You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by "Richard0706 (via GitHub)" <gi...@apache.org> on 2025/12/17 15:14:15 UTC
[I] help request: Apache Apisix 安全漏洞(CVE-2025-62232) [apisix]
Richard0706 opened a new issue, #12820:
URL: https://github.com/apache/apisix/issues/12820
### Description
<img width="747" height="452" alt="Image" src="https://github.com/user-attachments/assets/2c14335c-43da-4b2c-8b65-98466f032832" />
https://lists.apache.org/thread/32hdgh570btfhg02hfc7p7ckf9v83259
这个漏洞只能升级到3.14版本吗？3.2 LTS版有不升级的替代方案吗？
3.14版在k8s内，需要ingress-controller 2.0，整个架构都变化了...
3.2 LTS作为长期服务版是不是再出个3.2 补丁版？
### Environment
- APISIX version (run `apisix version`):3.2 LTS k8s
- Operating system (run `uname -a`):
- OpenResty / Nginx version (run `openresty -V` or `nginx -V`):
- etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`):
- APISIX Dashboard version, if relevant:
- Plugin runner version, for issues related to plugin runners:
- LuaRocks version, for installation issues (run `luarocks --version`):
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Apache APISIX LTS version security patches(CVE-2025-62232) [apisix]
Posted by "juzhiyuan (via GitHub)" <gi...@apache.org>.
juzhiyuan commented on issue #12820:
URL: https://github.com/apache/apisix/issues/12820#issuecomment-3673022501
This is no LTS version guarantee. Refer to
- https://github.com/apache/apisix/issues/11759#issuecomment-2488694000
- https://github.com/apache/apisix/issues/12315#issuecomment-2962193401
Always update to the latest version.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Apache Apisix 安全漏洞(CVE-2025-62232) [apisix]
Posted by "Baoyuantop (via GitHub)" <gi...@apache.org>.
Baoyuantop commented on issue #12820:
URL: https://github.com/apache/apisix/issues/12820#issuecomment-3667890926
Hi @Richard0706, the maintenance period for version 3.2 has ended, and we have removed the relevant tag at https://github.com/apache/apisix-website/pull/1830. There are currently no new LTS versions.
Could you describe in detail your current architecture and the challenges of upgrading it?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Apache APISIX LTS version security patches(CVE-2025-62232) [apisix]
Posted by "juzhiyuan (via GitHub)" <gi...@apache.org>.
juzhiyuan closed issue #12820: help request: Apache APISIX LTS version security patches(CVE-2025-62232)
URL: https://github.com/apache/apisix/issues/12820
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org