diff --git a/docs/14.releasenotes/01.5x/01.5x.md b/docs/14.releasenotes/01.5x/01.5x.md index 5ec24ebc..ba61bea2 100644 --- a/docs/14.releasenotes/01.5x/01.5x.md +++ b/docs/14.releasenotes/01.5x/01.5x.md @@ -13,6 +13,25 @@ To receive email notifications of new releases, please subscribe to this SUSE ma ::: +#### 5.6.4 October 2026 + +:::note Critical CVE Stats After Upgrade +Upgrading to NeuVector v5.6.4 or later from any version prior to v5.6.0 requires all existing NeuVector scanner pods to be restarted or redeployed to support CVE critical-level severity. + +Older scanner pods cache the controller's initial capability response. They will not recognize that the upgraded controller supports critical-level severity until they are restarted and re-query the controller on startup. +::: + +##### Notable changes + +To scan the latest PHP-related vulnerabilities, please restart all NeuVector scanner pods in order to use the latest version (CVE DB version 4.308 or newer). + +##### Bug fixes + +- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability. +- **issue-1349**: cli command cannot make controller to write k8s-related debug logs. +- **Chore(deps)**: Upgrade golang to 1.27.3. + + #### 5.6.3 October 2026 :::note Critical CVE Stats After Upgrade diff --git a/versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md b/versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md index 6bf607b6..98922fc9 100644 --- a/versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md +++ b/versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md @@ -11,6 +11,17 @@ slug: /releasenotes/5x To receive email notifications of new releases, please subscribe to this SUSE mailing list: https://lists.suse.com/mailman/listinfo/neuvector-updates ::: +#### 5.4.12 October 2026 + +##### Notable changes + +To scan the latest PHP-related vulnerabilities, please restart all NeuVector scanner pods in order to use the latest version (CVE DB version 4.308 or newer). + +##### Bugs Fixed + +- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability. +- **Chore(deps)**: Upgrade golang to 1.27.3. + #### 5.4.11 September 2026 ##### Enhancement diff --git a/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md b/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md index 7addefbb..473313a1 100644 --- a/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md +++ b/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md @@ -11,6 +11,18 @@ slug: /releasenotes/5x To receive email notifications of new releases, please subscribe to this SUSE mailing list: https://lists.suse.com/mailman/listinfo/neuvector-updates ::: +#### 5.5.5 October 2026 + +##### Notable changes + +To scan the latest PHP-related vulnerabilities, please restart all NeuVector scanner pods in order to use the latest version (CVE DB version 4.308 or newer). + +##### Bugs Fixed + +- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability. +- **issue-1349**: cli command cannot make controller to write k8s-related debug logs. +- **Chore(deps)**: Upgrade golang to 1.27.3. + #### 5.5.4 September 2026 ##### Enhancement diff --git a/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md b/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md index a96bf377..133a139d 100644 --- a/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md +++ b/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md @@ -13,6 +13,24 @@ To receive email notifications of new releases, please subscribe to this SUSE ma ::: +#### 5.6.4 October 2026 + +:::note Critical CVE Stats After Upgrade +Upgrading to NeuVector v5.6.4 or later from any version prior to v5.6.0 requires all existing NeuVector scanner pods to be restarted or redeployed to support CVE critical-level severity. + +Older scanner pods cache the controller's initial capability response. They will not recognize that the upgraded controller supports critical-level severity until they are restarted and re-query the controller on startup. +::: + +##### Notable changes + +To scan the latest PHP-related vulnerabilities, please restart all NeuVector scanner pods in order to use the latest version (CVE DB version 4.308 or newer). + +##### Bug fixes + +- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability. +- **issue-1349**: cli command cannot make controller to write k8s-related debug logs. +- **Chore(deps)**: Upgrade golang to 1.27.3. + #### 5.6.3 October 2026 :::note Critical CVE Stats After Upgrade