Bug 843830

Summary:	<sys-cluster/nomad-1.2.13: lacking mTLS certificate validation with agent to agent endpoints
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	trivial	CC:	williamh
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/hashicorp/nomad/pull/11956
Whiteboard:	~4 [noglsa]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2022-05-12 02:40:02 UTC

From https://github.com/hashicorp/nomad/releases/tag/v1.2.7:

"* server: validate mTLS certificate names on agent to agent endpoints [[GH-11956](https://github.com/hashicorp/nomad/issues/11956)]"

Please bump to 1.2.7

Comment 1 William Hubbs gentoo-dev

2022-10-26 19:31:19 UTC

This is fixed in the tree.

Thanks,

William

Comment 2 John Helmert III archtester

2022-10-26 22:06:50 UTC

Thanks!