Skip to content

Commit 3da9023

Browse files
LopatinDmitrLopatinDmitr
authored
chore(core): fix CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121 (#1957) - Fix CVE-2025-61726 (HIGH): net/url: Memory exhaustion in query parameter parsing - Fix CVE-2025-61728 (HIGH): archive/zip: Excessive CPU consumption when building archive index - Fix CVE-2025-61730 (MEDIUM): TLS 1.3 handshake vulnerability - Fix CVE-2025-68121 (UNKNOWN): crypto/tls: Config.Clone copies automatically generated session ticket keys - Bump go to 1.24.13 Signed-off-by: Dmitry Lopatin <dmitry.lopatin@flant.com>
1 parent 8afe7ef commit 3da9023

File tree

24 files changed

+332
-331
lines changed

24 files changed

+332
-331
lines changed

‎.github/workflows/dev_module_build-and-registration.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ env:
2525
MODULES_MODULE_TAG: ${{ github.event.inputs.tag }}
2626
SOURCE_REPO: "${{secrets.SOURCE_REPO}}"
2727
SOURCE_REPO_GIT: "${{secrets.SOURCE_REPO_GIT}}"
28-
GO_VERSION: "1.24.6"
28+
GO_VERSION: "1.24.13"
2929
MODULE_EDITION: "EE"
3030

3131
on:

‎.github/workflows/dev_module_build.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ env:
2121
MODULES_MODULE_SOURCE: ${{ vars.DEV_MODULE_SOURCE }}
2222
MODULES_REGISTRY_LOGIN: ${{ vars.DEV_MODULES_REGISTRY_LOGIN }}
2323
MODULES_REGISTRY_PASSWORD: ${{ secrets.DEV_MODULES_REGISTRY_PASSWORD }}
24-
GO_VERSION: "1.24.6"
24+
GO_VERSION: "1.24.13"
2525
GOLANGCI_LINT_VERSION: "1.64.8"
2626
SOURCE_REPO: "${{secrets.SOURCE_REPO}}"
2727
SOURCE_REPO_GIT: "${{secrets.SOURCE_REPO_GIT}}"

‎.github/workflows/dev_validation.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@
1515
name: Validations
1616

1717
env:
18-
GO_VERSION: "1.24.6"
18+
GO_VERSION: "1.24.13"
1919
on:
2020
pull_request:
2121
types: [opened, synchronize, labeled, unlabeled]
@@ -158,9 +158,9 @@ jobs:
158158
matrix:
159159
# Define two groups of components with their respective Go versions
160160
components:
161-
- { component: virtualization-artifact, go-version: "1.24.6" }
162-
- { component: vm-route-forge, go-version: "1.24.6" }
163-
- { component: api, go-version: "1.24.6" }
161+
- { component: virtualization-artifact, go-version: "1.24.13" }
162+
- { component: vm-route-forge, go-version: "1.24.13" }
163+
- { component: api, go-version: "1.24.13" }
164164

165165
steps:
166166
- name: Set skip flag

‎api/client/examples/cancel-evacuation/go.mod‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ module github.com/deckhouse/virtualization/api/client/examples/cancel-evacuation
22

33
replace github.com/deckhouse/virtualization/api => ./../../../../api
44

5-
go 1.24.6
5+
go 1.24.13
66

77
require (
88
github.com/deckhouse/virtualization/api v0.0.0-00010101000000-000000000000
@@ -30,6 +30,8 @@ require (
3030
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
3131
github.com/modern-go/reflect2 v1.0.2 // indirect
3232
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
33+
github.com/onsi/ginkgo/v2 v2.22.0 // indirect
34+
github.com/onsi/gomega v1.36.1 // indirect
3335
github.com/openshift/api v0.0.0-20230503133300-8bbcb7ca7183 // indirect
3436
github.com/openshift/custom-resource-status v1.1.2 // indirect
3537
github.com/pkg/errors v0.9.1 // indirect

