v0.49.6
0.49.6 (May 17, 2023)
SECURITY:
- Upgrade to use Go 1.19.9.
This resolves vulnerabilities CVE-2023-24537(go/scanner
),
CVE-2023-24538(html/template
),
CVE-2023-24534(net/textproto
) and
CVE-2023-24536(mime/multipart
).
Also,golang.org/x/net
has been updated to v0.7.0 to resolve CVEs CVE-2022-41721
, CVE-2022-27664 and CVE-2022-41723 [GH-2110]
IMPROVEMENTS:
- helm: Set default
limits.cpu
resource setting tonull
forconsul-connect-inject-init
container to speed up registration times when onboarding services onto the mesh during the init container lifecycle. [GH-2008]