Fix CVE-2025-22869: Go runtime Denial of Service vulnerability (litmuschaos#5236)

UJESH2K · zyue110026 · PriteshKiri · UJESH2K · commit cf29f6335c8d · 2025-10-28T19:51:42.000Z
* fix[5200]: Namespace Compromise via hostPID (litmuschaos#5201) * fix: hostPID set to false Signed-off-by: zyue110026 <98426905+zyue110026@users.noreply.github.com> * fix: hostPID set to false Signed-off-by: zyue110026 <98426905+zyue110026@users.noreply.github.com> --------- Signed-off-by: zyue110026 <98426905+zyue110026@users.noreply.github.com> Co-authored-by: Pritesh Kiri <77957844+PriteshKiri@users.noreply.github.com> Signed-off-by: UJESH KUMAR YADAV <154934631+UJESH2K@users.noreply.github.com> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution (litmuschaos#5203) * fix: hostPID set to false Signed-off-by: zyue110026 <98426905+zyue110026@users.noreply.github.com> * fix: hostPID set to false Signed-off-by: zyue110026 <98426905+zyue110026@users.noreply.github.com> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <98426905+zyue110026@users.noreply.github.com> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <98426905+zyue110026@users.noreply.github.com> * fix: Potential Denial of Service via unrestricted CPU/memory and root user execution Signed-off-by: zyue110026 <98426905+zyue110026@users.noreply.github.com> --------- Signed-off-by: zyue110026 <98426905+zyue110026@users.noreply.github.com> Co-authored-by: Pritesh Kiri <77957844+PriteshKiri@users.noreply.github.com> Signed-off-by: UJESH KUMAR YADAV <154934631+UJESH2K@users.noreply.github.com> * fix: [5167]: updated probe fetching logic in a fault (litmuschaos#5199) * feat: [5167]: updated probe fetching logic in a fault Signed-off-by: Amit Kumar Das <amit.das@harness.io> * feat: [5167]: fixed go fmt Signed-off-by: Amit Kumar Das <amit.das@harness.io> --------- Signed-off-by: Amit Kumar Das <amit.das@harness.io> Co-authored-by: Shubham Chaudhary <shubham.chaudhary@harness.io> Signed-off-by: UJESH KUMAR YADAV <154934631+UJESH2K@users.noreply.github.com> * Update Polices (litmuschaos#5186) * update: governance Signed-off-by: PriteshKiri <pritesh.d.kiri@gmail.com> * update: code of conduct Signed-off-by: PriteshKiri <pritesh.d.kiri@gmail.com> * update: contribution guide Signed-off-by: PriteshKiri <pritesh.d.kiri@gmail.com> * chore: updated community meetings content in Readme Signed-off-by: PriteshKiri <pritesh.d.kiri@gmail.com> * fix: community meeting form link Signed-off-by: PriteshKiri <pritesh.d.kiri@gmail.com> --------- Signed-off-by: PriteshKiri <pritesh.d.kiri@gmail.com> Signed-off-by: UJESH KUMAR YADAV <154934631+UJESH2K@users.noreply.github.com> * Removes hardcoded namespaces for K8s manifests (litmuschaos#5223) Signed-off-by: Bartlomiej Gmerek <bartlomiej.gmerek@canonical.com> Signed-off-by: UJESH KUMAR YADAV <154934631+UJESH2K@users.noreply.github.com> * Ensure SERVER_ADDR includes scheme on re-download manifestFix server addr (litmuschaos#5213) * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <ujeshyadav20k5@gmail.com> * Ensure SERVER_ADDR includes scheme on re-download manifest Signed-off-by: UJESH2K <ujeshyadav20k5@gmail.com> --------- Signed-off-by: