zuul
/
zuul
Code Issues Proposed changes

Merge "Add release note for broken trusted config loading fix"

changes/64/652764/4 3.8.0
Zuul 2019-04-16 02:29:31 +00:00 committed by Gerrit Code Review
parent 0bb220c437 dded67262e
commit dc9347c122
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
releasenotes/notes/fix-broken-trusted-config-updates-b68948bdbead17b2.yaml Normal file
View File

@ -0,0 +1,10 @@
---
security:
- |
Fixed a bug where config (trusted) layout updates could be used
pre-merge as a dynamically loaded layout. This could happen if Zuul
was running with config errors that originated from outside of
the config (trusted) repo. A logic error allowed code to fall
through and return the trusted layout in this case.
Users should upgrade.