Skip to content

v1.19.3
Compare
Choose a tag to compare
@conjur-jenkins conjur-jenkins released this 26 Jan 20:38
v1.19.3
05aa1aa
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

[1.19.3] - 2023-04-17

Added

  • Conjur now logs when it detects that the Conjur configuration file
    (conjur.yml) or directory permissions prevent the Conjur server from
    successfully reading it. Conjur also now logs at the DEBUG level when it
    detects that either the directory or file do not exist.
    cyberark/conjur#2715
  • Account admin roles now have a corresponding resource. This ensures that
    access controls work as expected for this role to access itself.
    cyberark/conjur#2757

Changed

  • Removes support for disabling the CONJUR_FEATURE_PKCE_SUPPORT_ENABLED flag.
    cyberark/conjur#2713
  • Routes on the /roles/ API endpoints now correctly verify the existing of
    a Role and return 404 when it doesn't exist or the caller has insufficient
    privilege.
    cyberark/conjur#2755

Fixed

  • Fixed a thread-safety bug in secret retrieval when multiple threads attempt
    to decrypt a secret value with Slosilo/OpenSSL.
    cyberark/slosilo#31
    cyberark/conjur#2718
  • Incomplete HTTP proxy support in the Kubernetes Authenticator is fixed. This
    allows for an HTTP proxy between Conjur and the Kubernetes API.
    cyberark/conjur#2766

Security

Assets 7
Loading