Skip to content

v0.7.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Jul 10:39
v0.7.2
65f3107
This commit was signed with the committer’s verified signature.
juev Evsyukov Denis
SSH Key Fingerprint: 9PqBwwb/C6yRLjSpmuZRUz3lNtu96wHPhHx4K4/3Sbk
Verified
Learn about vigilant mode.

nebula-mesh v0.7.2

Install — see README for the full snippets.

  • Server: nebula-mgmt_0.7.2_<os>_<arch>.tar.gz or docker pull ghcr.io/forgekeep/nebula-mgmt:0.7.2
  • Agent: nebula-agent_0.7.2_<os>_<arch>.tar.gz or docker pull ghcr.io/forgekeep/nebula-agent:0.7.2

Security

  • GHSA-7rx3-5wx3-5v76 — missing authorization / SSRF (CVSS 7.7, High). A non-admin operator (role user) could set allow_private on a webhook subscription, switching the dispatcher to the unguarded HTTP client and bypassing the private/loopback/link-local SSRF guard at delivery. allow_private is now admin-only. Affects 0.6.0–0.7.1; fixed in 0.7.2.

Changelog

Bug fixes

  • 65f3107: fix(goreleaser): single-quote docs changelog filter regexp (@juev)

Others

  • 2c3457c: chore(goreleaser): exclude scoped docs and fork-merge from changelog (@juev)

Full changelog: v0.7.1...v0.7.2

Contributors

juev
Assets 25
Loading