Consul - v1.9.14

1.9.14 (January 12, 2022)

SECURITY:

• namespaces: (Enterprise only) Creating or editing namespaces that include default ACL policies or ACL roles now requires acl:write permission in the default namespace. This change fixes CVE-2021-41805.

BUG FIXES:

• ca: fixes a bug that caused non blocking leaf cert queries to return the same cached response regardless of ca rotation or leaf cert expiry [GH-11693]
• ca: fixes a bug that caused the intermediate cert used to sign leaf certs to be missing from the /connect/ca/roots API response when the Vault provider was used. [GH-11671]
• cli: Display assigned node identities in output of consul acl token list. [GH-11926]
• cli: when creating a private key, save the file with mode 0600 so that only the user has read permission. [GH-11781]
• snapshot: (Enterprise only) fixed a bug where the snapshot agent would ignore the license_path setting in config files
• ui: Differentiate between Service Meta and Node Meta when choosing search fields
  in Service Instance listings [GH-11774]
• ui: Fixes an issue where under some circumstances after logging we present the
  data loaded previous to you logging in. [GH-11681]
• ui: Fixes an issue where under some circumstances the namespace selector could
  become 'stuck' on the default namespace [GH-11830]
• ui: Include Service.Namespace into available variables for dashboard_url_templates [GH-11640]
• ui: Prevent disconnection notice appearing with auth change on certain pages [GH-11905]
• xds: fix a deadlock when the snapshot channel already have a snapshot to be consumed. [GH-11924]