Prepare v0.57.1 release

Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>
open-policy-agent · Oct 18, 2023 · fc26bd1 · fc26bd1
1 parent 6eabc13
commit fc26bd1
Show file tree

Hide file tree

Showing 4 changed files with 4,918 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file. This
 project adheres to [Semantic Versioning](http://semver.org/).
 
+## 0.57.1
+
+This is a bug fix release addressing the following security issues:
+
+### Golang security fix GO-2023-2102
+
+> A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption.
+
+### OpenTelemetry-Go Contrib security fix CVE-2023-45142
+
+> Denial of service in otelhttp due to unbound cardinality metrics.
+
 ## 0.57.0
 
 This release contains an updated Rego syntax to allow general references in rule heads, and a mix of new features and bugfixes.