Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BUILD-1339: Fix CVE-2025-22869 #316

Open
wants to merge 3 commits into
base: builds-1.2
Choose a base branch
from

Conversation

psrvere
Copy link

@psrvere psrvere commented Mar 5, 2025

Changes

  • Update golang.org/x/crypto to 0.35 to mitigate CVE-2025-22869
  • Update Go version to 1.23 from 1.22. This is the minimum version required for x/ctypto:0.35
  • Fixes: BUILD-1339

@psrvere psrvere requested review from sayan-biswas and avinal March 5, 2025 07:09
@psrvere psrvere self-assigned this Mar 5, 2025
@psrvere psrvere changed the title Build-1339: Fix CVE-2025-22869 BUILD-1339: Fix CVE-2025-22869 Mar 5, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant