From 2a8dd7bba78dfad97501c0bc02b505cf68b0a9f1 Mon Sep 17 00:00:00 2001 From: Lauren Voswinkel Date: Tue, 26 Jan 2021 13:50:39 -0800 Subject: [PATCH] CHANGELOG update: GCP secrets WAL issue fix (#10776) * CHANGELOG update: GCP secrets WAL issue fix * Add changelog 10759.txt file --- CHANGELOG.md | 2 +- changelog/10759.txt | 3 +++ 2 files changed, 4 insertions(+), 1 deletion(-) create mode 100644 changelog/10759.txt diff --git a/CHANGELOG.md b/CHANGELOG.md index fca527d40..5a5959e21 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -43,7 +43,7 @@ initialized=true when a Raft join is in progress. [[GH-10498](https://github.com SECURITY: * LDAP Auth Method: We addressed an issue where error messages returned by the - LDAP auth methold allowed user enumeration [[GH-10537](https://github.com/hashicorp/vault/pull/10537)]. This vulnerability affects Vault OSS and Vault + LDAP auth method allowed user enumeration [[GH-10537](https://github.com/hashicorp/vault/pull/10537)]. This vulnerability affects Vault OSS and Vault Enterprise and is fixed in 1.5.6 and 1.6.1 (CVE-2020-35177). * Sentinel EGP: We've fixed incorrect handling of namespace paths to prevent users within namespaces from applying Sentinel EGP policies to paths above diff --git a/changelog/10759.txt b/changelog/10759.txt new file mode 100644 index 000000000..81027d0b9 --- /dev/null +++ b/changelog/10759.txt @@ -0,0 +1,3 @@ +```release-note:bug +secrets/gcp: Fix issue with account and iam_policy roleset WALs not being removed after attempts when GCP project no longer exists +``` \ No newline at end of file