You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/docs/releases/release-notes/release-notes-1.12.md
+13Lines changed: 13 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -216,6 +216,19 @@ time and resources towards the continued maintenance of cert-manager projects. V
216
216
cert-manager 1.12 as a long term support release, meaning it will be maintained for much longer
217
217
than other releases to provide a stable platform for enterprises to build upon.
218
218
219
+
## `v1.12.17`
220
+
221
+
This patch release addresses several vulnerabilities reported by the Trivy security scanner. It is built with the latest version of Go 1.23 and includes various dependency updates. Changes since `v1.12.16`:
222
+
223
+
### Bug or Regression
224
+
225
+
- Bump Go to `v1.23.8` to fix `CVE-2025-22871` ([#7709](https://github.com/cert-manager/cert-manager/pull/7709), [`@wallrj`](https://github.com/wallrj))
226
+
- Bump `golang.org/x/net` to `v0.38.0` to fix `CVE-2025-22872` ([#7709](https://github.com/cert-manager/cert-manager/pull/7709), [`@wallrj`](https://github.com/wallrj))
227
+
- Bump `github.com/golang-jwt/jwt/v4` to `v4.5.2` to fix `CVE-2025-30204` ([#7709](https://github.com/cert-manager/cert-manager/pull/7709), [`@wallrj`](https://github.com/wallrj))
228
+
- Bump `go-jose` to address `CVE-2025-27144` ([#7597](https://github.com/cert-manager/cert-manager/pull/7597), [`@SgtCoDFish`](https://github.com/SgtCoDFish))
229
+
- Bump `golang.org/x/net` to address `CVE-2025-22870` reported by Trivy ([#7624](https://github.com/cert-manager/cert-manager/pull/7624), [`@SgtCoDFish`](https://github.com/SgtCoDFish))
230
+
- Bump `golang.org/x/net` to address `CVE-2025-22870` reported by Trivy ([#7623](https://github.com/cert-manager/cert-manager/pull/7623), [`@SgtCoDFish`](https://github.com/SgtCoDFish))
231
+
219
232
## `v1.12.16`
220
233
221
234
This patch release is primarily intended to address a [breaking change](https://github.com/cert-manager/cert-manager/issues/7540) in Cloudflare's API which impacted ACME DNS-01 challenges using Cloudflare.
0 commit comments