Merge pull request #7026 from hashicorp/post-0103

Post 0103

CHANGELOG.md

@@ -1,4 +1,4 @@
-## 0.10.3 (Unreleased)
+## 0.10.4 (Unreleased)
 
 FEATURES:
 
@@ -26,6 +26,17 @@ BUG FIXES:
  * scheduler: Fixed a bug that caused evicted allocs on a lost node to be stuck in running. [[GH-6902](https://github.com/hashicorp/nomad/issues/6902)]
  * scheduler: Fixed a bug where `nomad job plan/apply` returned errors instead of a partial placement warning for ineligible nodes. [[GH-6968](https://github.com/hashicorp/nomad/issues/6968)]
 
+## 0.10.3 (January 29, 2020)
+
+SECURITY:
+
+ * agent: Added unauthenticated connection timeouts and limits to prevent resource exhaustion. CVE-2020-7218 [GH-7002]
+ * server: Fixed insufficient validation for role and region for RPC connections when TLS enabled. CVE-2020-7956 [GH-7003]
+
+IMPROVEMENTS:
+
+ * build: Updated to Go 1.12.16
+
 ## 0.10.2 (December 4, 2019)
 
 NOTES:

demo/vagrant/Vagrantfile

@@ -25,7 +25,7 @@ sudo docker --version
 sudo apt-get install unzip curl vim -y
 
 echo "Installing Nomad..."
-NOMAD_VERSION=0.10.2
+NOMAD_VERSION=0.10.3
 cd /tmp/
 curl -sSL https://releases.hashicorp.com/nomad/${NOMAD_VERSION}/nomad_${NOMAD_VERSION}_linux_amd64.zip -o nomad.zip
 unzip nomad.zip

website/config.rb

@@ -2,7 +2,7 @@ set :base_url, "https://www.nomadproject.io/"
 
 activate :hashicorp do |h|
   h.name        = "nomad"
-  h.version     = "0.10.2"
+  h.version     = "0.10.3"
   h.github_slug = "hashicorp/nomad"
 end