Update Golang to 1.24.4 to mitigate CVE-2025-22874 #261
Conversation
pull-request-size
bot
added
the
size/XS
sayan-biswas
force-pushed
the
update-golang
branch
from
4d7137e to
9b8c459
Compare
pull-request-size
bot
added
size/S
|
/ok-to-test |
|
@sayan-biswas: Cannot trigger testing until a trusted user reviews the PR and leaves an In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
/approve |
Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon. Ref: [CVE-2025-22874](https://pkg.go.dev/vuln/GO-2025-3749) Signed-off-by: Sayan Biswas <[email protected]>
sayan-biswas
force-pushed
the
update-golang
branch
from
9b8c459 to
fd8a937
Compare
|
/ok-to-test |
openshift-ci
bot
added
the
ok-to-test
|
/approve |
1 similar comment
|
/approve |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: avinal, ayushsatyam146, psrvere, qu1queee The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
openshift-ci
bot
added
the
approved
Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon. Ref: CVE-2025-22874
Changes
Submitter Checklist
See the contributor guide
for details on coding conventions, github and prow interactions, and the code review process.
Release Notes