age | v1.2.1

age v1.2.1 released on 18-12-2024


age v1.2.1 is out now. This release addresses a critical security vulnerability that could potentially allow arbitrary binary execution.

Users need to visit the product GitHub or official pages for more information.

What’s in this release

  • This release fixes a security vulnerability that could allow an attacker to execute an arbitrary binary under certain conditions.
  • Plugin names may now only contain alphanumeric characters or the four special characters `+-._`.
  • Thanks to ⬡-49016 for reporting this issue.

Upgrade notes

  • No breaking changes noted; users are encouraged to update to enhance security.

We invite users to share comments on their experience with this release.

Related posts

Vector | vdev-v0.3.3

Vector vdev v0 3 3: patch release with crash, leak and parsing fixes, connector and tooling improvements, upgrade notes on prechecks, rolling updates, compat

Loki | v3.7.2

Loki v3 7 2: security and CVE fixes, updated S3 client to aws sdk v1 97 3, ruler panic fix for unset validation scheme, S3 Object Lock sends SHA256 checksum

Loki | v3.7.2

Loki v3 7 2: Patch release with CVE fixes, AWS S3 SDK update, ruler panic fix, S3 Object Lock SHA256 checksum support