Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merge release/1.6.10 back into release/1.6.x #9244

Merged
merged 7 commits into from
Nov 19, 2020
Merged

Merge release/1.6.10 back into release/1.6.x #9244

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
a5ab619
Require operator:write to get Connect CA config (#9240)
freddygv Nov 19, 2020
1827a72
Update docs to reflect when CA config perms changed
freddygv Nov 19, 2020
2b0fc6e
Update changelog
freddygv Nov 19, 2020
cdc7468
update bindata_assetfs.go
hashicorp-ci Nov 19, 2020
b3c2d38
Release v1.6.10
hashicorp-ci Nov 19, 2020
8b34d2e
Putting source back into Dev Mode
hashicorp-ci Nov 19, 2020
1cc5e23
Merge branch 'release/1.6.x' into release/1.6.10
freddygv Nov 19, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,11 @@
## UNRELEASED

## 1.6.10 (November 19, 2020)

SECURITY:

* Increase the permissions to read from the `/connect/ca/configuration` endpoint to `operator:write`. Previously Connect CA configuration, including the private key, set via this endpoint could be read back by an operator with `operator:read` privileges. [CVE-2020-28053](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28053) [[GH-9240](https://github.com/hashicorp/consul/issues/9240)]

## 1.6.9 (September 11, 2020)

BUG FIXES:
Expand Down
96 changes: 48 additions & 48 deletions agent/bindata_assetfs.go
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion version/version.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ var (
//
// Version must conform to the format expected by github.com/hashicorp/go-version
// for tests to work.
Version = "1.6.9"
Version = "1.6.10"

// A pre-release marker for the version. If this is "" (empty string)
// then it means that it is a final release. Otherwise, this is a pre-release
Expand Down
2 changes: 1 addition & 1 deletion website/config.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

activate :hashicorp do |h|
h.name = "consul"
h.version = "1.6.9"
h.version = "1.6.10"
h.github_slug = "hashicorp/consul"
end

Expand Down