v1.10.7
1.10.7 (January 12, 2022)
SECURITY:
- namespaces: (Enterprise only) Creating or editing namespaces that include default ACL policies or ACL roles now requires
acl:write
permission in the default namespace. This change fixes CVE-2021-41805.
FEATURES:
- ui: Adds visible Consul version information [GH-11803]
BUG FIXES:
- Mutate
NodeService
struct properly to avoid a data race. [GH-11940] - Upgrade to raft
1.3.3
which fixes a bug where a read replica node can trigger a raft election and become a leader. [GH-11958] - ca: fixes a bug that caused non blocking leaf cert queries to return the same cached response regardless of ca rotation or leaf cert expiry [GH-11693]
- ca: fixes a bug that caused the SigningKeyID to be wrong in the primary DC, when the Vault provider is used, after a CA config creates a new root. [GH-11672]
- ca: fixes a bug that caused the intermediate cert used to sign leaf certs to be missing from the /connect/ca/roots API response when the Vault provider was used. [GH-11671]
- cli: Display assigned node identities in output of
consul acl token list
. [GH-11926] - cli: when creating a private key, save the file with mode 0600 so that only the user has read permission. [GH-11781]
- snapshot: (Enterprise only) fixed a bug where the snapshot agent would ignore the
license_path
setting in config files - structs: (Enterprise only) Remove partition field parsing from 1.10 to prevent further 1.11 upgrade compatibility issues.
- ui: Differentiate between Service Meta and Node Meta when choosing search fields
in Service Instance listings [GH-11774] - ui: Ensure we show a readonly designed page for readonly intentions [GH-11767]
- ui: Fix an issue where attempting to delete a policy from the policy detail page when
attached to a token would result in the delete button disappearing and no
deletion being attempted [GH-11868] - ui: Fix visual issue with slight table header overflow [GH-11670]
- ui: Fixes an issue where once a 403 page is displayed in some circumstances its
diffcult to click back to where you where before receiving a 403 [GH-11891] - ui: Fixes an issue where under some circumstances after logging we present the
data loaded previous to you logging in. [GH-11681] - ui: Include
Service.Namespace
into available variables fordashboard_url_templates
[GH-11640] - ui: Revert to depending on the backend, 'post-user-action', to report
permissions errors rather than using UI capabilities 'pre-user-action' [GH-11520] - ui: Temporarily remove KV pre-flight check for KV list permissions [GH-11968]
- windows: Fixes a bug with empty log files when Consul is run as a Windows Service [GH-11960]
- xds: fix a deadlock when the snapshot channel already have a snapshot to be consumed. [GH-11924]