From 891bec092723f4eac4b8df46aa4c8fd74d68f2e9 Mon Sep 17 00:00:00 2001 From: neuvector Date: Thu, 22 Oct 2026 17:34:35 +0000 Subject: [PATCH 01/10] Add release notes for 5.6.4 / 5.5.5 / 5.4.12 --- docs/14.releasenotes/01.5x/01.5x.md | 14 ++++++++++++++ .../version-5.4/14.releasenotes/01.5x/01.5x.md | 7 +++++++ .../version-5.5/14.releasenotes/01.5x/01.5x.md | 7 +++++++ .../version-5.6/14.releasenotes/01.5x/01.5x.md | 13 +++++++++++++ 4 files changed, 41 insertions(+) diff --git a/docs/14.releasenotes/01.5x/01.5x.md b/docs/14.releasenotes/01.5x/01.5x.md index 5ec24ebc..f3c38074 100644 --- a/docs/14.releasenotes/01.5x/01.5x.md +++ b/docs/14.releasenotes/01.5x/01.5x.md @@ -13,6 +13,20 @@ To receive email notifications of new releases, please subscribe to this SUSE ma ::: +#### 5.6.4 October 2026 + +:::note Critical CVE Stats After Upgrade +Upgrading to NeuVector v5.6.4 or later from any version prior to v5.6.0 requires all existing NeuVector scanner pods to be restarted or redeployed to support CVE critical-level severity. + +Older scanner pods cache the controller's initial capability response. They will not recognize that the upgraded controller supports critical-level severity until they are restarted and re-query the controller on startup. +::: + +##### Bug fixes + +- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver Instability +- **chore(deps)**: upgrade golang to 1.27.3. + + #### 5.6.3 October 2026 :::note Critical CVE Stats After Upgrade diff --git a/versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md b/versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md index 6bf607b6..8e48631f 100644 --- a/versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md +++ b/versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md @@ -11,6 +11,13 @@ slug: /releasenotes/5x To receive email notifications of new releases, please subscribe to this SUSE mailing list: https://lists.suse.com/mailman/listinfo/neuvector-updates ::: +#### 5.4.12 October 2026 + +##### Bugs Fixed + +- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver Instability +- **chore(deps)**: upgrade golang to 1.27.3. + #### 5.4.11 September 2026 ##### Enhancement diff --git a/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md b/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md index 7addefbb..89edd069 100644 --- a/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md +++ b/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md @@ -11,6 +11,13 @@ slug: /releasenotes/5x To receive email notifications of new releases, please subscribe to this SUSE mailing list: https://lists.suse.com/mailman/listinfo/neuvector-updates ::: +#### 5.5.5 October 2026 + +##### Bugs Fixed + +- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver Instability +- **chore(deps)**: upgrade golang to 1.27.3. + #### 5.5.4 September 2026 ##### Enhancement diff --git a/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md b/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md index a96bf377..893153a5 100644 --- a/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md +++ b/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md @@ -13,6 +13,19 @@ To receive email notifications of new releases, please subscribe to this SUSE ma ::: +#### 5.6.4 October 2026 + +:::note Critical CVE Stats After Upgrade +Upgrading to NeuVector v5.6.4 or later from any version prior to v5.6.0 requires all existing NeuVector scanner pods to be restarted or redeployed to support CVE critical-level severity. + +Older scanner pods cache the controller's initial capability response. They will not recognize that the upgraded controller supports critical-level severity until they are restarted and re-query the controller on startup. +::: + +##### Bug fixes + +- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver Instability +- **chore(deps)**: upgrade golang to 1.27.3. + #### 5.6.3 October 2026 :::note Critical CVE Stats After Upgrade From fe02e854bc33dc4bc3d4e7de8f0d306497b091be Mon Sep 17 00:00:00 2001 From: Sunil Singh Date: Thu, 22 Oct 2026 10:44:44 -0700 Subject: [PATCH 02/10] Update docs/14.releasenotes/01.5x/01.5x.md --- docs/14.releasenotes/01.5x/01.5x.