Skip to content

Bump Carvel Dependencies and Golang 1.25.x#584

Closed
CodesbyUnnati wants to merge 1 commit intocarvel-dev:developfrom
CodesbyUnnati:bump-golang-v1.25.x
Closed

Bump Carvel Dependencies and Golang 1.25.x#584
CodesbyUnnati wants to merge 1 commit intocarvel-dev:developfrom
CodesbyUnnati:bump-golang-v1.25.x

Conversation

@CodesbyUnnati
Copy link
Copy Markdown
Member

Bumping golang to 1.25.7 to resolve the below CVEs:

┌─────────┬────────────────┬──────────┬────────┬───────────────────┬──────────────────────────────┬─────────────────────────────────────────────────────────┐
│ Library │ Vulnerability  │ Severity │ Status │ Installed Version │        Fixed Version         │                          Title                          │
├─────────┼────────────────┼──────────┼────────┼───────────────────┼──────────────────────────────┼─────────────────────────────────────────────────────────┤
│ stdlib  │ CVE-2025-68121 │ CRITICAL │ fixed  │ v1.25.6           │ 1.24.13, 1.25.7, 1.26.0-rc.3 │ crypto/tls: Unexpected session resumption in crypto/tls │
│         │                │          │        │                   │                              │ https://avd.aquasec.com/nvd/cve-2025-68121              │
└─────────┴────────────────┴──────────┴────────┴───────────────────┴──────────────────────────────┴─────────────────────────────────────────────────────────┘

Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

3 participants