‎api/client/examples/cancel-evacuation/go.sum‎

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -140,18 +140,17 @@ github.com/onsi/ginkgo v0.0.0-20170829012221-11459a886d9c/go.mod h1:lLunBs/Ym6LB
140140
github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
141141
github.com/onsi/ginkgo v1.12.1/go.mod h1:zj2OWP4+oCPe1qIXoGWkgMRwljMUYCdkwsT2108oapk=
142142
github.com/onsi/ginkgo v1.14.0/go.mod h1:iSB4RoI2tjJc9BBv4NKIKWKya62Rps+oPG/Lv9klQyY=
143-
github.com/onsi/ginkgo v1.16.4 h1:29JGrr5oVBm5ulCWet69zQkzWipVXIol6ygQUe/EzNc=
144143
github.com/onsi/ginkgo v1.16.4/go.mod h1:dX+/inL/fNMqNlz0e9LfyB9TswhZpCVdJM/Z6Vvnwo0=
145144
github.com/onsi/ginkgo/v2 v2.0.0/go.mod h1:vw5CSIxN1JObi/U8gcbwft7ZxR2dgaR70JSE3/PpL4c=
146-
github.com/onsi/ginkgo/v2 v2.21.0 h1:7rg/4f3rB88pb5obDgNZrNHrQ4e6WpjonchcpuBRnZM=
147-
github.com/onsi/ginkgo/v2 v2.21.0/go.mod h1:7Du3c42kxCUegi0IImZ1wUQzMBVecgIHjR1C+NkhLQo=
145+
github.com/onsi/ginkgo/v2 v2.22.0 h1:Yed107/8DjTr0lKCNt7Dn8yQ6ybuDRQoMGrNFKzMfHg=
146+
github.com/onsi/ginkgo/v2 v2.22.0/go.mod h1:7Du3c42kxCUegi0IImZ1wUQzMBVecgIHjR1C+NkhLQo=
148147
github.com/onsi/gomega v0.0.0-20170829124025-dcabb60a477c/go.mod h1:C1qb7wdrVGGVU+Z6iS04AVkA3Q65CEZX59MT0QO5uiA=
149148
github.com/onsi/gomega v1.7.1/go.mod h1:XdKZgCCFLUoM/7CFJVPcG8C1xQ1AJ0vpAezJrB7JYyY=
150149
github.com/onsi/gomega v1.10.1/go.mod h1:iN09h71vgCQne3DLsj+A5owkum+a2tYe+TOCB1ybHNo=
151150
github.com/onsi/gomega v1.17.0/go.mod h1:HnhC7FXeEQY45zxNK3PPoIUhzk/80Xly9PcubAlGdZY=
152151
github.com/onsi/gomega v1.18.1/go.mod h1:0q+aL8jAiMXy9hbwj2mr5GziHiwhAIQpFmmtT5hitRs=
153-
github.com/onsi/gomega v1.35.1 h1:Cwbd75ZBPxFSuZ6T+rN/WCb/gOc6YgFBXLlZLhC7Ds4=
154-
github.com/onsi/gomega v1.35.1/go.mod h1:PvZbdDc8J6XJEpDK4HCuRBm8a6Fzp9/DmhC9C7yFlog=
152+
github.com/onsi/gomega v1.36.1 h1:bJDPBO7ibjxcbHMgSCoo4Yj18UWbKDlLwX1x9sybDcw=
153+
github.com/onsi/gomega v1.36.1/go.mod h1:PvZbdDc8J6XJEpDK4HCuRBm8a6Fzp9/DmhC9C7yFlog=
155154
github.com/openshift/api v0.0.0-20230503133300-8bbcb7ca7183 h1:t/CahSnpqY46sQR01SoS+Jt0jtjgmhgE6lFmRnO4q70=
156155
github.com/openshift/api v0.0.0-20230503133300-8bbcb7ca7183/go.mod h1:4VWG+W22wrB4HfBL88P40DxLEpSOaiBVxUnfalfJo9k=
157156
github.com/openshift/custom-resource-status v1.1.2 h1:C3DL44LEbvlbItfd8mT5jWrqPfHnSOQoQf/sypqA6A4=

‎api/client/examples/list-resources/go.mod‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
module github.com/deckhouse/virtualization/api/client/examples/list-resources
22

3-
go 1.24.6
3+
go 1.24.13
44

55
require (
66
github.com/deckhouse/virtualization/api v0.0.0-20240322104947-2d492906a8b2
@@ -27,6 +27,8 @@ require (
2727
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
2828
github.com/modern-go/reflect2 v1.0.2 // indirect
2929
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
30+
github.com/onsi/ginkgo/v2 v2.22.0 // indirect
31+
github.com/onsi/gomega v1.36.1 // indirect
3032
github.com/openshift/api v0.0.0-20230503133300-8bbcb7ca7183 // indirect
3133
github.com/openshift/custom-resource-status v1.1.2 // indirect
3234
github.com/pkg/errors v0.9.1 // indirect

