diff --git a/CHANGELOG.md b/CHANGELOG.md index 5c0e26893c..e0867f9f4b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## 1.8.1 / 2021-04-27 + +* [CHANGE] Fix for CVE-2021-31232: Local file disclosure vulnerability when `-experimental.alertmanager.enable-api` is used. The HTTP basic auth `password_file` can be used as an attack vector to send any file content via a webhook. The alertmanager templates can be used as an attack vector to send any file content because the alertmanager can load any text file specified in the templates list. + ## 1.8.0 / 2021-03-24 * [CHANGE] Alertmanager: Don't expose cluster information to tenants via the `/alertmanager/api/v1/status` API endpoint when operating with clustering enabled. #3903 diff --git a/VERSION b/VERSION index afa2b3515e..b9268dae24 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -1.8.0 \ No newline at end of file +1.8.1 \ No newline at end of file diff --git a/docs/guides/running-chunks-storage-with-cassandra.md b/docs/guides/running-chunks-storage-with-cassandra.md index 481c03de1e..9a18bd4e67 100644 --- a/docs/guides/running-chunks-storage-with-cassandra.md +++ b/docs/guides/running-chunks-storage-with-cassandra.md @@ -109,12 +109,12 @@ storage: ``` The latest tag is not published for the Cortex docker image. Visit quay.io/repository/cortexproject/cortex -to find the latest stable version tag and use it in the command below (currently it is `v1.8.0`). +to find the latest stable version tag and use it in the command below (currently it is `v1.8.1`). Run Cortex using the latest stable version: ``` -docker run -d --name=cortex -v $(pwd)/single-process-config.yaml:/etc/single-process-config.yaml -p 9009:9009 quay.io/cortexproject/cortex:v1.8.0 -config.file=/etc/single-process-config.yaml +docker run -d --name=cortex -v $(pwd)/single-process-config.yaml:/etc/single-process-config.yaml -p 9009:9009 quay.io/cortexproject/cortex:v1.8.1 -config.file=/etc/single-process-config.yaml ``` In case you prefer to run the master version, please follow this [documentation](../getting-started/getting-started-chunks.md) on how to build Cortex from source. diff --git a/k8s/alertmanager-dep.yaml b/k8s/alertmanager-dep.yaml index c63781d68e..6eaea37924 100644 --- a/k8s/alertmanager-dep.yaml +++ b/k8s/alertmanager-dep.yaml @@ -15,7 +15,7 @@ spec: spec: containers: - name: alertmanager - image: quay.io/cortexproject/cortex:v1.8.0 + image: quay.io/cortexproject/cortex:v1.8.1 imagePullPolicy: IfNotPresent args: - -target=alertmanager diff --git a/k8s/configs-dep.yaml b/k8s/configs-dep.yaml index f109335690..e7a39d2eaa 100644 --- a/k8s/configs-dep.yaml +++ b/k8s/configs-dep.yaml @@ -15,7 +15,7 @@ spec: spec: containers: - name: configs - image: quay.io/cortexproject/cortex:v1.8.0 + image: quay.io/cortexproject/cortex:v1.8.1 imagePullPolicy: IfNotPresent args: - -target=configs diff --git a/k8s/distributor-dep.yaml b/k8s/distributor-dep.yaml index c7a6cdc602..bc28b3711f 100644 --- a/k8s/distributor-dep.yaml +++ b/k8s/distributor-dep.yaml @@ -15,7 +15,7 @@ spec: spec: containers: - name: distributor - image: quay.io/cortexproject/cortex:v1.8.0 + image: quay.io/cortexproject/cortex:v1.8.1 imagePullPolicy: IfNotPresent args: - -target=distributor diff --git a/k8s/ingester-dep.yaml b/k8s/ingester-dep.yaml index c1e00ab0da..7468d78281 100644 --- a/k8s/ingester-dep.yaml +++ b/k8s/ingester-dep.yaml @@ -37,7 +37,7 @@ spec: containers: - name: ingester - image: quay.io/cortexproject/cortex:v1.8.0 + image: quay.io/cortexproject/cortex:v1.8.1 imagePullPolicy: IfNotPresent args: - -target=ingester diff --git a/k8s/querier-dep.yaml b/k8s/querier-dep.yaml index a8cc48bb99..7797cceff1 100644 --- a/k8s/querier-dep.yaml +++ b/k8s/querier-dep.yaml @@ -15,7 +15,7 @@ spec: spec: containers: - name: querier - image: quay.io/cortexproject/cortex:v1.8.0 + image: quay.io/cortexproject/cortex:v1.8.1 imagePullPolicy: IfNotPresent args: - -target=querier diff --git a/k8s/query-frontend-dep.yaml b/k8s/query-frontend-dep.yaml index 68796769fa..38a28f77e7 100644 --- a/k8s/query-frontend-dep.yaml +++ b/k8s/query-frontend-dep.yaml @@ -15,7 +15,7 @@ spec: spec: containers: - name: query-frontend - image: quay.io/cortexproject/cortex:v1.8.0 + image: quay.io/cortexproject/cortex:v1.8.1 imagePullPolicy: IfNotPresent args: - -target=query-frontend diff --git a/k8s/ruler-dep.yaml b/k8s/ruler-dep.yaml index aba08ce36d..7f2332e4c9 100644 --- a/k8s/ruler-dep.yaml +++ b/k8s/ruler-dep.yaml @@ -15,7 +15,7 @@ spec: spec: containers: - name: ruler - image: quay.io/cortexproject/cortex:v1.8.0 + image: quay.io/cortexproject/cortex:v1.8.1 imagePullPolicy: IfNotPresent args: - -target=ruler diff --git a/k8s/table-manager-dep.yaml b/k8s/table-manager-dep.yaml index 1777c62d89..f7e852e9bb 100644 --- a/k8s/table-manager-dep.yaml +++ b/k8s/table-manager-dep.yaml @@ -15,7 +15,7 @@ spec: spec: containers: - name: table-manager - image: quay.io/cortexproject/cortex:v1.8.0 + image: quay.io/cortexproject/cortex:v1.8.1 imagePullPolicy: IfNotPresent args: - -target=table-manager