Skip to content

v2.3.4
Compare
Choose a tag to compare
@github-actions github-actions released this 18 May 13:14
· 0 commits to 69dcee049ee0e82c2c7c1bcc58400a662de30ee4 since this release
v2.3.4
ac8b7df

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.4/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.4/manifests/ha/install.yaml

Notes

This is a security release. We urge all users of the 2.3.z branch to update as soon as possible. Please refer to the Security fixes section below for more details.

Security fixes

  • CRITICAL: Argo CD will trust invalid JWT claims if anonymous access is enabled (GHSA-r642-gv9p-2wjj)
  • LOW: Login screen allows message spoofing if SSO is enabled (GHSA-xmg8-99r8-jc2j)
  • MODERATE: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server (GHSA-6gcg-hp2x-q54h)

Bug Fixes

  • fix: Fix docs build error (#8895)
  • fix: fix broken monaco editor collapse icons (#8709)
  • chore: upgrade to go 1.17.8 (#8866) (#9004)
  • fix: allow cli/ui to follow logs (#8987) (#9065)
Assets 8