Add release notes for 5.6.4 / 5.5.5 / 5.4.12

docs/14.releasenotes/01.5x/01.5x.md

@@ -13,6 +13,25 @@ To receive email notifications of new releases, please subscribe to this SUSE ma
 
 :::
 
+#### 5.6.4 October 2026
+
+:::note Critical CVE Stats After Upgrade
+Upgrading to NeuVector v5.6.4 or later from any version prior to v5.6.0 requires all existing NeuVector scanner pods to be restarted or redeployed to support CVE critical-level severity.
+
+Older scanner pods cache the controller's initial capability response. They will not recognize that the upgraded controller supports critical-level severity until they are restarted and re-query the controller on startup.
+:::
+
+##### Notable changes
+
+To scan the latest PHP-related vulnerabilities, please restart all NeuVector scanner pods in order to use the latest version (CVE DB version 4.308 or newer).
+
+##### Bug fixes
+
+- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability.
+- **issue-1349**: cli command cannot make controller to write k8s-related debug logs.
+- **Chore(deps)**: Upgrade golang to 1.27.3.
+
+
 #### 5.6.3 October 2026
 
 :::note Critical CVE Stats After Upgrade

versioned_docs/version-5.4/14.releasenotes/01.5x/01.5x.md

@@ -11,6 +11,17 @@ slug: /releasenotes/5x
 To receive email notifications of new releases, please subscribe to this SUSE mailing list: https://lists.suse.com/mailman/listinfo/neuvector-updates
 :::
 
+#### 5.4.12 October 2026
+
+##### Notable changes
+
+To scan the latest PHP-related vulnerabilities, please restart all NeuVector scanner pods in order to use the latest version (CVE DB version 4.308 or newer).
+
+##### Bugs Fixed
+
+- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability.
+- **Chore(deps)**: Upgrade golang to 1.27.3.
+
 #### 5.4.11 September 2026
 
 ##### Enhancement

versioned_docs/version-5.5/14.releasenotes/01.5x/01.5x.md

@@ -11,6 +11,18 @@ slug: /releasenotes/5x
 To receive email notifications of new releases, please subscribe to this SUSE mailing list: https://lists.suse.com/mailman/listinfo/neuvector-updates
 :::
 
+#### 5.5.5 October 2026
+
+##### Notable changes
+
+To scan the latest PHP-related vulnerabilities, please restart all NeuVector scanner pods in order to use the latest version (CVE DB version 4.308 or newer).
+
+##### Bugs Fixed
+
+- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability.
+- **issue-1349**: cli command cannot make controller to write k8s-related debug logs.
+- **Chore(deps)**: Upgrade golang to 1.27.3.
+
 #### 5.5.4 September 2026
 
 ##### Enhancement

versioned_docs/version-5.6/14.releasenotes/01.5x/01.5x.md

@@ -13,6 +13,24 @@ To receive email notifications of new releases, please subscribe to this SUSE ma
 
 :::
 
+#### 5.6.4 October 2026
+
+:::note Critical CVE Stats After Upgrade
+Upgrading to NeuVector v5.6.4 or later from any version prior to v5.6.0 requires all existing NeuVector scanner pods to be restarted or redeployed to support CVE critical-level severity.
+
+Older scanner pods cache the controller's initial capability response. They will not recognize that the upgraded controller supports critical-level severity until they are restarted and re-query the controller on startup.
+:::
+
+##### Notable changes
+
+To scan the latest PHP-related vulnerabilities, please restart all NeuVector scanner pods in order to use the latest version (CVE DB version 4.308 or newer).
+
+##### Bug fixes
+
+- **NVSHAS-10342**: NeuVector ConfigMap Watch Loop causing WAN Link Saturation (200 Mbps) & kube-apiserver instability.
+- **issue-1349**: cli command cannot make controller to write k8s-related debug logs.
+- **Chore(deps)**: Upgrade golang to 1.27.3.
+
 #### 5.6.3 October 2026
 
 :::note Critical CVE Stats After Upgrade