Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
https://github.com/hashicorp/nomad/releases/tag/v1.5.7 CVE notes from upstream: acl: Fixed a bug where a namespace ACL policy without label was applied to an unexpected namespace. CVE-2023-3072 [hashicorp/nomad#17908] search: Fixed a bug where ACL did not filter plugin and variable names in search endpoint. CVE-2023-3300 [hashicorp/nomad#17906] sentinel (Enterprise): Fixed a bug where ACL tokens could be exfiltrated via Sentinel logs CVE-2023-3299 [hashicorp/nomad#17907]
- Loading branch information