Skip to content

Latest commit

 

History

History
83 lines (49 loc) · 2.21 KB

CHANGELOG.md

File metadata and controls

83 lines (49 loc) · 2.21 KB

Unreleased

IMPROVEMENTS:

  • Added -log-level command-line option GH-77

CHANGES:

  • Building with Go 1.21.4
  • Updated golang dependencies GH-71
    • golang.org/x/crypto v0.0.0-20210711020723-a769d52b0f97 => v0.16.0
    • golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c => v0.15.0
    • golang.org/x/net v0.0.0-20210226172049-e18ecbb05110 => v0.19.0
    • golang.org/x/text v0.3.3 => v0.14.0
    • github.com/hashicorp/go-hclog v1.4.0 => v1.5.0
    • github.com/hashicorp/go-uuid v1.0.2 => v1.0.3
    • github.com/hashicorp/vault/api v1.4.1 => v1.10.0
    • github.com/go-jose/go-jose/v3 v3.0.0 => v3.0.1

0.2.1 (December 15, 2020)

BUG FIXES:

  • Update ssh-helper's Version to properly reflect its release version

0.2.0 (August 19, 2020)

SECURITY:

  • HashiCorp vault-ssh-helper up to and including version 0.1.6 incorrectly accepted Vault-issued SSH OTPs for the subnet in which a host's network interface was located, rather than the specific IP address assigned to that interface. Assigned CVE-2020-24359, fixed in 0.2.0.

0.1.6 (June 26, 2020)

FEATURES:

  • Add support for namespaces GH-44

0.1.4 (November 8 2017)

SECURITY:

  • Make a safe exit when displaying usage text [GH-32]

0.1.3 (February 8 2017)

SECURITY:

  • Verify that OTPs conform to UUID format [7a831a5]

0.1.2 (August 24 2016)

IMPROVEMENTS:

  • Added allowed_roles option to configuration, which enforces specified role names to be present in the verification response received by the agent.

UPGRADE NOTES:

  • The option allowed_roles is a breaking change. When vault-ssh-helper is upgraded, it is required that the existing configuration files have an entry for allowed_roles="*" to be backwards compatible.

0.1.1 (February 25 2016)

SECURITY:

  • Introduced dev mode. If dev mode is not activated, vault-ssh-helper can only communicate with Vault that has TLS enabled [f7a8707]

IMPROVEMENTS:

  • Updated the documentation [GH-12]

BUG FIXES:

  • Empty check for allowed_cidr_list [9acaa58]

0.1.0 (December 2 2015)

  • Initial release