Update CHANGELOG.md

This commit is contained in:
Jack Pearkes 2018-12-06 19:15:44 -08:00 committed by GitHub
parent b64e8b262f
commit 60e2a38067
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 0 deletions

View File

@ -1,5 +1,9 @@
## 1.4.1 (UNRELEASED) ## 1.4.1 (UNRELEASED)
SECURITY:
* Fixed an issue that caused `verify_server_hostname` to not implicitly configure `verify_outgoing` to true. The documentation stated this was implicit. The previous implementation had a bug that resulted in this being partially incorrect and resulted in plaintext communication in agent-to-agent RPC when `verify_outgoing` was not explicitly set. (CVE-2018-19653) [[GH-5069](https://github.com/hashicorp/consul/issues/5069)]
## 1.4.0 (November 14, 2018) ## 1.4.0 (November 14, 2018)
FEATURES: FEATURES: