chore: chore: updated golang, grpc

[vitalii-codefresh]

Changelog

Bug fixes

• security fixes for codefresh/venona service

Related tickets

Closes CFS-15236

Security Report — codefresh/venona

Note

Compared security scans:

Current image:
quay.io/codefresh/dev/venona:cfs-15236-security@sha256:7da49c99b2075426daacca240e4e0edf21ab44425442899850998e1153700a23

Baseline:
quay.io/codefresh/venona:main@sha256:ed5a3e289787ba98dd6fad4d889d9ae020325b63c931cfc2c9bd2a76cb831a93

Fixed CVEs: 33

🟣 Critical: 1

• CVE-2026-34182 in openssl@3.5.6-r0 at unknown path

🔴 High: 12

• CVE-2026-45447 in openssl@3.5.6-r0 at unknown path
• CVE-2026-7383 in openssl@3.5.6-r0 at unknown path
• CVE-2026-9076 in openssl@3.5.6-r0 at unknown path
• CVE-2026-45445 in openssl@3.5.6-r0 at unknown path
• CVE-2026-42764 in openssl@3.5.6-r0 at unknown path
• CVE-2026-39836 in net@1.26.2 at /usr/local/bin/venona
• CVE-2026-34183 in openssl@3.5.6-r0 at unknown path
• CVE-2026-34180 in openssl@3.5.6-r0 at unknown path
• CVE-2026-33814 in net/http@1.26.2 at /usr/local/bin/venona
• CVE-2026-33811 in net@1.26.2 at /usr/local/bin/venona
• CVE-2026-34181 in openssl@3.5.6-r0 at unknown path
• GO-2026-6061 in google.golang.org/grpc/internal/transport@v1.81.0 at /usr/local/bin/venona

🟠 Medium: 7

• CVE-2026-39826 in html/template@1.26.2 at /usr/local/bin/venona
• CVE-2026-39823 in html/template@1.26.2 at /usr/local/bin/venona
• CVE-2026-42767 in openssl@3.5.6-r0 at unknown path
• CVE-2026-42766 in openssl@3.5.6-r0 at unknown path
• CVE-2026-42769 in openssl@3.5.6-r0 at unknown path
• CVE-2026-42505 in crypto/tls@1.26.2 at /usr/local/bin/venona
• CVE-2026-45446 in openssl@3.5.6-r0 at unknown path

🟡 Low: 2

• CVE-2026-42770 in openssl@3.5.6-r0 at unknown path
• CVE-2026-42768 in openssl@3.5.6-r0 at unknown path

⚫ Unassigned: 11

• CVE-2026-39821 in golang.org/x/net/idna@v0.53.0 at /usr/local/bin/venona
• CVE-2026-39821 in net/http@1.26.2 at /usr/local/bin/venona
• CVE-2026-56862 in crypto/tls@1.26.2 at /usr/local/bin/venona
• CVE-2026-56859 in encoding/xml@1.26.2 at /usr/local/bin/venona
• CVE-2026-56853 in net/http@1.26.2 at /usr/local/bin/venona
• CVE-2026-46600 in net@1.26.2 at /usr/local/bin/venona
• CVE-2026-33818 in encoding/asn1@1.26.2 at /usr/local/bin/venona
• CVE-2026-27145 in crypto/x509@1.26.2 at /usr/local/bin/venona
• CVE-2026-56858 in html/template@1.26.2 at /usr/local/bin/venona
• CVE-2026-56860 in net/url@1.26.2 at /usr/local/bin/venona
• CVE-2026-42507 in net/textproto@1.26.2 at /usr/local/bin/venona

Fixed issues: 1

• Fixes CFS-15236