[Release-1.29] - CVE-2025-1974 Vulnerability

[dereknola]

Backport fix for CVE-2025-1974 Vulnerability

• CVE-2025-1974 Vulnerability #7953

[mdrahman-suse]

Validation on v1.29.15-rc2+rke2r1

$ rke2 -v
rke2 version v1.29.15-rc2+rke2r1 (c228232895f83b6c3e17a9741e0c8d8e4439894d)
go version go1.23.6 X:boringcrypto

$ k get nodes -o yaml | grep 'nginx-ingress-controller' -A1
      - docker.io/rancher/nginx-ingress-controller@sha256:f76b475b8d700b8b95f22d57320ea4bfabd1d7e9ef1f4334223a7c9c3b7cc116
      - docker.io/rancher/nginx-ingress-controller:v1.12.1-hardened1
      sizeBytes: 301977742

[localleon]

Dear @mdrahman-suse, when is the release gonna be published?

[davidhrbac]

If using allow-snippet-annotations: "True" in the ingress you might be hitting kubernetes/ingress-nginx#13104