Skip to content

Commit a68e093

Browse files
prkallenavinms711
authored andcommitted
Update Go version to 1.25.5 to address CVE-2025-61729 (cloudfoundry#3682) (cloudfoundry#3689)
CVE-2025-61729 (GO-2025-4155) is a high-severity vulnerability affecting Go versions < 1.24.11 and 1.25.0-1.25.4. The vulnerability causes excessive resource consumption in printing error strings for host certificate validation. This commit updates the Go version from 1.25.4 to 1.25.5, which includes the fix for this CVE. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-61729 Co-authored-by: Naveen Sreeramachandra <naveen.sreeramachandra@broadcom.com>
1 parent bc6d387 commit a68e093

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

go.mod

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
module code.cloudfoundry.org/cli/v8
22

3-
go 1.25.4
3+
go 1.25.5
44

55
require (
66
code.cloudfoundry.org/bytefmt v0.61.0

0 commit comments

Comments
 (0)