Skip to content

Updating argoproj/argo-cd#24

Closed
github-actions[bot] wants to merge 2 commits intomainfrom
auto/update-argo-cd
Closed

Updating argoproj/argo-cd#24
github-actions[bot] wants to merge 2 commits intomainfrom
auto/update-argo-cd

Conversation

@github-actions
Copy link

No description provided.

@github-actions
Copy link
Author

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.4/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.4/manifests/ha/install.yaml

Notes

This is a security release. We urge all users of the 2.3.z branch to update as soon as possible. Please refer to the Security fixes section below for more details.

Security fixes

  • CRITICAL: Argo CD will trust invalid JWT claims if anonymous access is enabled (GHSA-r642-gv9p-2wjj)
  • LOW: Login screen allows message spoofing if SSO is enabled (GHSA-xmg8-99r8-jc2j)
  • MODERATE: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server (GHSA-6gcg-hp2x-q54h)

Bug Fixes

  • fix: Fix docs build error (#8895)
  • fix: fix broken monaco editor collapse icons (#8709)
  • chore: upgrade to go 1.17.8 (#8866) (#9004)
  • fix: allow cli/ui to follow logs (#8987) (#9065)

release v2.3.4

@kryptn kryptn closed this Jun 13, 2022
@kryptn kryptn deleted the auto/update-argo-cd branch June 13, 2022 06:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant