Vault
Mon
Wed
Fri
JulAugSepOctNovDecJanFebMarAprMayJunJul
LessMore
Releases5Avg2/moVersionsv2.0.0 to v2.0.3
Last Checked
23h ago
SECURITY:
CHANGES:
path "kv/*" { deny } could be bypassed for LIST kv/private/ if a broader allow path "kv/*" also existed. Policies relying on the previous (incorrect) behavior may now be denied././, /../, or //) to a cleaned path, instead of rejecting these requestsFEATURES:
IMPROVEMENTS:
sys/billing/config endpoint to allow configuration of billing data retention (min 13 months, max 6 years).path value in patch operationsBUG FIXES:
performance_multiplier values less than or equal to zeroBREAKING CHANGES:
cap_ipc_lock capability on vault at build time to allow running Vault in common container runtimes. Vault in containers will no longer be able to call mlock() to lock memory. Operators should set disable_mlock = true in Vault's configuration. Runtime operators are advised to disable swapping to guarantee data safety.CHANGES:
BUG FIXES:
BREAKING CHANGES:
IPC_LOCK capabilities when running the vault container.SECURITY:
path and file_path cannot be empty for requests to sys/audit/{path}CHANGES:
sudo capability to invoke the identity entity merge API endpoint (identity/entity/merge).FEATURES:
IMPROVEMENTS:
start_month and end_month parameters to /sys/billing/overview endpoint to allow querying billing data for specific time ranges.sys/billing/overview endpoint in admin namespace.sys/billing/overview are now rounded to 4 decimal places./sys/internal/billing/overview API endpoint now returns 37 months of historical consumption billing data by default./sys/internal/billing/overview API endpoint now always returns all metric types in the response, even when their values are zero. This ensures consistent response structure for easier client-side parsing.BUG FIXES:
sp_msloginmappings procedure with a granular metadata query. This allows the plugin to function with VIEW ANY DEFINITION instead of full sysadmin privileges.remove_roots_from_chain is true.