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/14.releasenotes/01.5x/01.5x.md b/docs/14.releasenotes/01.5x/01.5x.md index f3c38074..437c53bc 100644 --- a/docs/14.releasenotes/01.5x/01.5x.md +++ b/docs/14.releasenotes/01.5x/01.5x.md @@ -23,8 +23,8 @@ Older scanner pods cache the controller's initial capability response. They will ##### Bug fixes -- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver Instability -- **chore(deps)**: upgrade golang to 1.27.3. +- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability. +- **Chore(deps)**: Upgrade golang to 1.27.3. #### 5.6.3 October 2026 From cf4d9e76886d974795f2daa9e0e312b544c8ad93 Mon Sep 17 00:00:00 2001 From: Sunil Singh Date: Thu, 22 Oct 2026 10:44:53 -0700 Subject: [PATCH 03/10] Update versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md --- versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md b/versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md index 8e48631f..f367f2b4 100644 --- a/versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md +++ b/versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md @@ -15,8 +15,8 @@ To receive email notifications of new releases, please subscribe to this SUSE ma ##### Bugs Fixed -- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver Instability -- **chore(deps)**: upgrade golang to 1.27.3. +- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability. +- **Chore(deps)**: Upgrade golang to 1.27.3. #### 5.4.11 September 2026 From a3ce13e7b1dda7ce5bee9fce7fc9321c08f5a1b3 Mon Sep 17 00:00:00 2001 From: Sunil Singh Date: Thu, 22 Oct 2026 10:45:00 -0700 Subject: [PATCH 04/10] Update versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md --- versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md b/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md index 89edd069..0a1368bf 100644 --- a/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md +++ b/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md @@ -15,8 +15,8 @@ To receive email notifications of new releases, please subscribe to this SUSE ma ##### Bugs Fixed -- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver Instability -- **chore(deps)**: upgrade golang to 1.27.3. +- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability. +- **Chore(deps)**: Upgrade golang to 1.27.3. #### 5.5.4 September 2026 From f236219233e9298c6c301f73f4803938fe06b581 Mon Sep 17 00:00:00 2001 From: Sunil Singh Date: Thu, 22 Oct 2026 10:45:08 -0700 Subject: [PATCH 05/10] Update versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md --- versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md b/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md index 893153a5..635d1434 100644 --- a/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md +++ b/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md @@ -23,8 +23,8 @@ Older scanner pods cache the controller's initial capability response. They will ##### Bug fixes -- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver Instability -- **chore(deps)**: upgrade golang to 1.27.3. +- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability. +- **Chore(deps)**: Upgrade golang to 1.27.3. #### 5.6.3 October 2026 From f96944ce4d80a997e69fd64d87810c9bf053d24e Mon Sep 17 00:00:00 2001 From: Sunil Singh Date: Thu, 22 Oct 2026 14:20:22 -0700 Subject: [PATCH 06/10] Update docs/14.releasenotes/01.5x/01.5x.md --- docs/14.releasenotes/01.5x/01.5x.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/14.releasenotes/01.5x/01.5x.md b/docs/14.releasenotes/01.5x/01.5x.md index 437c53bc..538ede13 100644 --- a/docs/14.releasenotes/01.5x/01.5x.md +++ b/docs/14.releasenotes/01.5x/01.5x.md @@ -21,6 +21,10 @@ Upgrading to NeuVector v5.6.4 or later from any version prior to v5.6.0 requires Older scanner pods cache the controller's initial capability response. They will not recognize that the upgraded controller supports critical-level severity until they are restarted and re-query the controller on startup. ::: +##### Notable changes + +To scan the latest PHP-related vulnerabilities, please restart all NeuVector scanner pods in order to use the latest version (CVE DB version 4.308 or newer). + ##### Bug fixes - **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability. From 901acbc788ac3411a8e5486842ff8753e2086fd2 Mon Sep 17 00:00:00 2001 From: Sunil Singh Date: Thu, 22 Oct 2026 14:20:31 -0700 Subject: [PATCH 07/10] Update versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md --- versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md b/versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md index f367f2b4..98922fc9 100644 --- a/versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md +++ b/versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md @@ -13,6 +13,10 @@ To receive email notifications