From 35fe26faaf902d9e36ecc4758d4131efe38235f3 Mon Sep 17 00:00:00 2001 From: Erick Date: Sun, 3 Oct 2021 10:19:06 -0400 Subject: [PATCH] Add a note to README.md with context on CVE-2021-23017 patch (#7735) --- README.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 5c58ca402..a54273cb2 100644 --- a/README.md +++ b/README.md @@ -30,8 +30,8 @@ For detailed changes on the `ingress-nginx` helm chart, please check the followi | Ingress-nginx version | k8s supported version | Alpine Version | Nginx Version | |-----------------------|------------- |----------------|---------------| -| v1.0.2 | 1.22, 1.21, 1.20, 1.19 | 3.14.2 | 1.19.9 | -| v1.0.1 | 1.22, 1.21, 1.20, 1.19 | 3.14.2 | 1.19.9 | +| v1.0.2 | 1.22, 1.21, 1.20, 1.19 | 3.14.2 | 1.19.9† | +| v1.0.1 | 1.22, 1.21, 1.20, 1.19 | 3.14.2 | 1.19.9† | | v1.0.0 | 1.22, 1.21, 1.20, 1.19 | 3.13.5 | 1.20.1 | | v0.49.2 | 1.21, 1.20, 1.19 | 3.14.2 | 1.19.9 | | v0.49.1 | 1.21, 1.20, 1.19 | 3.14.2 | 1.19.9 | @@ -40,6 +40,7 @@ For detailed changes on the `ingress-nginx` helm chart, please check the followi | v0.47.0 | 1.21, 1.20, 1.19 | 3.13.5 | 1.20.1 | | v0.46.0 | 1.21, 1.20, 1.19 | 3.13.2 | 1.19.6 | +† _This build is [patched against CVE-2021-23017](https://github.com/openresty/openresty/commit/4b5ec7edd78616f544abc194308e0cf4b788725b#diff-42ef841dc27fe0b5aa2d06bd31308bb63a59cdcddcbcddd917248349d22020a3)._ See [this article](https://kubernetes.io/blog/2021/07/26/update-with-ingress-nginx/) if you want upgrade to the stable Ingress API.