CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: Update release notes for April 9 release (#4618)

Browse Source 
* docs: Update release notes for April 9 release

* Update website/content/docs/release-notes/v0_15_0.mdx

Co-authored-by: Michael Li <michael.li@hashicorp.com>

---------

Co-authored-by: Michael Li <michael.li@hashicorp.com>
This commit is contained in:
Dan HeathandMichael Li authored and GitHub committed 2024-04-09 17:59:11 -04:00
1 parent 31f4b73584
commit 8e2ac23a65
2 files changed
+41
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

website/content/docs/release-notes/v0_14_0.mdx
+20
View File
@@ -304,6 +304,26 @@ description: |-
</td>
</tr>
<tr>
<td style={{verticalAlign: 'middle'}}>
0.14.0
<br /><br />
(Fixed in 0.14.6)
</td>
<td style={{verticalAlign: 'middle'}}>
Go CVE-2023-45288
</td>
<td style={{verticalAlign: 'middle'}}>
The version of Go that was used in Boundary release 0.14.0 contained security vulnerabilities. The vulnerabilities were fixed in Go version 1.21.9. Boundary was updated to use the new Go version in release 0.14.6, and the issue is resolved.
<br /><br />
Learn more:&nbsp;
<br /><br />
CVE-2023-45288: <a href="https://www.cve.org/CVERecord?id=CVE-2023-45288">HTTP/2 CONTINUATION flood in net/http</a>
<br /><br />
<a href="/boundary/tutorials/self-managed-deployment/upgrade-version">Upgrade to the latest version of Boundary</a>
</td>
</tr>
</tbody>
</table>
website/content/docs/release-notes/v0_15_0.mdx
+21
View File
@@ -270,6 +270,27 @@ description: |-
</td>
</tr>
<tr>
<td style={{verticalAlign: 'middle'}}>
0.15.0
<br /><br />
(Fixed in 0.15.4)
</td>
<td style={{verticalAlign: 'middle'}}>
Go CVE-2023-45288
</td>
<td style={{verticalAlign: 'middle'}}>
The version of Go that was used in Boundary release 0.15.0 contained security vulnerabilities. The vulnerabilities were fixed in Go version 1.21.9. Boundary was updated to use the new Go version in release 0.15.4, and the issue is resolved.
<br /><br />
Learn more:&nbsp;
<br /><br />
CVE-2023-45288: <a href="https://www.cve.org/CVERecord?id=CVE-2023-45288">HTTP/2 CONTINUATION flood in net/http</a>
<br /><br />
<a href="/boundary/tutorials/self-managed-deployment/upgrade-version">Upgrade to the latest version of Boundary</a>
</td>
</tr>
</tbody>
</table>