Skip to content

ACM-39380: Update submodule for CVE-2026-42502 (x/net v0.56.0) [release-2.17] - #17

Merged
openshift-merge-bot[bot] merged 1 commit into
stolostron:release-2.17from
amitesh1201:ACM-39380-cve-2026-42502-xnet
Aug 17, 2026
Merged

ACM-39380: Update submodule for CVE-2026-42502 (x/net v0.56.0) [release-2.17]#17
openshift-merge-bot[bot] merged 1 commit into
stolostron:release-2.17from
amitesh1201:ACM-39380-cve-2026-42502-xnet

Conversation

@amitesh1201

@amitesh1201 amitesh1201 commented Aug 10, 2026

Copy link
Copy Markdown

Summary

Updates rhobs-obo-prometheus-operator submodule to include the golang.org/x/net v0.56.0 security fix.

Depends on: rhobs/obo-prometheus-operator#99 (merged)

Jira

ACM-39380

Submodule change

Before After
SHA 7a259bd14 34b6dbab7
x/net v0.47.0 v0.56.0

CVEs resolved

CVE Sub-package In production binary?
CVE-2026-42502 x/net/html No (test-only)
CVE-2026-39821 x/net/idna Yes
CVE-2026-46600 x/net/dns/dnsmessage Yes

Changes

  • Submodule pointer only; no Containerfile or tekton changes

Test plan

  • Konflux acm-217 build passes
  • Image SBOM shows golang.org/x/net v0.56.0

Made with Cursor

Bumps rhobs-obo-prometheus-operator submodule to pick up
golang.org/x/net v0.56.0 security fix (CVE-2026-42502,
CVE-2026-39821, CVE-2026-46600).

Signed-off-by: Amit Yadav <ayadav@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
@amitesh1201 amitesh1201 changed the title ACM-39380: Update submodule for CVE-2026-42502 (x/net v0.56.0) ACM-39380: Update submodule for CVE-2026-42502 (x/net v0.56.0) [release-2.17] Aug 10, 2026
@guidonguido

Copy link
Copy Markdown
Contributor

/lgtm

@coleenquadros

Copy link
Copy Markdown
Contributor

/lgtm

@openshift-ci

openshift-ci Bot commented Aug 17, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: amitesh1201, coleenquadros, guidonguido

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-merge-bot
openshift-merge-bot Bot merged commit beee7c8 into stolostron:release-2.17 Aug 17, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants