hashicorp/nomad ent-changelog-1.11.12

v1.11.12 (Enterprise)

on GitHub

SECURITY:

• client: Harden file creation for log files and dispatch payloads [GH-28605]
• client: Refuse to migrate task directories that have been symlinked [GH-28605]
• security: Fixed a bug where the Prefix Search API allowed enumerating IDs for jobs, deployments, allocs, evals, scaling policies, and volume from disallowed namespaces [GH-28597]
• security: Fixed a bug where the Read Dynamic Host Volume API allowed reading host volume metadata from disallowed namespaces [GH-28597]
• security: Fixed a bug where the Read Scaling Policy API allowed reading a policy from disallowed namespaces [GH-28597]

BUG FIXES:

• build: Update busybox image used for container final image to 1.38.0 [GH-28622]
• build: Updated Go to v1.27.2 [GH-28647]
• build: Updated Go to v1.27.3 [GH-28679]
• cli: Fixed a bug in the var put command that could panic the CLI on invalid inputs [GH-28630]
• cli: Fixed a bug where additional capabilities could be added to the CSI plugin status command output when the -verbose flag was used that were not supported by the plugin [GH-28626]
• client: Fixed incorrect CPU fingerprinting of Apple M4 chips [GH-28627]
• ui: Fixed a bug where the CPU utilization graph for allocations and tasks that reserve CPU with cores showed 0% and "0 MHz Total" [GH-28569]