v1.12.11

hashicorp/vaultv1.12.11Sep 12, 2023by hc-github-team-es-release-engineering

AI Summary

Includes the same security fix for transit nonces and Go update as v1.13.7, alongside replication and UI bug fixes. Improves LDAP login speed and reduces KMIP latency.

Key Highlights

Security: Fix transit nonce regression in non-convergent modes
Bump Go version to 1.20.8
Performance: Improved LDAP login speed with concurrency
Bug fixes for CLI wrapping output and Azure autoseal hangs
Replication: Fix discovery of bad primary cluster addresses

Full Release Notes

## 1.12.11
### September 13, 2023

SECURITY:

* secrets/transit: fix a regression that was honoring nonces provided in non-convergent modes during encryption. [[GH-22852](https://github.com/hashicorp/vault/pull/22852)]

IMPROVEMENTS:

* auth/ldap: improved login speed by adding concurrency to LDAP token group searches [[GH-22659](https://github.com/hashicorp/vault/pull/22659)]
* kmip (enterprise): reduce latency of KMIP operation handling

BUG FIXES:

* cli: Fix the CLI failing to return wrapping information for KV PUT and PATCH operations when format is set to `table`. [[GH-22818](https://github.com/hashicorp/vault/pull/22818)]
* core/quotas: Reduce overhead for role calculation when using cloud auth methods. [[GH-22583](https://github.com/hashicorp/vault/pull/22583)]
* core/seal: add a workaround for potential connection [[hangs](https://github.com/Azure/azure-sdk-for-go/issues/21346)] in Azure autoseals. [[GH-22760](https://github.com/hashicorp/vault/pull/22760)]
* raft/autopilot: Add dr-token flag for raft autopilot cli commands [[GH-21165](https://github.com/hashicorp/vault/pull/21165)]
* replication (enterprise): Fix discovery of bad primary cluster addresses to be more reliable