Skip to first unread message
Maël Valais
Sep 5, 2023, 5:54:29 AM9/5/23
to cert-manager-dev
Dear cert-manager community,
Last week we released cert-manager 1.11.5 [1] and 1.12.4 [2], both of which contain a security fix that addresses CVE-2023-29409 [3]. As per the discussion we had on Slack [4], it is very unlikely that this CVE will result in a denial of service of the cert-manager-controller and cert-manager-webhook processes, but we encourage you to upgrade.
Last week we released cert-manager 1.11.5 [1] and 1.12.4 [2], both of which contain a security fix that addresses CVE-2023-29409 [3]. As per the discussion we had on Slack [4], it is very unlikely that this CVE will result in a denial of service of the cert-manager-controller and cert-manager-webhook processes, but we encourage you to upgrade.
As always, thanks for using cert-manager!
[1]: https://github.com/cert-manager/cert-manager/releases/tag/v1.11.5
[2]: https://github.com/cert-manager/cert-manager/releases/tag/v1.12.4
[3]: https://cve.report/CVE-2023-29409
[4]: https://kubernetes.slack.com/archives/CDEQJ0Q8M/p1693505012688739
– Maël
On behalf of the cert-manager maintainers
On behalf of the cert-manager maintainers
[1]: https://github.com/cert-manager/cert-manager/releases/tag/v1.11.5
[2]: https://github.com/cert-manager/cert-manager/releases/tag/v1.12.4
[3]: https://cve.report/CVE-2023-29409
[4]: https://kubernetes.slack.com/archives/CDEQJ0Q8M/p1693505012688739
Reply all
Reply to author
Forward
0 new messages