From 62e591f928ddf6b3468308b7ac1de1c63aa7fcf3 Mon Sep 17 00:00:00 2001 From: Goutham Veeramachaneni Date: Thu, 31 Jan 2019 12:13:25 +0100 Subject: [PATCH] *: cut 2.7.1 (#5164) Signed-off-by: Goutham Veeramachaneni --- CHANGELOG.md | 8 ++++++++ VERSION | 2 +- 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index b7edb57aa..88ac47b86 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,11 @@ +## 2.7.1 / 2019-01-31 + +This release has a fix for a Stored DOM XSS vulnerability that can be triggered when using the query history functionality. Thanks to Dor Tumarkin from Checkmarx for reporting it. + +* [BUGFIX/SECURITY] Fix a Stored DOM XSS vulnerability with query history. #5163 +* [BUGFIX] `prometheus_rule_group_last_duration_seconds` now reports seconds instead of nanoseconds. #5153 +* [BUGFIX] Make sure the targets are consistently sorted in the targets page. #5161 + ## 2.7.0 / 2019-01-28 We're rolling back the Dockerfile changes introduced in 2.6.0. If you made changes to your docker deployment in 2.6.0, you will need to roll them back. This release also adds experimental support for disk size based retention. To accomodate that we are deprecating the flag `storage.tsdb.retention` in favour of `storage.tsdb.retention.time`. We print a warning if the flag is in use, but it will function without breaking until Prometheus 3.0. diff --git a/VERSION b/VERSION index 24ba9a38d..860487ca1 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -2.7.0 +2.7.1