Skip to content

chore: bump bytes crate from 1.9.0 to 1.11.1 to address CVE-2026-25541#3669

Merged
bwoebi merged 1 commit intoDataDog:masterfrom
TomBrouws:tomb/fix-CVE-2026-25541
Mar 17, 2026
Merged

chore: bump bytes crate from 1.9.0 to 1.11.1 to address CVE-2026-25541#3669
bwoebi merged 1 commit intoDataDog:masterfrom
TomBrouws:tomb/fix-CVE-2026-25541

Conversation

@TomBrouws
Copy link
Copy Markdown
Contributor

Description

Addresses a CVE in the bytes crate.
See https://nvd.nist.gov/vuln/detail/CVE-2026-25541

Reviewer checklist

  • Test coverage seems ok.
  • Appropriate labels assigned.

@TomBrouws TomBrouws requested review from a team as code owners February 23, 2026 19:49
Copy link
Copy Markdown
Collaborator

@bwoebi bwoebi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, including this in the next release :-)

@bwoebi bwoebi merged commit e123921 into DataDog:master Mar 17, 2026
2042 of 2063 checks passed
bwoebi added a commit that referenced this pull request Mar 20, 2026
…dd-update

* 'master' of github.com:DataDog/dd-trace-php:
  feat(sidecar): add thread mode as fallback connection for restricted environments (#3573)
  Migrate deprecated GitLab runner tags (#3715)
  Adds process tags to remote config payload (#3658)
  perf(config): cache sys getenv (#3670)
  Fixes the tag name for process tags (#3709)
  Fix debugger ephemerals handling (#3685)
  Fix #3651: Prevent crash during shutdown in Frankenphp (#3662)
  Add dynamic instrumentation and exception replay to startup logging (#3667)
  chore: bump bytes crate from 1.9.0 to 1.11.1 to address CVE-2026-25541 (#3669)
  Merge pull request #3701 from DataDog/brian.marks/add-ksr-tag
  ci: fix Windows job flakiness caused by dirty workspace (#3694)
  Fixup CI owner association (#3704)
  Add Rust rewrite of the AppSec helper alongside the C++ implementation
  Remove debug instruction
  Fix script order
  debug
  Fix exploration logic
  chore(ci): add final_status property on junit XML [APMSP-2610]
  Fix DD_TRACE_SYMFONY_HTTP_ROUTE=false
  Optimize Symfony http.route caching with path map approach
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants