CHANGELOG update: GCP secrets WAL issue fix (#10776)

* CHANGELOG update: GCP secrets WAL issue fix

* Add changelog 10759.txt file
This commit is contained in:
Lauren Voswinkel 2021-01-26 13:50:39 -08:00 committed by GitHub
parent 8fe7b403ba
commit 2a8dd7bba7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 1 deletions

View File

@ -43,7 +43,7 @@ initialized=true when a Raft join is in progress. [[GH-10498](https://github.com
SECURITY:
* LDAP Auth Method: We addressed an issue where error messages returned by the
LDAP auth methold allowed user enumeration [[GH-10537](https://github.com/hashicorp/vault/pull/10537)]. This vulnerability affects Vault OSS and Vault
LDAP auth method allowed user enumeration [[GH-10537](https://github.com/hashicorp/vault/pull/10537)]. This vulnerability affects Vault OSS and Vault
Enterprise and is fixed in 1.5.6 and 1.6.1 (CVE-2020-35177).
* Sentinel EGP: We've fixed incorrect handling of namespace paths to prevent
users within namespaces from applying Sentinel EGP policies to paths above

3
changelog/10759.txt Normal file
View File

@ -0,0 +1,3 @@
```release-note:bug
secrets/gcp: Fix issue with account and iam_policy roleset WALs not being removed after attempts when GCP project no longer exists
```