UnratedFix available
Crossplane v2.2.7
Crossplane v2.2.7 updates Go and dependencies to address security-related issues, including rejecting compromised eMudhra intermediate certificates and removing related roots from the image CA bundle.
Announced Source revision 1
Original source ↗github-crossplane-crossplane
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
v2.2.7 is a patch release scoped to fixing issues reported by users of Crossplane v2.2 and fixing security related issues in Crossplane and its dependencies.
Crossplane
Crossplane v2.2
- Affected versions
- v2.2
issues reported by users of Crossplane v2.2
- Fixed versions
- v2.2.7
Release notes from crossplane v2.2.7
- Prerequisites
- Not stated in this extraction
Go
Bumps the Go toolchain to 1.26.10
- Affected versions
- Not stated in this extraction
- Fixed versions
- 1.26.10
Bumps the Go toolchain to 1.26.10
- Prerequisites
- Not stated in this extraction
golang.org/x/net
Bumps golang.org/x/net to v0.60.0
- Affected versions
- Not stated in this extraction
- Fixed versions
- v0.60.0
Bumps golang.org/x/net to v0.60.0
- Prerequisites
- Not stated in this extraction
otlptracehttp
and otlptracehttp to v1.45.0
- Affected versions
- Not stated in this extraction
- Fixed versions
- v1.45.0
and otlptracehttp to v1.45.0
- Prerequisites
- Not stated in this extraction
crossplane-runtime
crossplane-runtime to v2.2.5
- Affected versions
- Not stated in this extraction
- Fixed versions
- v2.2.5
crossplane-runtime to v2.2.5
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2026-111943
(CVE-2026-111943)
Publisher severity
No explicit severity was extracted.
- Event
- #86473 · Revision 1
- Added to Heist Feed
- Publisher date