Vault - 1.10.5

July 21, 2022

CHANGES:

• core/fips: Disable and warn about entropy augmentation in FIPS 140-2 Inside mode [GH-15858]
• core: Bump Go version to 1.17.12.

IMPROVEMENTS:

• core: Add sys/loggers and sys/loggers/:name endpoints to provide ability to modify logging verbosity [GH-16111]
• secrets/ssh: Allow additional text along with a template definition in defaultExtension value fields. [GH-16018]

BUG FIXES:

• agent/template: Fix parsing error for the exec stanza [GH-16231]
• core/identity: Replicate member_entity_ids and policies in identity/group across nodes identically [GH-16088]
• core/replication (enterprise): Don't flush merkle tree pages to disk after losing active duty
• core/seal: Fix possible keyring truncation when using the file backend. [GH-15946]
• core: Limit SSCT WAL checks on perf standbys to raft backends only [GH-15879]
• plugin/multiplexing: Fix panic when id doesn't exist in connection map [GH-16094]
• secret/pki: Do not fail validation with a legacy key_bits default value and key_type=any when signing CSRs [GH-16246]
• storage/raft (enterprise): Prevent unauthenticated voter status change with rejoin [GH-16324]
• transform (enterprise): Fix a bug in the handling of nested or unmatched capture groups in FPE transformations.
• ui: Fix issue where metadata tab is hidden even though policy grants access [GH-15824]
• ui: Revert using localStorage in favor of sessionStorage [GH-16169]
• ui: Updated leasId to leaseId in the "Copy Credentials" section of "Generate AWS Credentials" [GH-15685]