[pre-release][action-required] kcp security announcement

[Mangirdas Judeikis]

Hello everyone,

We will be releasing kcp patch releases on Wednesday, April 1st, at 12 UTC and there will be a fix for highly-scored CVE in there, so please prepare to patch your environments. 
Release will include main, 0.30.x, and 0.29.x releases. 

The full details of the security advisory will be disclosed on Thursday, April 2rd, at 12:00 UTC via GitHub. 

 

If you have any questions, please do not hesitate to get in touch with us via the #kcp-dev Kubernetes Slack channel or on our bi-weekly community calls. Please see https://docs.kcp.io/kcp/latest/#getting-in-touch for details on how to get in touch with the kcp community.

Best regards,

Mangirdas

On behalf of the kcp maintainers

[Mangirdas Judeikis]

Release is out.

If you are on 0.30.x - please upgrade to 0.30.3. Operator and helm
charts are ready.

kcp https://github.com/kcp-dev/kcp/releases/tag/v0.30.3,
https://github.com/kcp-dev/kcp/releases/tag/v0.29.3
kcp-operator https://github.com/kcp-dev/kcp-operator/releases/tag/v0.6.0,
https://github.com/kcp-dev/kcp-operator/releases/tag/v0.5.2
helm-charts https://github.com/kcp-dev/helm-charts/releases/tag/kcp-0.15.0,
https://github.com/kcp-dev/helm-charts/releases/tag/kcp-operator-0.6.0

Please patch your environments.
Some backports are still happening, so if you are missing a certain
release, it might still be in the pipes - let me know directly.

MJ

> --
> You received this message because you are subscribed to the Google Groups "KCP developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to kcp-dev+u...@googlegroups.com.
> To view this discussion visit https://groups.google.com/d/msgid/kcp-dev/afe5ed93-d1b9-43e5-8711-38ba2c6bd5fen%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.



--

MJ

Email: mang...@judeikis.lt
Mobile: +37062022687

[Mangirdas Judeikis]

Hello all,

Please find the security advisory attached https://github.com/kcp-dev/kcp/security/advisories/GHSA-3j3q-wp9x-585p

Respectfully,

MJ