Vault 1.12.3, 1.11.7, and 1.10.10 released!
34 views
Skip to first unread message
Meggie Ladlow
Feb 7, 2023, 3:07:54 PM2/7/23
to Vault
Hi folks,
The Vault team is announcing the release of Vault 1.12.3, 1.11.7, and 1.10.10.
Open-source binaries can be downloaded at [1, 2, 3]. Enterprise binaries are available to customers as well.
As a reminder, if you believe you have found a security issue in Vault, please responsibly disclose by emailing secu...@hashicorp.com and do not use the public issue tracker. Our security policy and our PGP key can be found at [4].
There are some upcoming changes in Vault 1.13, and in Consul 1.14 that will affect some Vault users:
Note that we have updated the Go Version to 1.19.4 for all of the Vault releases.
The major features and improvements in 1.12.3 are:
See the Feature Deprecation Notice and Plans page [9] for our full upcoming feature deprecation plans.
Verified publisher OSS [7] and Enterprise [8] Docker images are also available.
---
Upgrading
See [6] for general upgrade instructions.
As always, we recommend upgrading and testing this release in an isolated environment. If you experience any non-security issues, please report them on the Vault GitHub issue tracker or post to the Vault Discuss Forum at [10].
We hope you enjoy Vault 1.12.3!
Sincerely, The Vault Team
[1] https://releases.hashicorp.com/vault/1.12.3
[2] https://releases.hashicorp.com/vault/1.11.7
[3] https://releases.hashicorp.com/vault/1.10.10
[4] https://www.hashicorp.com/security
[5] https://github.com/hashicorp/vault/blob/main/CHANGELOG.md#1123
[6] https://www.vaultproject.io/docs/upgrading
[7] https://hub.docker.com/r/hashicorp/vault
[8] https://hub.docker.com/r/hashicorp/vault-enterprise
[9] https://vaultproject.io/docs/deprecation
[10] https://discuss.hashicorp.com/c/vault
[11] https://developer.hashicorp.com/consul/docs/k8s/upgrade#upgrading-to-consul-dataplane
The Vault team is announcing the release of Vault 1.12.3, 1.11.7, and 1.10.10.
Open-source binaries can be downloaded at [1, 2, 3]. Enterprise binaries are available to customers as well.
As a reminder, if you believe you have found a security issue in Vault, please responsibly disclose by emailing secu...@hashicorp.com and do not use the public issue tracker. Our security policy and our PGP key can be found at [4].
There are some upcoming changes in Vault 1.13, and in Consul 1.14 that will affect some Vault users:
- AliCloud Auth Method: The AliCloud auth plugin will now require the `role` parameter on login. This has always been documented as a required field but the requirement will now be enforced.
- Consul: If you are using Vault with Consul storage, and the Consul servers are using Consul on Kubernetes, when you upgrade to Consul 1.14 you will need to edit your helm chart. Full instructions are available on the Consul documentation [11].
- Log XI Environment Variable: We are removing an undocumented environment variable (LOGXI_FORMAT). Any users of that environment variable should switch to the VAULT_LOG_FORMAT environment variable.
- Replication (Enterprise): In 1.12, we fixed a race condition in the merkle-sync/merkle-diff process but the improvement is disabled by default. In 1.13 the improvement will be enabled by default for Integrated Storage users, and users of Consul 1.14+.
Note that we have updated the Go Version to 1.19.4 for all of the Vault releases.
The major features and improvements in 1.12.3 are:
- Lease Expiration: Fixed a panic on performance standbys when an irrevocable lease gets deleted
- Quotas: Fixed a deadlock and an issue with quota exempt paths
See the Feature Deprecation Notice and Plans page [9] for our full upcoming feature deprecation plans.
Verified publisher OSS [7] and Enterprise [8] Docker images are also available.
---
Upgrading
See [6] for general upgrade instructions.
As always, we recommend upgrading and testing this release in an isolated environment. If you experience any non-security issues, please report them on the Vault GitHub issue tracker or post to the Vault Discuss Forum at [10].
We hope you enjoy Vault 1.12.3!
Sincerely, The Vault Team
[1] https://releases.hashicorp.com/vault/1.12.3
[2] https://releases.hashicorp.com/vault/1.11.7
[3] https://releases.hashicorp.com/vault/1.10.10
[4] https://www.hashicorp.com/security
[5] https://github.com/hashicorp/vault/blob/main/CHANGELOG.md#1123
[6] https://www.vaultproject.io/docs/upgrading
[7] https://hub.docker.com/r/hashicorp/vault
[8] https://hub.docker.com/r/hashicorp/vault-enterprise
[9] https://vaultproject.io/docs/deprecation
[10] https://discuss.hashicorp.com/c/vault
[11] https://developer.hashicorp.com/consul/docs/k8s/upgrade#upgrading-to-consul-dataplane
Reply all
Reply to author
Forward
This conversation is locked
You cannot reply and perform actions on locked conversations.
0 new messages