Joris MASSON (jmasson)2025-10-31 10:27Original Submission Show diff Switch to markup diff Something went wrong, the follow up content couldn't be loaded Only formatting have been changed, you should switch to markup to see the changes Connected artifacts Added Fixed in: rel #44428
Tracker Workflow Manager (forge__tracker_workflow_manager)2025-10-31 10:26 Closed by @tgerbet with git #tuleap/stable/19c356759a4f87491d9db5ecef3363d8da38deb8. Status changed from Under review to ClosedClose date set to 2025-10-31
Thomas Gerbet (tgerbet)2025-10-31 09:43 See gerrit #36080 Summary -Go: temporarily ignore 10 vulns +Go: 1.25.1 -> 1.25.3 Original Submission Show diff Switch to markup diff Something went wrong, the follow up content couldn't be loaded Only formatting have been changed, you should switch to markup to see the changes Status changed from Under implementation to Under review
Thomas Gerbet (tgerbet)2025-10-31 08:50 I have a doubt on CVE-2025-47912, we might possibly be impacted in Smokescreen. The other issues are not really a concern in our usages, nothing is directly exposed. Checking, for once it might be easier to move our whole toolchain to Go 1.25.3.