Skip to content

Commit

Permalink
Release v0.9.6
Browse files Browse the repository at this point in the history
  • Loading branch information
Mahmood Ali committed Oct 7, 2019
1 parent 1f8eddf commit 496e158
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,10 +1,10 @@
## 0.9.6 (Unreleased)
## 0.9.6 (October 7, 2019)

SECURITY:

* core: Redacted replication token in agent/self API endpoint. The replication token is a management token that can be used for further privilege escalation. CVE-2019-12741 [GH-????]
* core: Fixed a bug where a user may start raw_exec task on clients despite driver being disabled. CVE-2019-15928 [[GH-6227](https://github.com/hashicorp/nomad/issues/6227)] [GH-???]
* enterprise/acl: Fix ACL access checks where users may query allocation information and perform lifecycle actions in namespaces they are not authorized to in Enterprise clusters. CVE-2019-16742 [GH-???]
* core: Redacted replication token in agent/self API endpoint. The replication token is a management token that can be used for further privilege escalation. CVE-2019-12741 [[GH-6430](https://github.com/hashicorp/nomad/issues/6430)]
* core: Fixed a bug where a user may start raw_exec task on clients despite driver being disabled. CVE-2019-15928 [[GH-6227](https://github.com/hashicorp/nomad/issues/6227)] [[GH-6431](https://github.com/hashicorp/nomad/issues/6431)]
* enterprise/acl: Fix ACL access checks in Nomad Enterprise where users may query allocation information and perform lifecycle actions in namespaces they are not authorized to. CVE-2019-16742 [[GH-6432](https://github.com/hashicorp/nomad/issues/6432)]

IMPROVEMENTS:

Expand Down

0 comments on commit 496e158

Please sign in to comment.