of new releases, please subscribe to this SUSE ma #### 5.4.12 October 2026 +##### Notable changes + +To scan the latest PHP-related vulnerabilities, please restart all NeuVector scanner pods in order to use the latest version (CVE DB version 4.308 or newer). + ##### Bugs Fixed - **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability. From 06a2edf4dcb9cecebc5c428b14fed0d76f0bf223 Mon Sep 17 00:00:00 2001 From: Sunil Singh Date: Thu, 22 Oct 2026 14:20:38 -0700 Subject: [PATCH 08/10] Update versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md --- versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md b/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md index 0a1368bf..fe04cdb7 100644 --- a/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md +++ b/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md @@ -13,6 +13,10 @@ To receive email notifications of new releases, please subscribe to this SUSE ma #### 5.5.5 October 2026 +##### Notable changes + +To scan the latest PHP-related vulnerabilities, please restart all NeuVector scanner pods in order to use the latest version (CVE DB version 4.308 or newer). + ##### Bugs Fixed - **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability. From 40ce051703701bed0bd8b8ef4d7ed4423a9b9271 Mon Sep 17 00:00:00 2001 From: Sunil Singh Date: Thu, 22 Oct 2026 14:20:45 -0700 Subject: [PATCH 09/10] Update versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md --- versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md b/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md index 635d1434..4c346c25 100644 --- a/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md +++ b/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md @@ -21,6 +21,10 @@ Upgrading to NeuVector v5.6.4 or later from any version prior to v5.6.0 requires Older scanner pods cache the controller's initial capability response. They will not recognize that the upgraded controller supports critical-level severity until they are restarted and re-query the controller on startup. ::: +##### Notable changes + +To scan the latest PHP-related vulnerabilities, please restart all NeuVector scanner pods in order to use the latest version (CVE DB version 4.308 or newer). + ##### Bug fixes - **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability. From 3c7a7905913777276a3654d463428ebd985a0fb5 Mon Sep 17 00:00:00 2001 From: neuvector Date: Mon, 26 Oct 2026 21:03:17 +0000 Subject: [PATCH 10/10] Update release notes for 5.6.4 / 5.5.5 / 5.4.12 --- docs/14.releasenotes/01.5x/01.5x.md | 1 + versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md | 1 + versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md | 1 + 3 files changed, 3 insertions(+) diff --git a/docs/14.releasenotes/01.5x/01.5x.md b/docs/14.releasenotes/01.5x/01.5x.md index 538ede13..ba61bea2 100644 --- a/docs/14.releasenotes/01.5x/01.5x.md +++ b/docs/14.releasenotes/01.5x/01.5x.md @@ -28,6 +28,7 @@ To scan the latest PHP-related vulnerabilities, please restart all NeuVector sca ##### Bug fixes - **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability. +- **issue-1349**: cli command cannot make controller to write k8s-related debug logs. - **Chore(deps)**: Upgrade golang to 1.27.3. diff --git a/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md b/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md index fe04cdb7..473313a1 100644 --- a/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md +++ b/versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md @@ -20,6 +20,7 @@ To scan the latest PHP-related vulnerabilities, please restart all NeuVector sca ##### Bugs Fixed - **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability. +- **issue-1349**: cli command cannot make controller to write k8s-related debug logs. - **Chore(deps)**: Upgrade golang to 1.27.3. #### 5.5.4 September 2026 diff --git a/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md b/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md index 4c346c25..133a139d 100644 --- a/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md +++ b/versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md @@ -28,6 +28,7 @@ To scan the latest PHP-related vulnerabilities, please restart all NeuVector sca ##### Bug fixes - **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability. +- **issue-1349**: cli command cannot make controller to write k8s-related debug logs. - **Chore(deps)**: Upgrade golang to 1.27.3. #### 5.6.3 October 2026