Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updating argoproj/argo-cd #24

Closed
wants to merge 2 commits into from
Closed

Conversation

github-actions[bot]
Copy link

No description provided.

@github-actions
Copy link
Author

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.4/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.4/manifests/ha/install.yaml

Notes

This is a security release. We urge all users of the 2.3.z branch to update as soon as possible. Please refer to the Security fixes section below for more details.

Security fixes

  • CRITICAL: Argo CD will trust invalid JWT claims if anonymous access is enabled (GHSA-r642-gv9p-2wjj)
  • LOW: Login screen allows message spoofing if SSO is enabled (GHSA-xmg8-99r8-jc2j)
  • MODERATE: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server (GHSA-6gcg-hp2x-q54h)

Bug Fixes

  • fix: Fix docs build error (#8895)
  • fix: fix broken monaco editor collapse icons (#8709)
  • chore: upgrade to go 1.17.8 (#8866) (#9004)
  • fix: allow cli/ui to follow logs (#8987) (#9065)

release v2.3.4

@kryptn kryptn closed this Jun 13, 2022
@kryptn kryptn deleted the auto/update-argo-cd branch June 13, 2022 06:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant