Package
calico-app-policy-3.32
Component
golang.org/x/net
Latest update
Aliases
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
The fix is in golang.org/x/net v0.60.0, and every x/net release from v0.59.0 onward requires Go 1.26 or newer. calico 3.32.2 is built with Go 1.25, so this dependency cannot be upgraded in the current release. Upstream calico has moved its 3.32 release branch to Go 1.26, together with the code changes needed to build on it (https://github.com/projectcalico/calico/pull/14094), but that work has not yet shipped in a 3.32 release. This will be remediated once upstream publishes a 3.32 release that builds with Go 1.26.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/calico-dikastes.
Status