Skip to content

OCPBUGS-71249, OCPBUGS-73603: Fix CVE-2025-66471, CVE-2026-21441#981

Draft
sairameshv wants to merge 1 commit intoopenshift:nextfrom
sairameshv:CVE_fix
Draft

OCPBUGS-71249, OCPBUGS-73603: Fix CVE-2025-66471, CVE-2026-21441#981
sairameshv wants to merge 1 commit intoopenshift:nextfrom
sairameshv:CVE_fix

Conversation

@sairameshv
Copy link
Member

Remove the urllib3 as it is not used by the DAS components

@openshift-ci
Copy link

openshift-ci bot commented Jan 15, 2026

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@openshift-ci openshift-ci bot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jan 15, 2026
@openshift-ci-robot openshift-ci-robot added jira/severity-important Referenced Jira bug's severity is important for the branch this PR is targeting. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. jira/valid-bug Indicates that a referenced Jira bug is valid for the branch this PR is targeting. labels Jan 15, 2026
@openshift-ci-robot
Copy link

@sairameshv: This pull request references Jira Issue OCPBUGS-71249, which is valid.

No validations were run on this bug

Requesting review from QA contact:
/cc @lyman9966

This pull request references Jira Issue OCPBUGS-73603, which is valid.

No validations were run on this bug

Requesting review from QA contact:
/cc @lyman9966

Details

In response to this:

Remove the urllib3 as it is not used by the DAS components

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci openshift-ci bot requested a review from lyman9966 January 15, 2026 08:03
@openshift-ci
Copy link

openshift-ci bot commented Jan 15, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: sairameshv

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added approved Indicates a PR has been approved by an approver from all required OWNERS files. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Jan 15, 2026
@sairameshv
Copy link
Member Author

/test ?

@openshift-ci
Copy link

openshift-ci bot commented Jan 15, 2026

@sairameshv: The following commands are available to trigger required jobs:

/test ci-index-das-operator-bundle
/test e2e-bundle-4-19-runc
/test e2e-bundle-4-20-runc
/test e2e-bundle-runc
/test images
/test unit

The following commands are available to trigger optional jobs:

/test e2e-bundle
/test e2e-bundle-4-19

Use /test all to run the following jobs that were automatically triggered:

pull-ci-openshift-instaslice-operator-next-ci-index-das-operator-bundle
pull-ci-openshift-instaslice-operator-next-e2e-bundle-4-19-runc
pull-ci-openshift-instaslice-operator-next-e2e-bundle-4-20-runc
pull-ci-openshift-instaslice-operator-next-e2e-bundle-runc
pull-ci-openshift-instaslice-operator-next-images
pull-ci-openshift-instaslice-operator-next-unit
Details

In response to this:

/test ?

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@sairameshv
Copy link
Member Author

/test e2e-bundle-4-20-runc
/test images

@sairameshv
Copy link
Member Author

/test images

@sairameshv
Copy link
Member Author

/test images

1 similar comment
@sairameshv
Copy link
Member Author

/test images

@sairameshv
Copy link
Member Author

/test e2e-bundle-4-20-runc

- Fix CVE-2025-66471, CVE-2026-21441 by replacing the NVIDIA cuda base
  image with that of the Red Hat's

Signed-off-by: Sai Ramesh Vanka <svanka@redhat.com>
@openshift-ci openshift-ci bot added size/S Denotes a PR that changes 10-29 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Jan 15, 2026
@sairameshv
Copy link
Member Author

/test e2e-bundle-4-20-runc
/test images

@openshift-ci
Copy link

openshift-ci bot commented Feb 6, 2026

@sairameshv: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-bundle-4-20-runc 7c7942b link true /test e2e-bundle-4-20-runc
ci/prow/4.19-periodics-ci-index-das-operator-bundle 7c7942b link true /test 4.19-periodics-ci-index-das-operator-bundle
ci/prow/4.19-periodics-images 7c7942b link true /test 4.19-periodics-images

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. jira/severity-important Referenced Jira bug's severity is important for the branch this PR is targeting. jira/valid-bug Indicates that a referenced Jira bug is valid for the branch this PR is targeting. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. size/S Denotes a PR that changes 10-29 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants