Skip to content

Commit 7487550

Browse files
author
Jesse
authoredNov 23, 2021
Update changelog to incorporate security fixes and #5632 & #5606 (#5654)
* Update changelog to incorporate security fixes and #5632 & #5606 * Added reference to sqlite fix
1 parent 61bbb5a commit 7487550

File tree

1 file changed

+14
-0
lines changed

1 file changed

+14
-0
lines changed
 

‎CHANGELOG.md

+14
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,19 @@
11
# Change Log
22

3+
## V10.1.0 - 2021-11-23
4+
5+
This release includes patches for three security vulnerabilities:
6+
7+
- Insecure default configuration affects installations where REDASH_COOKIE_SECRET is not set explicitly (CVE-2021-41192)
8+
- SSRF vulnerability affects installations that enabled URL-loading data sources (CVE-2021-43780)
9+
- Incorrect usage of state parameter in OAuth client code affects installations where Google Login is enabled (CVE-2021-43777)
10+
11+
And a couple features that didn't merge in time for 10.0.0
12+
13+
- Big Query: Speed up schema loading (#5632)
14+
- Add support for Firebolt data source (#5606)
15+
- Fix: Loading schema for Sqlite DB with "Order" column name fails (#5623)
16+
317
## v10.0.0 - 2021-10-01
418

519
A few changes were merged during the V10 beta period.

0 commit comments

Comments
 (0)
Please sign in to comment.