Vault v2.0.2

v2.0.2
Changed 2
  • Bump Go version to 1.26.4
  • Update secrets/azure (enterprise) plugin to v0.26.4+ent
Fixed 2
  • Fix plugin signature verification failure with expired pgp key when registering a plugin
  • Fix key version dropdown selected state when editing a transit key in the UI
Removed 1
  • Remove `cap_ipc_lock` capability on `vault` at build time to allow running Vault in common container runtimes; Vault in containers will no longer be able to call `mlock()` to lock memory
Security 1
  • Limit RSA key sizes to a maximum of 8192 bits in secrets/ssh to address CVE-2026-39829

BREAKING CHANGES:

  • containers: Remove cap_ipc_lock capability on vault at build time to allow running Vault in common container runtimes. Vault in containers will no longer be able to call mlock() to lock memory. Operators should set disable_mlock = true in Vault's configuration. Runtime operators are advised to disable swapping to guarantee data safety.
  • secrets/ssh: RSA key sizes are now limited to a maximum size of 8192 bits addressing CVE-2026-39829

CHANGES:

  • core: Bump Go version to 1.26.4
  • secrets/azure (enterprise): Update plugin to v0.26.4+ent

BUG FIXES:

  • plugins: Fix plugin signature verification failure with expired pgp key when registering a plugin.
  • ui/transit: Fix key version dropdown selected state when editing a transit key.
View original

Upgraded? How did it go?

Discussion