Nomad v0.9.5 Release Notes
Release Date: 2019-08-21 // over 4 years ago-
๐ SECURITY:
- client/template: Fix security vulnerabilities associated with task template rendering (CVE-2019-14802), introduced in Nomad 0.5.0 [GH-6055] [GH-6075]
- client/artifact: Fix a privilege escalation in the
exec
driver exploitable by artifacts with setuid permissions (CVE-2019-14803) [GH-6176]
BACKWARDS INCOMPATIBILITIES:
- client/template: When rendering a task template, only task environment variables are included by default. [GH-6055]
- client/template: When rendering a task template, the
plugin
function is no longer permitted by default and will raise an error. [GH-6075] - client/template: When rendering a task template, path parameters for the
file
function will be restricted to the task directory by default. Relative paths or symlinks that point outside the task directory will raise an error. [GH-6075]
๐ IMPROVEMENTS:
- core: Added create and modify timestamps to evaluations [GH-5881]
๐ BUG FIXES: