Document consul issue
PR: 251418 Submitted by: brd
This commit is contained in:
parent
fe9bfb0229
commit
2f3eff6b1f
Notes:
svn2git
2021-03-31 03:12:20 +00:00
svn path=/head/; revision=557178
1 changed files with 30 additions and 0 deletions
|
@ -58,6 +58,36 @@ Notes:
|
|||
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
|
||||
-->
|
||||
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
|
||||
<vuln vid="8d17229f-3054-11eb-a455-ac1f6b16e566">
|
||||
<topic>consul -- Fix Consul Connect CA private key configuration</topic>
|
||||
<affects>
|
||||
<package>
|
||||
<name>consul</name>
|
||||
<range><lt>1.9.0</lt></range>
|
||||
</package>
|
||||
</affects>
|
||||
<description>
|
||||
<body xmlns="http://www.w3.org/1999/xhtml">
|
||||
<p>Hashicorp reports:</p>
|
||||
<blockquote cite="https://github.com/hashicorp/consul/blob/master/CHANGELOG.md">
|
||||
<p>Increase the permissions to read from the
|
||||
/connect/ca/configuration endpoint to operator:write.
|
||||
Previously Connect CA configuration, including the private
|
||||
key, set via this endpoint could be read back by an operator
|
||||
with operator:read privileges.</p>
|
||||
</blockquote>
|
||||
</body>
|
||||
</description>
|
||||
<references>
|
||||
<url>https://github.com/hashicorp/consul/blob/master/CHANGELOG.md</url>
|
||||
<cvename>CVE-2020-28053</cvename>
|
||||
</references>
|
||||
<dates>
|
||||
<discovery>2020-11-02</discovery>
|
||||
<entry>2020-12-06</entry>
|
||||
</dates>
|
||||
</vuln>
|
||||
|
||||
<vuln vid="01ffd06a-36ed-11eb-b655-3065ec8fd3ec">
|
||||
<topic>chromium -- multiple vulnerabilities</topic>
|
||||
<affects>
|
||||
|
|
Loading…
Reference in a new issue