Skip to content

v1.8.6

Compare
Choose a tag to compare
@hashicorp-ci hashicorp-ci released this 19 Nov 22:18
· 9892 commits to main since this release

1.8.6 (November 19, 2020)

SECURITY:

  • Increase the permissions to read from the /connect/ca/configuration endpoint to operator:write. Previously Connect CA configuration, including the private key, set via this endpoint could be read back by an operator with operator:read privileges. CVE-2020-28053 [GH-9240]