From d74611b6f6ee0db6c0bce2c8e32d93031926d30e Mon Sep 17 00:00:00 2001 From: Louis Ruch Date: Wed, 15 Dec 2021 07:43:43 -0800 Subject: [PATCH] release: Update changelog for 0.7.2 --- CHANGELOG.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 1791955000..151e3c2e44 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -31,6 +31,15 @@ Canonical reference for changes, improvements, and bugfixes for Boundary. * plugins/aws: AWS plugin based hosts now include DNS names in addition to the IP addresses they already provide. +## 0.7.2 (2021/12/14) + +### Security + +* Boundary now uses Go 1.17.5 to address a security vulnerability (CVE-2021-44716) where + an attacker can cause unbounded memory growth in a Go server accepting HTTP/2 requests. + See the [Go announcement](https://groups.google.com/g/golang-announce/c/hcmEScgc00k) for + more details. ([PR](https://github.com/hashicorp/boundary/pull/1789)) + ## 0.7.1 (2021/11/18) ### Bug Fixes