UJESH2K <ujeshyadav20k5@gmail.com> Co-authored-by: Pritesh Kiri <77957844+PriteshKiri@users.noreply.github.com> Co-authored-by: Vedant Shrotria <vedant.shrotria@harness.io> Signed-off-by: UJESH KUMAR YADAV <154934631+UJESH2K@users.noreply.github.com> * fix: resolve missing experiment pod logs issue (litmuschaos#5207) Fixed missing experiment pod logs by updating relevant entities and components. Updated workflowRun entity, CustomStepLog controller, and ExperimentRunDetailsPanel to properly handle and display experiment pod logs. Signed-off-by: Harshit Panchbhai <harshit12339@gmail.com> Co-authored-by: Amit Kumar Das <amit.das@harness.io> Co-authored-by: Pritesh Kiri <77957844+PriteshKiri@users.noreply.github.com> Signed-off-by: UJESH KUMAR YADAV <154934631+UJESH2K@users.noreply.github.com> * Added fixes (litmuschaos#5227) Co-authored-by: git <harness_commons_bot@service.harness.io> Signed-off-by: UJESH KUMAR YADAV <154934631+UJESH2K@users.noreply.github.com> * chore(3.22.0): Add the installation manifest for 3.22.0 version (litmuschaos#5229) Signed-off-by: Shubham Chaudhary <shubham.chaudhary@harness.io> Signed-off-by: UJESH KUMAR YADAV <154934631+UJESH2K@users.noreply.github.com> * Fixed conversion issues and added formatting improvements Signed-off-by: UJESH KUMAR YADAV <154934631+UJESH2K@users.noreply.github.com> * changed all go version to 1.24.0 Signed-off-by: UJESH KUMAR YADAV <154934631+UJESH2K@users.noreply.github.com> * Delete test-chaoscenter-mods.ps1 Signed-off-by: UJESH KUMAR YADAV <154934631+UJESH2K@users.noreply.github.com> * Delete test-chaoscenter-mods.ps1​ Signed-off-by: UJESH KUMAR YADAV <154934631+UJESH2K@users.noreply.github.com> * Update Dockerfile Signed-off-by: UJESH KUMAR YADAV <154934631+UJESH2K@users.noreply.github.com> --------- Signed-off-by: zyue110026 <98426905+zyue110026@users.noreply.github.com> Signed-off-by: UJESH KUMAR YADAV <154934631+UJESH2K@users.noreply.github.com> Signed-off-by: Amit Kumar Das <amit.das@harness.io> Signed-off-by: PriteshKiri <pritesh.d.kiri@gmail.com> Signed-off-by: Bartlomiej Gmerek <bartlomiej.gmerek@canonical.com> Signed-off-by: UJESH2K <ujeshyadav20k5@gmail.com> Signed-off-by: Harshit Panchbhai <harshit12339@gmail.com> Signed-off-by: Shubham Chaudhary <shubham.chaudhary@harness.io> Co-authored-by: zyue110026 <98426905+zyue110026@users.noreply.github.com> Co-authored-by: Pritesh Kiri <77957844+PriteshKiri@users.noreply.github.com> Co-authored-by: Amit Kumar Das <amit.das@harness.io> Co-authored-by: Shubham Chaudhary <shubham.chaudhary@harness.io> Co-authored-by: Bartlomiej Gmerek <42570669+Gmerold@users.noreply.github.com> Co-authored-by: Vedant Shrotria <vedant.shrotria@harness.io> Co-authored-by: harshit12339 <37114289+harshit12339@users.noreply.github.com> Co-authored-by: git <harness_commons_bot@service.harness.io> Signed-off-by: UJESH KUMAR YADAV <154934631+UJESH2K@users.noreply.github.com>
diff --git a/chaoscenter/upgrade-agents/control-plane/Dockerfile b/chaoscenter/upgrade-agents/control-plane/Dockerfile
@@ -1,5 +1,5 @@
 # BUILD STAGE
-FROM golang:1.22 AS builder
+FROM golang:1.24 AS builder
 
 LABEL maintainer="LitmusChaos"
 