‎api/client/examples/list-resources/go.sum‎

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -137,18 +137,17 @@ github.com/onsi/ginkgo v0.0.0-20170829012221-11459a886d9c/go.mod h1:lLunBs/Ym6LB
137137
github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
138138
github.com/onsi/ginkgo v1.12.1/go.mod h1:zj2OWP4+oCPe1qIXoGWkgMRwljMUYCdkwsT2108oapk=
139139
github.com/onsi/ginkgo v1.14.0/go.mod h1:iSB4RoI2tjJc9BBv4NKIKWKya62Rps+oPG/Lv9klQyY=
140-
github.com/onsi/ginkgo v1.16.4 h1:29JGrr5oVBm5ulCWet69zQkzWipVXIol6ygQUe/EzNc=
141140
github.com/onsi/ginkgo v1.16.4/go.mod h1:dX+/inL/fNMqNlz0e9LfyB9TswhZpCVdJM/Z6Vvnwo0=
142141
github.com/onsi/ginkgo/v2 v2.0.0/go.mod h1:vw5CSIxN1JObi/U8gcbwft7ZxR2dgaR70JSE3/PpL4c=
143-
github.com/onsi/ginkgo/v2 v2.21.0 h1:7rg/4f3rB88pb5obDgNZrNHrQ4e6WpjonchcpuBRnZM=
144-
github.com/onsi/ginkgo/v2 v2.21.0/go.mod h1:7Du3c42kxCUegi0IImZ1wUQzMBVecgIHjR1C+NkhLQo=
142+
github.com/onsi/ginkgo/v2 v2.22.0 h1:Yed107/8DjTr0lKCNt7Dn8yQ6ybuDRQoMGrNFKzMfHg=
143+
github.com/onsi/ginkgo/v2 v2.22.0/go.mod h1:7Du3c42kxCUegi0IImZ1wUQzMBVecgIHjR1C+NkhLQo=
145144
github.com/onsi/gomega v0.0.0-20170829124025-dcabb60a477c/go.mod h1:C1qb7wdrVGGVU+Z6iS04AVkA3Q65CEZX59MT0QO5uiA=
146145
github.com/onsi/gomega v1.7.1/go.mod h1:XdKZgCCFLUoM/7CFJVPcG8C1xQ1AJ0vpAezJrB7JYyY=
147146
github.com/onsi/gomega v1.10.1/go.mod h1:iN09h71vgCQne3DLsj+A5owkum+a2tYe+TOCB1ybHNo=
148147
github.com/onsi/gomega v1.17.0/go.mod h1:HnhC7FXeEQY45zxNK3PPoIUhzk/80Xly9PcubAlGdZY=
149148
github.com/onsi/gomega v1.18.1/go.mod h1:0q+aL8jAiMXy9hbwj2mr5GziHiwhAIQpFmmtT5hitRs=
150-
github.com/onsi/gomega v1.35.1 h1:Cwbd75ZBPxFSuZ6T+rN/WCb/gOc6YgFBXLlZLhC7Ds4=
151-
github.com/onsi/gomega v1.35.1/go.mod h1:PvZbdDc8J6XJEpDK4HCuRBm8a6Fzp9/DmhC9C7yFlog=
149+
github.com/onsi/gomega v1.36.1 h1:bJDPBO7ibjxcbHMgSCoo4Yj18UWbKDlLwX1x9sybDcw=
150+
github.com/onsi/gomega v1.36.1/go.mod h1:PvZbdDc8J6XJEpDK4HCuRBm8a6Fzp9/DmhC9C7yFlog=
152151
github.com/openshift/api v0.0.0-20230503133300-8bbcb7ca7183 h1:t/CahSnpqY46sQR01SoS+Jt0jtjgmhgE6lFmRnO4q70=
153152
github.com/openshift/api v0.0.0-20230503133300-8bbcb7ca7183/go.mod h1:4VWG+W22wrB4HfBL88P40DxLEpSOaiBVxUnfalfJo9k=
154153
github.com/openshift/custom-resource-status v1.1.2 h1:C3DL44LEbvlbItfd8mT5jWrqPfHnSOQoQf/sypqA6A4=

‎api/go.mod‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
module github.com/deckhouse/virtualization/api
22

3-
go 1.24.6
3+
go 1.24.13
44

55
tool (
66
k8s.io/code-generator

0 commit comments

Comments
 (0)