Skip to content

Commit 14c7238

Browse files
authored
Merge pull request #1677 from wallrj/release-notes-1.12.17
Release notes for v1.12.17
2 parents d66baca + 40cf2f9 commit 14c7238

File tree

2 files changed

+14
-1
lines changed

2 files changed

+14
-1
lines changed

content/docs/releases/release-notes/release-notes-1.12.md

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -216,6 +216,19 @@ time and resources towards the continued maintenance of cert-manager projects. V
216216
cert-manager 1.12 as a long term support release, meaning it will be maintained for much longer
217217
than other releases to provide a stable platform for enterprises to build upon.
218218

219+
## `v1.12.17`
220+
221+
This patch release addresses several vulnerabilities reported by the Trivy security scanner. It is built with the latest version of Go 1.23 and includes various dependency updates. Changes since `v1.12.16`:
222+
223+
### Bug or Regression
224+
225+
- Bump Go to `v1.23.8` to fix `CVE-2025-22871` ([#7709](https://github.com/cert-manager/cert-manager/pull/7709), [`@wallrj`](https://github.com/wallrj))
226+
- Bump `golang.org/x/net` to `v0.38.0` to fix `CVE-2025-22872` ([#7709](https://github.com/cert-manager/cert-manager/pull/7709), [`@wallrj`](https://github.com/wallrj))
227+
- Bump `github.com/golang-jwt/jwt/v4` to `v4.5.2` to fix `CVE-2025-30204` ([#7709](https://github.com/cert-manager/cert-manager/pull/7709), [`@wallrj`](https://github.com/wallrj))
228+
- Bump `go-jose` to address `CVE-2025-27144` ([#7597](https://github.com/cert-manager/cert-manager/pull/7597), [`@SgtCoDFish`](https://github.com/SgtCoDFish))
229+
- Bump `golang.org/x/net` to address `CVE-2025-22870` reported by Trivy ([#7624](https://github.com/cert-manager/cert-manager/pull/7624), [`@SgtCoDFish`](https://github.com/SgtCoDFish))
230+
- Bump `golang.org/x/net` to address `CVE-2025-22870` reported by Trivy ([#7623](https://github.com/cert-manager/cert-manager/pull/7623), [`@SgtCoDFish`](https://github.com/SgtCoDFish))
231+
219232
## `v1.12.16`
220233

221234
This patch release is primarily intended to address a [breaking change](https://github.com/cert-manager/cert-manager/issues/7540) in Cloudflare's API which impacted ACME DNS-01 challenges using Cloudflare.

content/v1.12-docs/variables.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
11
{
2-
"cert_manager_latest_version": "v1.12.15"
2+
"cert_manager_latest_version": "v1.12.17"
33
}

0 commit comments

Comments
 (0)