy Markdown
Contributor Author

avazeer commented May 19, 2026

/jira refresh

@openshift-ci-robot openshift-ci-robot added the jira/valid-bug Indicates that the referenced jira bug is valid for the branch this PR is targeting label May 19, 2026
@openshift-ci-robot
Copy link
Copy Markdown

openshift-ci-robot commented May 19, 2026 •
edited by openshift-ci Bot
Loading

@avazeer: This pull request references [Jira Issue DFBUGS-4878](https://redhat.atlassian.net/browse/DFBUGS-4878), which is valid.

3 validation(s) were run on this bug
  • bug is open, matching expected state (open)
  • bug target version (odf-4.17.26) matches configured target version for branch (odf-4.17.26)
  • bug is in the state POST, which is one of the valid states (NEW, ASSIGNED, POST)
Details

In response to this:

/jira refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot openshift-ci-robot removed the jira/invalid-bug Indicates that the referenced jira bug is invalid for the branch this PR is targeting label May 19, 2026
@bipuladh
Copy link
Copy Markdown
Contributor

bipuladh commented May 19, 2026

/test odf-console-e2e-aws

@bipuladh
Copy link
Copy Markdown
Contributor

bipuladh commented May 19, 2026

/approve
/lgtm

@openshift-ci openshift-ci Bot added the lgtm label May 19, 2026
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented May 19, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: avazeer, bipuladh

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@bipuladh
Copy link
Copy Markdown
Contributor

bipuladh commented May 19, 2026

/override ci/prow/odf-console-e2e-aws

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented May 19, 2026

@bipuladh: Overrode contexts on behalf of bipuladh: ci/prow/odf-console-e2e-aws

Details

In response to this:

/override ci/prow/odf-console-e2e-aws

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-merge-bot openshift-merge-bot Bot merged commit d21e1d9 into red-hat-storage:release-4.17-compatibility May 19, 2026
6 checks passed
@openshift-ci-robot
Copy link
Copy Markdown

openshift-ci-robot commented May 19, 2026 •
edited by openshift-ci Bot
Loading

@avazeer: An error was encountered invalid pull identifier with 2 parts: "digitalbazaar/forge" for bug DFBUGS-4878 on the Jira server at https://redhat.atlassian.net. No known errors were detected, please see the full error message for details.

Full error message.

Please contact an administrator to resolve this issue, then request a bug refresh with /jira refresh.[Jira Issue DFBUGS-4878](https://redhat.atlassian.net/browse/DFBUGS-4878): All pull requests linked via external trackers have merged:

[Jira Issue DFBUGS-4878](https://redhat.atlassian.net/browse/DFBUGS-4878) has been moved to the MODIFIED state.

Details

In response to this:

Fixing the following CVEs in this PR:
CVE-2025-12816 ,CVE-2025-13465,CVE-2025-15284,CVE-2025-66031,CVE-2025-68157,CVE-2025-68458,CVE-2025-69873,CVE-2026-22029,CVE-2026-26996,CVE-2026-27904,CVE-2026-29063,CVE-2026-4800

Fixing the following CVE bugs in this PR:
DFBUGS-4878,DFBUGS-5388,DFBUGS-5021,DFBUGS-4784,DFBUGS-6632,DFBUGS-6636,DFBUGS-5616,DFBUGS-5245,DFBUGS-6645,DFBUGS-6649,DFBUGS-6028,DFBUGS-6208

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@bipuladh bipuladh

Labels

approved jira/severity-important Referenced Jira bug's severity is important for the branch this PR is targeting. jira/valid-bug Indicates that the referenced jira bug is valid for the branch this PR is targeting jira/valid-reference Indicates that this PR references a valid jira ticket of any type lgtm

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@avazeer @openshift-ci-robot @bipuladh