Skip to content

juju

v3.6.27 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

containers devops go juju kubernetes operations

Affected surfaces

crypto_tls deps

Summary

AI summary

Broad release touches deps, fix, chore, and test.

Full changelog

The Juju team is proud to release Juju 3.6.27!

This is a point release to the stable 3.6 series of Juju.

Checkout the Juju 3.6.27 Release Notes

What's Changed

  • chore: increment juju to 3.6.27 by @jujubot in https://github.com/juju/juju/pull/22930
  • (3.6) fix(openstack): delete orphaned cinder attachments during volume destroy by @xtrusia in https://github.com/juju/juju/pull/22753
  • fix: verify ca with intermediates by @SimoneDutto in https://github.com/juju/juju/pull/22931
  • chore(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 by @dependabot[bot] in https://github.com/juju/juju/pull/22592
  • chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 by @dependabot[bot] in https://github.com/juju/juju/pull/22593
  • chore(deps): bump golang.org/x/mod from 0.36.0 to 0.37.0 by @dependabot[bot] in https://github.com/juju/juju/pull/22594
  • fix: update charmhub find featured query by @wallyworld in https://github.com/juju/juju/pull/22587
  • chore(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 by @dependabot[bot] in https://github.com/juju/juju/pull/22620
  • chore: increment juju to 2.9.61 by @jujubot in https://github.com/juju/juju/pull/22611
  • docs: add 2.9.60 release notes by @wallyworld in https://github.com/juju/juju/pull/22624
  • Docs migrate 29 by @tmihoc in https://github.com/juju/juju/pull/22643
  • chore(deps): bump golang.org/x/tools from 0.45.0 to 0.46.0 by @dependabot[bot] in https://github.com/juju/juju/pull/22630
  • (2.9) perf(status): optimize full status lookups by @xtrusia in https://github.com/juju/juju/pull/22699
  • test: update juju-qa-test to include a float option by @raineszm in https://github.com/juju/juju/pull/22200
  • chore: increment juju to 3.6.26 by @jujubot in https://github.com/juju/juju/pull/22721
  • feat: add mongo-client script to snap by @nicolasbock in https://github.com/juju/juju/pull/22353
  • docs: correct integrate command in tutorial by @james-garner-canonical in https://github.com/juju/juju/pull/22730
  • chore(deps): bump golang.org/x/tools from 0.46.0 to 0.47.0 by @dependabot[bot] in https://github.com/juju/juju/pull/22729
  • docs: 3.6 update cloud ref by @tmihoc in https://github.com/juju/juju/pull/22577
  • docs: add juju 3.6.25 release notes by @wallyworld in https://github.com/juju/juju/pull/22731
  • feat(ci): add juju_exec_output helper to prevent stdout/stderr mixing in juju exec by @gfouillet in https://github.com/juju/juju/pull/22776
  • docs: mention add-k8s --storage flag for setting default storage class by @tmihoc in https://github.com/juju/juju/pull/22802
  • docs: specify endpoints in integrate self-signed-certificates postgre… by @tmihoc in https://github.com/juju/juju/pull/22804
  • docs: extend secret lifecycle section to cover user-secret lifecycle by @tmihoc in https://github.com/juju/juju/pull/22816
  • docs: add 5 MiB size limit note for config values read from file by @tmihoc in https://github.com/juju/juju/pull/22807
  • docs: document add-k8s piping requirement for Canonical K8s by @tmihoc in https://github.com/juju/juju/pull/22809
  • docs: add missing redirect for howto/manage-your-deployment/take-your… by @tmihoc in https://github.com/juju/juju/pull/22800
  • 3.6 docs document manual ssh controller bootstrap issue 22572 by @tmihoc in https://github.com/juju/juju/pull/22810
  • docs: fix caas-image-repo post-bootstrap changeability by @tmihoc in https://github.com/juju/juju/pull/22811
  • docs: fix integrate cross-model relation help text by @tmihoc in https://github.com/juju/juju/pull/22821
  • docs: document 10,000 line maximum for debug-log --lines/--limit by @tmihoc in https://github.com/juju/juju/pull/22824
  • 3.6 fix cloud ref accuracy by @tmihoc in https://github.com/juju/juju/pull/22764
  • fix: move remove-juju-services script to /usr/sbin for usr-is-merged compatibility by @iyiguncevik in https://github.com/juju/juju/pull/22799
  • chore(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 by @dependabot[bot] in https://github.com/juju/juju/pull/22836
  • chore(deps): bump golang.org/x/mod from 0.37.0 to 0.38.0 by @dependabot[bot] in https://github.com/juju/juju/pull/22837
  • chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @dependabot[bot] in https://github.com/juju/juju/pull/22839
  • chore(deps): bump golang.org/x/text from 0.38.0 to 0.40.0 by @dependabot[bot] in https://github.com/juju/juju/pull/22840
  • chore(deps): update golang.org/x dependencies by @anvial in https://github.com/juju/juju/pull/22860
  • fix: catch mongo session Copy() panics and return an error by @wallyworld in https://github.com/juju/juju/pull/22723
  • chore(deps): bump golang.org/x/tools from 0.47.0 to 0.48.0 by @dependabot[bot] in https://github.com/juju/juju/pull/22883
  • chore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by @dependabot[bot] in https://github.com/juju/juju/pull/22884
  • docs: add resource revision example to refresh help text by @tmihoc in https://github.com/juju/juju/pull/22826
  • docs: 3.6 fix cloud ref update by @tmihoc in https://github.com/juju/juju/pull/22862
  • refactor: dependabot updates by @SimonRichardson in https://github.com/juju/juju/pull/22858
  • fix(security): address Go TLS, Kiota, and OpenPGP vulnerabilities by @anvial in https://github.com/juju/juju/pull/22863
  • chore: merge 2.9 by @wallyworld in https://github.com/juju/juju/pull/22898
  • refactor: update lestrrat-go/jwx dep to v3 by @wallyworld in https://github.com/juju/juju/pull/22901
  • chore: update canonical/lxd dependency by @wallyworld in https://github.com/juju/juju/pull/22907
  • fix: populate origin hash for local charms by @luci1900 in https://github.com/juju/juju/pull/22880
  • fix: diff bundle lxd CI test by @nvinuesa in https://github.com/juju/juju/pull/22864
  • test: fix brittle watchertests by @wallyworld in https://github.com/juju/juju/pull/22921

Full Changelog: https://github.com/juju/juju/compare/v3.6.25...v3.6.27

Security Fixes

  • fix(security): address Go TLS, Kiota, and OpenPGP vulnerabilities

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track juju

Get notified when new releases ship.

Sign up free

About juju

Orchestration engine that enables the deployment, integration and lifecycle management of applications at any scale, on any infrastructure (Kubernetes or otherwise).

All releases →

Related context

Beta — feedback welcome: [email protected]