changelog++

hashicorp · Apr 11, 2019 · 6c49db3 · 6c49db3
1 parent 2a76e2c
commit 6c49db3
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -15,6 +15,9 @@ SECURITY:
    nodes is sufficient to cause the performance standby nodes to clear their
    cache. A CVE is in the process of being issued; the number is
    CVE-2019-11075.
+ * Roles in the JWT Auth backend using the OIDC login flow (i.e. role_type of
+   “oidc”) were not enforcing bound_cidrs restrictions, if any were configured
+   for the role. This issue did not affect roles of type “jwt”.
 
 CHANGES: