From 0e6a2bb39149f74ddf3907691095d0e430b4bc81 Mon Sep 17 00:00:00 2001 From: Graham Goudeau Date: Tue, 12 Nov 2019 21:14:24 -0500 Subject: [PATCH] Reword changelog to be clearer about the security implications of the fix (#1687) * Reword changelog to be clearer about the security implications of the fix --- changelog/v0.21.1/remove-logging.yaml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/changelog/v0.21.1/remove-logging.yaml b/changelog/v0.21.1/remove-logging.yaml index 350371b014b..78a5944acd8 100644 --- a/changelog/v0.21.1/remove-logging.yaml +++ b/changelog/v0.21.1/remove-logging.yaml @@ -1,4 +1,7 @@ changelog: - type: FIX - description: Remove an overly-verbose log line + description: > + **Security Fix**: Fix a bug where, when Gloo's logging level is set to Debug, we may inadvertently write + the content of Secrets into the pod logs. We now print the same content into the logs, but with + the Secret data redacted. issueLink: https://github.com/solo-io/gloo/issues/1679