KrakenD EE 2.12.4 update released
by Jorge Tarrero
The release of KrakenD Enterprise 2.12.4 upgrades the Go runtime to version 1.25.7, directly addressing two CVEs discovered in Go’s internals
🚀 Summary of changes for EEv2.12.4 (patch)
Recommended security upgrade addressing several vulnerabilities (by the Go team)
- Upgraded Go to 1.25.7 addressing several CVEs with disclosed descriptions:
- CVE-2025-61732 A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary
- CVE-2025-68121 Config.GetConfigForClient is documented to use the original Config’s session ticket keys unless explicitly overridden. This can cause unexpected behavior if the returned Config modifies authentication parameters
Upgrading to the latest version is always advised.
Categories:
Product UpdatesSecurity