Consul - v1.10.7

1.10.7 (January 12, 2022)

SECURITY:

• namespaces: (Enterprise only) Creating or editing namespaces that include default ACL policies or ACL roles now requires acl:write permission in the default namespace. This change fixes CVE-2021-41805.

FEATURES:

• ui: Adds visible Consul version information [GH-11803]

BUG FIXES:

• Mutate NodeService struct properly to avoid a data race. [GH-11940]
• Upgrade to raft 1.3.3 which fixes a bug where a read replica node can trigger a raft election and become a leader. [GH-11958]
• ca: fixes a bug that caused non blocking leaf cert queries to return the same cached response regardless of ca rotation or leaf cert expiry [GH-11693]
• ca: fixes a bug that caused the SigningKeyID to be wrong in the primary DC, when the Vault provider is used, after a CA config creates a new root. [GH-11672]
• ca: fixes a bug that caused the intermediate cert used to sign leaf certs to be missing from the /connect/ca/roots API response when the Vault provider was used. [GH-11671]
• cli: Display assigned node identities in output of consul acl token list. [GH-11926]
• cli: when creating a private key, save the file with mode 0600 so that only the user has read permission. [GH-11781]
• snapshot: (Enterprise only) fixed a bug where the snapshot agent would ignore the license_path setting in config files
• structs: (Enterprise only) Remove partition field parsing from 1.10 to prevent further 1.11 upgrade compatibility issues.
• ui: Differentiate between Service Meta and Node Meta when choosing search fields
  in Service Instance listings [GH-11774]
• ui: Ensure we show a readonly designed page for readonly intentions [GH-11767]
• ui: Fix an issue where attempting to delete a policy from the policy detail page when
  attached to a token would result in the delete button disappearing and no
  deletion being attempted [GH-11868]
• ui: Fix visual issue with slight table header overflow [GH-11670]
• ui: Fixes an issue where once a 403 page is displayed in some circumstances its
  diffcult to click back to where you where before receiving a 403 [GH-11891]
• ui: Fixes an issue where under some circumstances after logging we present the
  data loaded previous to you logging in. [GH-11681]
• ui: Include Service.Namespace into available variables for dashboard_url_templates [GH-11640]
• ui: Revert to depending on the backend, 'post-user-action', to report
  permissions errors rather than using UI capabilities 'pre-user-action' [GH-11520]
• ui: Temporarily remove KV pre-flight check for KV list permissions [GH-11968]
• windows: Fixes a bug with empty log files when Consul is run as a Windows Service [GH-11960]
• xds: fix a deadlock when the snapshot channel already have a snapshot to be consumed. [GH-11924]