Skip to content

[release-4.16] OCPBUGS-68051: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3#644

Merged
jzding merged 1 commit intoredhat-cne:release-4.16from
rissh:cve-2025-65637-release4.16
Feb 24, 2026
Merged

[release-4.16] OCPBUGS-68051: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3#644
jzding merged 1 commit intoredhat-cne:release-4.16from
rissh:cve-2025-65637-release4.16

Conversation

@rissh
Copy link
Contributor

@rissh rissh commented Feb 22, 2026

Bumps github.com/sirupsen/logrus from v1.9.0 to v1.9.3 to address GHSA-4f99-4q7p-p3gh.

@openshift-ci-robot
Copy link

@rissh: This pull request references Jira Issue OCPBUGS-68051, which is invalid:

  • expected dependent Jira Issue OCPBUGS-68148 to be in one of the following states: VERIFIED, RELEASE PENDING, CLOSED (ERRATA), CLOSED (CURRENT RELEASE), CLOSED (DONE), CLOSED (DONE-ERRATA), but it is ON_QA instead

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

The bug has been updated to refer to the pull request using the external bug tracker.

Details

In response to this:

Bumps github.com/sirupsen/logrus from v1.9.0 to v1.9.3 to address GHSA-4f99-4q7p-p3gh.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@rissh
Copy link
Contributor Author

rissh commented Feb 23, 2026

/retest

1 similar comment
@rissh
Copy link
Contributor Author

rissh commented Feb 23, 2026

/retest

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Feb 24, 2026

@rissh: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/security 2cd9879 link false /test security

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@jzding
Copy link
Member

jzding commented Feb 24, 2026

/overwrite ci/prow/security

Copy link
Member

@jzding jzding left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Feb 24, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: jzding, rissh

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@jzding jzding merged commit 5d9aaf2 into redhat-cne:release-4.16 Feb 24, 2026
4 of 13 checks passed
@openshift-ci-robot
Copy link

@rissh: An error was encountered invalid pull identifier with 2 parts: "mjuanxd/logrus-dos-poc" for bug OCPBUGS-68051 on the Jira server at https://issues.redhat.com/. No known errors were detected, please see the full error message for details.

Full error message.

Please contact an administrator to resolve this issue, then request a bug refresh with /jira refresh.Jira Issue OCPBUGS-68051: All pull requests linked via external trackers have merged:

Jira Issue OCPBUGS-68051 has been moved to the MODIFIED state.

Details

In response to this:

Bumps github.com/sirupsen/logrus from v1.9.0 to v1.9.3 to address GHSA-4f99-4q7p-p3gh.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants