diff --git a/Makefile b/Makefile index 66dbfab0..a3e95aa9 100644 --- a/Makefile +++ b/Makefile @@ -32,7 +32,7 @@ PROJECT_NAME = fabric-ca GO_VER ?= 1.25.7 UBUNTU_VER ?= 22.04 DEBIAN_VER ?= stretch -BASE_VERSION ?= v1.5.16 +BASE_VERSION ?= v1.5.17 ARCH=$(shell go env GOARCH) PLATFORM=$(shell go env GOOS)-$(shell go env GOARCH) @@ -210,8 +210,8 @@ release/%/bin/fabric-ca-server: $(GO_SOURCE) # to the test target you are running i.e. (unit-tests, int-tests, all-tests). .PHONY: docker-thirdparty docker-thirdparty: - docker pull postgres:13.13 - docker pull mysql:8.0 + docker pull postgres:$(PG_VER) + docker pull mariadb:11 .PHONY: dist dist: dist-clean release diff --git a/release_notes/v1.5.17.md b/release_notes/v1.5.17.md new file mode 100644 index 00000000..8373c19b --- /dev/null +++ b/release_notes/v1.5.17.md @@ -0,0 +1,22 @@ +v1.5.17 Release Notes - February 6, 2026 +======================================== + +v1.5.17 updates dependencies to address the following security vulnerabilities: + +- CVE-2025-68121 +- CVE-2025-61730 +- CVE-2025-61726 + +This release also allows CA URLs to include path components. For example, +`https://my-fabric-ca/ca`. Previously only `https://my-fabric-ca` would be +accepted. + +Dependencies +------------ + +Fabric CA v1.5.17 has been tested with the following dependencies: +- Go 1.25.7 +- Ubuntu 22.04 (for Docker images) +- Databases + - PostgreSQL 17 + - MariaDB 11 \ No newline at end of file