Skip to content

Commit 6c83815

Browse files
prkallenavinms711
andauthored
Update Go version to 1.25.5 to address CVE-2025-61729 (#3682) (#3689)
CVE-2025-61729 (GO-2025-4155) is a high-severity vulnerability affecting Go versions < 1.24.11 and 1.25.0-1.25.4. The vulnerability causes excessive resource consumption in printing error strings for host certificate validation. This commit updates the Go version from 1.25.4 to 1.25.5, which includes the fix for this CVE. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-61729 Co-authored-by: Naveen Sreeramachandra <naveen.sreeramachandra@broadcom.com>
1 parent 6059e81 commit 6c83815

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

go.mod

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
module code.cloudfoundry.org/cli/v8
22

3-
go 1.25.4
3+
go 1.25.5
44

55
require (
66
code.cloudfoundry.org/bytefmt v0.61.0

0 commit comments

Comments
 (0)