Skip to content

(CVE-2026-40938) PR to fix update pipelines to v1.6.2#1649

Merged
tekton-robot merged 1 commit into
tektoncd:release-v0.26.xfrom
anithapriyanatarajan:CVE-2026-40938
May 5, 2026
Merged

(CVE-2026-40938) PR to fix update pipelines to v1.6.2#1649
tekton-robot merged 1 commit into
tektoncd:release-v0.26.xfrom
anithapriyanatarajan:CVE-2026-40938

Conversation

@anithapriyanatarajan

@anithapriyanatarajan anithapriyanatarajan commented Apr 29, 2026

Copy link
Copy Markdown
Contributor

Changes

PR to fix CVE-2026-40938 and CVE-2026-40161.

Submitter Checklist

As the author of this PR, please check off the items in this checklist:

  • Has Docs included if any changes are user facing
  • Has Tests included if any functionality added or changed
  • Follows the commit message standard
  • Meets the Tekton contributor standards (including
    functionality, content, code)
  • Release notes block below has been updated with any user facing changes (API changes, bug fixes, changes requiring upgrade notices or deprecation warnings)
  • Release notes contains the string "action required" if the change requires additional action from users switching to the new release

Release Notes

NONE

Signed-off-by: Anitha Natarajan <anataraj@redhat.com>
@tekton-robot tekton-robot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Apr 29, 2026
@anithapriyanatarajan anithapriyanatarajan added the kind/security Categorizes issue or PR as related to a security issue label Apr 30, 2026
@anithapriyanatarajan

anithapriyanatarajan commented Apr 30, 2026

Copy link
Copy Markdown
Contributor Author

@jkhelil could you take a look at this

@ngelman1

ngelman1 commented May 3, 2026

Copy link
Copy Markdown
Contributor

this also fixes CVE-2026-40161, @anithapriyanatarajan can we update the description please?

@enarha

enarha commented May 3, 2026

Copy link
Copy Markdown
Contributor

/release-note-none

@enarha

enarha commented May 3, 2026

Copy link
Copy Markdown
Contributor

/approve

@enarha

enarha commented May 3, 2026

Copy link
Copy Markdown
Contributor

this also fixes CVE-2026-40161, @anithapriyanatarajan can we update the description please?

Added.

@jkhelil

jkhelil commented May 4, 2026

Copy link
Copy Markdown
Member

/approve

@tekton-robot

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: enarha, jkhelil

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tekton-robot tekton-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label May 4, 2026
@jkhelil

jkhelil commented May 5, 2026

Copy link
Copy Markdown
Member

/lgtm

@tekton-robot tekton-robot added the lgtm Indicates that a PR is ready to be merged. label May 5, 2026
@tekton-robot tekton-robot merged commit a51457d into tektoncd:release-v0.26.x May 5, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. kind/security Categorizes issue or PR as related to a security issue lgtm Indicates that a PR is ready to be merged. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants