-
Notifications
You must be signed in to change notification settings - Fork 10.3k
Open
Description
What would you like to be added?
The etcd patch release criteria has been met for our release-3.5 stable branch, so we should release v3.5.27.
Work in progress CHANGELOG is: https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.5.md#v3527-tbc
The list of commits included since the previous release is: v3.5.26...release-3.5:
- [release-3.5] Bump go version to 1.24.12 #21217
- [release-3.5] Remove the use of grpc-go's Metadata field #21242
- [release-3.5] Bump go version to 1.24.13 #21258
Outstanding tasks before releasing this version:
- None
Release team
| GitHub handle | Role |
|---|---|
| @ivanvc | Release Lead |
| @joshjms | Release Shadow |
Why is this needed?
Go 1.24.12 includes fixes for several CVEs, including CVE-2025-61726, CVE-2025-61731 and CVE-2025-61732. These two have an assessed vulnerability score >= 7.5. Therefore, according to our release guide we should do a release.
Regular patch releases are vital to ensure our users have bug-free and secure software.
Reactions are currently unavailable