From 90ec561804510e72963bc2d79203dde85936be79 Mon Sep 17 00:00:00 2001 From: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Date: Mon, 10 Feb 2025 13:53:07 -0500 Subject: [PATCH] docs: Update 0.17.x and 0.18.x release notes (#5533) * docs: Update 0.17.x and 0.18.x release notes * docs: Rephrase language re. Go update --- .../content/docs/release-notes/v0_17_0.mdx | 67 +++++++++++++++++++ .../content/docs/release-notes/v0_18_0.mdx | 67 +++++++++++++++++++ 2 files changed, 134 insertions(+) diff --git a/website/content/docs/release-notes/v0_17_0.mdx b/website/content/docs/release-notes/v0_17_0.mdx index 391adbbe0..22d6e77a6 100644 --- a/website/content/docs/release-notes/v0_17_0.mdx +++ b/website/content/docs/release-notes/v0_17_0.mdx @@ -242,6 +242,73 @@ description: >- + + + 0.16.0 - 0.17.3 +

+ (Fixed in Boundary Enterprise 0.17.4) + + + Performance is impacted by query + + + A query that was added with the aliases feature performed a full table scan of the target table. The scan could negatively impact performance. +

+ The scan was replaced with a more efficient method for scanning targets. This issue has been resolved. +

+ Upgrade to the latest version of Boundary +

+ + + + + + 0.16.0 - 0.17.3 +

+ (Fixed in Boundary Enterprise 0.17.4) + + + Performance is impacted by database transactions + + + Database transactions were not using the correct reader and writer functions or context. This issue could cause delays and negatively impact system performance. +

+ A number of minor fixes were added to improve the way Boundary performs database transactions. This issue has been resolved. +

+ Upgrade to the latest version of Boundary +

+ + + + + + 0.17.0 - 0.17.3 +

+ (Fixed in Boundary Enterprise 0.17.4) + + + GO-2024-3333 +

+ CVE-2024-45338 +

+ CVE-2024-45337 + + + The Go dependencies that were used in Boundary release 0.17.x contained security vulnerabilities. Boundary Enterprise 0.17.4 was updated to use new versions of the dependencies. This issue is resolved. +

+ Learn more: +

+ GO-2024-3333: An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service. +

+ CVE-2024-45338: Non-linear parsing of case-insensitive content in golang.org/x/net/html +

+ CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto +

+ Upgrade to the latest version of Boundary +

+ + + \ No newline at end of file diff --git a/website/content/docs/release-notes/v0_18_0.mdx b/website/content/docs/release-notes/v0_18_0.mdx index 8b4d0c5de..465ba1610 100644 --- a/website/content/docs/release-notes/v0_18_0.mdx +++ b/website/content/docs/release-notes/v0_18_0.mdx @@ -259,5 +259,72 @@ description: >- + + + 0.16.0 - 0.18.2 +

+ (Fixed in Boundary Enterprise 0.18.3) + + + Performance is impacted by query + + + A query that was added with the aliases feature performed a full table scan of the target table. The scan could negatively impact performance. +

+ The scan was replaced with a more efficient method for scanning targets. This issue has been resolved. +

+ Upgrade to the latest version of Boundary +

+ + + + + + 0.16.0 - 0.18.2 +

+ (Fixed in Boundary Enterprise 0.18.3) + + + Performance is impacted by database transactions + + + Database transactions were not using the correct reader and writer functions or context. This issue could cause delays and negatively impact system performance. +

+ A number of minor fixes were added to improve the way Boundary performs database transactions. This issue has been resolved. +

+ Upgrade to the latest version of Boundary +

+ + + + + + 0.17.0 - 0.18.2 +

+ (Fixed in Boundary Enterprise 0.18.3) + + + GO-2024-3333 +

+ CVE-2024-45338 +

+ CVE-2024-45337 + + + The Go dependencies that were used in Boundary release 0.18.x contained security vulnerabilities. Boundary Enterprise 0.18.3 was updated to use new versions of the dependencies. This issue is resolved. +

+ Learn more: +

+ GO-2024-3333: An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service. +

+ CVE-2024-45338: Non-linear parsing of case-insensitive content in golang.org/x/net/html +

+ CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto +

+ Upgrade to the latest version of Boundary +

+ + + \ No newline at end of file