From 49805bea3dee24b9ac4052d2d00b41e562a6e94a Mon Sep 17 00:00:00 2001 From: sduvvuri1603 Date: Fri, 15 May 2026 11:21:58 -0400 Subject: [PATCH] fix(security): bump Konflux Go builder images for CVE-2025-61726 Update the Konflux argoexec and workflow-controller builder images to Go 1.25 digest-pinned toolset for the CVE-2025-61726 remediation path. Co-authored-by: Cursor --- argo-argoexec/Dockerfile.konflux | 2 +- argo-workflowcontroller/Dockerfile.konflux | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/argo-argoexec/Dockerfile.konflux b/argo-argoexec/Dockerfile.konflux index bf06439c40d5..baf98ced2aca 100644 --- a/argo-argoexec/Dockerfile.konflux +++ b/argo-argoexec/Dockerfile.konflux @@ -5,7 +5,7 @@ ARG GIT_COMMIT=unknown ARG GIT_TAG=unknown ARG GIT_TREE_STATE=unknown -FROM registry.access.redhat.com/ubi9/go-toolset:1.24@sha256:6234f572204d672a0ee0686d748fbb9b7b05679368bf0d7a4446e13970e58060 as builder +FROM registry.access.redhat.com/ubi9/go-toolset:1.25@sha256:59ec4752cf86f0d0dd240b9e29c64d6ee560c28fc986171e126db1db216a246a as builder # Build args to be used at this step ARG SOURCE_CODE diff --git a/argo-workflowcontroller/Dockerfile.konflux b/argo-workflowcontroller/Dockerfile.konflux index c6c18cbf2d51..0ed51e1d9ffe 100644 --- a/argo-workflowcontroller/Dockerfile.konflux +++ b/argo-workflowcontroller/Dockerfile.konflux @@ -6,7 +6,7 @@ ARG GIT_COMMIT=unknown ARG GIT_TAG=unknown ARG GIT_TREE_STATE=unknown -FROM registry.access.redhat.com/ubi9/go-toolset:1.24@sha256:6234f572204d672a0ee0686d748fbb9b7b05679368bf0d7a4446e13970e58060 as builder +FROM registry.access.redhat.com/ubi9/go-toolset:1.25@sha256:59ec4752cf86f0d0dd240b9e29c64d6ee560c28fc986171e126db1db216a246a as builder # Build args to be used at this step ARG SOURCE_CODE