Prepare release 1.8.1.

Signed-off-by: Peter Štibraný <[email protected]>
cortexproject · Apr 19, 2021 · 4afaa35 · 4afaa35
1 parent 95fd826
commit 4afaa35
Show file tree

Hide file tree

Showing 11 changed files with 15 additions and 11 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.8.1 / 2021-04-27
+
+* [CHANGE] Fix for CVE-2021-31232: Local file disclosure vulnerability when `-experimental.alertmanager.enable-api` is used. The HTTP basic auth `password_file` can be used as an attack vector to send any file content via a webhook. The alertmanager templates can be used as an attack vector to send any file content because the alertmanager can load any text file specified in the templates list.
+
 ## 1.8.0 / 2021-03-24
 
 * [CHANGE] Alertmanager: Don't expose cluster information to tenants via the `/alertmanager/api/v1/status` API endpoint when operating with clustering enabled. #3903

diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-1.8.0
+1.8.1
diff --git a/docs/guides/running-chunks-storage-with-cassandra.md b/docs/guides/running-chunks-storage-with-cassandra.md
@@ -109,12 +109,12 @@ storage:
 ```
 
 The latest tag is not published for the Cortex docker image. Visit quay.io/repository/cortexproject/cortex
-to find the latest stable version tag and use it in the command below (currently it is `v1.8.0`).
+to find the latest stable version tag and use it in the command below (currently it is `v1.8.1`).
 
 Run Cortex using the latest stable version:
 
 ```
-docker run -d --name=cortex -v $(pwd)/single-process-config.yaml:/etc/single-process-config.yaml -p 9009:9009  quay.io/cortexproject/cortex:v1.8.0 -config.file=/etc/single-process-config.yaml
+docker run -d --name=cortex -v $(pwd)/single-process-config.yaml:/etc/single-process-config.yaml -p 9009:9009  quay.io/cortexproject/cortex:v1.8.1 -config.file=/etc/single-process-config.yaml
 ```
 In case you prefer to run the master version, please follow this [documentation](../getting-started/getting-started-chunks.md) on how to build Cortex from source.
 

diff --git a/k8s/alertmanager-dep.yaml b/k8s/alertmanager-dep.yaml
@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
       - name: alertmanager
-        image: quay.io/cortexproject/cortex:v1.8.0
+        image: quay.io/cortexproject/cortex:v1.8.1
         imagePullPolicy: IfNotPresent
         args:
         - -target=alertmanager

diff --git a/k8s/configs-dep.yaml b/k8s/configs-dep.yaml
@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
       - name: configs
-        image: quay.io/cortexproject/cortex:v1.8.0
+        image: quay.io/cortexproject/cortex:v1.8.1
         imagePullPolicy: IfNotPresent
         args:
         - -target=configs

diff --git a/k8s/distributor-dep.yaml b/k8s/distributor-dep.yaml
@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
       - name: distributor
-        image: quay.io/cortexproject/cortex:v1.8.0
+        image: quay.io/cortexproject/cortex:v1.8.1
         imagePullPolicy: IfNotPresent
         args:
         - -target=distributor

diff --git a/k8s/ingester-dep.yaml b/k8s/ingester-dep.yaml
@@ -37,7 +37,7 @@ spec:
 
       containers:
       - name: ingester
-        image: quay.io/cortexproject/cortex:v1.8.0
+        image: quay.io/cortexproject/cortex:v1.8.1
         imagePullPolicy: IfNotPresent
         args:
         - -target=ingester

diff --git a/k8s/querier-dep.yaml b/k8s/querier-dep.yaml
@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
       - name: querier
-        image: quay.io/cortexproject/cortex:v1.8.0
+        image: quay.io/cortexproject/cortex:v1.8.1
         imagePullPolicy: IfNotPresent
         args:
         - -target=querier

diff --git a/k8s/query-frontend-dep.yaml b/k8s/query-frontend-dep.yaml
@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
       - name: query-frontend
-        image: quay.io/cortexproject/cortex:v1.8.0
+        image: quay.io/cortexproject/cortex:v1.8.1
         imagePullPolicy: IfNotPresent
         args:
         - -target=query-frontend

diff --git a/k8s/ruler-dep.yaml b/k8s/ruler-dep.yaml
@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
       - name: ruler
-        image: quay.io/cortexproject/cortex:v1.8.0
+        image: quay.io/cortexproject/cortex:v1.8.1
         imagePullPolicy: IfNotPresent
         args:
         - -target=ruler

diff --git a/k8s/table-manager-dep.yaml b/k8s/table-manager-dep.yaml
@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
       - name: table-manager
-        image: quay.io/cortexproject/cortex:v1.8.0
+        image: quay.io/cortexproject/cortex:v1.8.1
         imagePullPolicy: IfNotPresent
         args:
         - -target=table-manager