Add release note for broken trusted config loading fix

We should have this to make a release.

Change-Id: If68512cf8816051a52edd60203c599a260cc0a7b
This commit is contained in:
Clark Boylan 2019-04-15 15:52:14 -07:00
parent a1f18dc461
commit dded67262e
1 changed files with 10 additions and 0 deletions

View File

@ -0,0 +1,10 @@
---
security:
- |
Fixed a bug where config (trusted) layout updates could be used
pre-merge as a dynamically loaded layout. This could happen if Zuul
was running with config errors that originated from outside of
the config (trusted) repo. A logic error allowed code to fall
through and return the trusted layout in this case.
Users should upgrade.