v1.9.14
1.9.14 (January 12, 2022)
SECURITY:
- namespaces: (Enterprise only) Creating or editing namespaces that include default ACL policies or ACL roles now requires
acl:write
permission in the default namespace. This change fixes CVE-2021-41805.
BUG FIXES:
- ca: fixes a bug that caused non blocking leaf cert queries to return the same cached response regardless of ca rotation or leaf cert expiry [GH-11693]
- ca: fixes a bug that caused the intermediate cert used to sign leaf certs to be missing from the /connect/ca/roots API response when the Vault provider was used. [GH-11671]
- cli: Display assigned node identities in output of
consul acl token list
. [GH-11926] - cli: when creating a private key, save the file with mode 0600 so that only the user has read permission. [GH-11781]
- snapshot: (Enterprise only) fixed a bug where the snapshot agent would ignore the
license_path
setting in config files - ui: Differentiate between Service Meta and Node Meta when choosing search fields
in Service Instance listings [GH-11774] - ui: Fixes an issue where under some circumstances after logging we present the
data loaded previous to you logging in. [GH-11681] - ui: Fixes an issue where under some circumstances the namespace selector could
become 'stuck' on the default namespace [GH-11830] - ui: Include
Service.Namespace
into available variables fordashboard_url_templates
[GH-11640] - ui: Prevent disconnection notice appearing with auth change on certain pages [GH-11905]
- xds: fix a deadlock when the snapshot channel already have a snapshot to be consumed. [GH-11924]