v1.17.5

hashicorp/vaultv1.17.5Aug 30, 2024by hc-github-team-es-release-engineering

AI Summary

A security release fixes a regression where client tokens were displayed in plaintext in the audit log. It also resolves issues with static secret caching in Proxy and UI renewal behavior.

Key Highlights

Security fix: Client tokens and accessors no longer leaked in audit logs
Fix Proxy static secret cache for older KVv2 versions
Fix UI renew-self for non-renewable tokens

Full Release Notes

## 1.17.5 
## August 30, 2024 

SECURITY: 

core/audit: fix regression where client tokens and token accessors were being
displayed in the audit log in plaintext [HCSEC-2024-18](https://discuss.hashicorp.com/t/hcsec-2024-18-vault-leaks-client-token-and-token-accessor-in-audit-devices)

BUG FIXES:

* proxy/cache (enterprise): Fixed an issue where Proxy with static secret caching enabled would not correctly handle requests to older secret versions for KVv2 secrets. Proxy's static secret cache now properly handles all requests relating to older versions for KVv2 secrets. [[GH-28207](https://github.com/hashicorp/vault/pull/28207)]
* ui: fixes renew-self being called right after login for non-renewable tokens [[GH-28204](https://github.com/hashicorp/vault/pull/28204)]