Vault v1.9.7 Release Notes

  • June 10, 2022

    ๐Ÿ”„ CHANGES:

    ๐Ÿ‘Œ IMPROVEMENTS:

    • ๐Ÿ“œ ui: Allow namespace param to be parsed from state queryParam [GH-15378]

    ๐Ÿ› BUG FIXES:

    • agent: Redact auto auth token from renew endpoints [GH-15380]
    • auth/ldap: The logic for setting the entity alias when username_as_alias is set ๐Ÿ›  has been fixed. The previous behavior would make a request to the LDAP server to get user_attr before discarding it and using the username instead. This would ๐Ÿ‘‰ make it impossible for a user to connect if this attribute was missing or had ๐Ÿ›  multiple values, even though it would not be used anyway. This has been fixed and the username is now used without making superfluous LDAP searches. [GH-15525]
    • core (enterprise): Fix overcounting of lease count quota usage at startup.
    • core/config: Only ask the system about network interfaces when address configs contain a template having the format: {{ ... }} [GH-15224]
    • ๐Ÿ”Š core: Prevent changing file permissions of audit logs when mode 0000 is used. [GH-15759]
    • core: Prevent metrics generation from causing deadlocks. [GH-15693]
    • ๐Ÿ›  core: fixed systemd reloading notification [GH-15041]
    • core: pre-calculate namespace specific paths when tainting a route during postUnseal [GH-15067]
    • ๐Ÿ”ง storage/raft (enterprise): Auto-snapshot configuration now forbids slashes in file prefixes for all types, and "/" in path prefix for local storage type. Strip leading prefix in path prefix for AWS. Improve error handling/reporting.
    • 0๏ธโƒฃ transform (enterprise): Fix non-overridable column default value causing tokenization tokens to expire prematurely when using the MySQL storage backend.
    • ๐Ÿ’ป ui: Fixes client count timezone bug [GH-15743]
    • ๐Ÿ’ป ui: Fixes issue logging in with OIDC from a listed auth mounts tab [GH-15666]