Commit a4ecccc
Update Go version to 1.25.5 to address CVE-2025-61729 (cloudfoundry#3682)
CVE-2025-61729 (GO-2025-4155) is a high-severity vulnerability affecting
Go versions < 1.24.11 and 1.25.0-1.25.4. The vulnerability causes
excessive resource consumption in printing error strings for host
certificate validation.
This commit updates the Go version from 1.25.4 to 1.25.5, which includes
the fix for this CVE.
Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-617291 parent 75c5776 commit a4ecccc
1 file changed
Lines changed: 1 addition & 1 deletion
0 commit comments