Vault 1.0.1 发布,修复 Go 语言 Bug

淡漠悠然
 淡漠悠然
发布于 2018年12月20日
收藏 3

Vault 1.0.1 已发布,更新内容如下:

安全:

  • Update version of Go to 1.11.3 to fix Go bug https://github.com/golang/go/issues/29233 which corresponds to CVE-2018-16875

  • Database user revocation: If a client has configured custom revocation statements for a role with a value of "", that statement would be executed verbatim, resulting in a lack of actual revocation but success for the operation. Vault will now strip empty statements from any provided; as a result if an empty statement is provided, it will behave as if no statement is provided, falling back to the default revocation statement.

变更:

  • secret/database: On role read, empty statements will be returned as empty slices instead of potentially being returned as JSON null values. This makes it more in line with other parts of Vault and makes it easier for statically typed languages to interpret the values.

增强:

  • cli: Strip iTerm extra characters from password manager input [GH-5837]

  • core: Add operationId field to OpenAPI output [GH-5876]

  • ui: Added ability to search for Group and Policy IDs when creating Groups and Entities instead of typing them in manually

BUG 修复:

  • auth/azure: Cache azure authorizer [15]

  • auth/gcp: Remove explicit project for service account in GCE authorizer [58]

  • cli: Show correct stored keys/threshold for autoseals [GH-5910]

  • cli: Fix backwards compatibility fallback when listing plugins [GH-5913]

  • core: Fix upgrades when the seal config had been created on early versions of vault [GH-5956]

  • namespaces: Correctly reload the proper mount when tuning or reloading the mount [GH-5937]

  • secret/azure: Cache azure authorizer [19]

  • secret/database: Strip empty statements on user input [GH-5955]

  • secret/gcpkms: Add path for retrieving the public key [5]

  • secret/pki: Fix panic that could occur during tidy operation when malformed data was found [GH-5931]

  • secret/pki: Strip empty line in ca_chain output [GH-5779]

本站文章除注明转载外,均为本站原创或编译。欢迎任何形式的转载,但请务必注明出处,尊重他人劳动共创开源社区。
转载请注明:文章转载自 开源中国社区 [http://www.oschina.net]
本文标题:Vault 1.0.1 发布,修复 Go 语言 Bug
加载中
返回顶部
顶部