aws/rolesanywhere-credential-helper v1.8.6

on GitHub

What's Changed

• The serve command now rejects requests whose Host or Origin header doesn't match the local endpoint, preventing DNS rebinding attacks
• The serve command now exits with an error if it can't obtain credentials at startup
• The serve command now keeps returning the last valid credentials when a credential refresh fails
• Upgrade Go to version 1.27.3
• Patch security vulnerabilities

Full Changelog: v1.8.5...v1.8.6
MacOS X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.8.6/X86_64/MacOS/Sonoma/aws_signing_helper
Linux X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.8.6/X86_64/Linux/Amzn2023/aws_signing_helper
Windows X86_64 Binary: https://rolesanywhere.amazonaws.com/releases/1.8.6/X86_64/Windows/Server2022/aws_signing_helper.exe
MacOS AArch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.8.6/Aarch64/MacOS/Sonoma/aws_signing_helper
Linux AArch64 Binary: https://rolesanywhere.amazonaws.com/releases/1.8.6/Aarch64/Linux/Amzn2023/aws_signing_helper