A maintenance release adds agent version reporting, changes TLS policy behavior, improves performance, and corrects several defects. It also includes security fixes for selector logging and TLS certificate chain validation.
Action needed (1)
securityAgent-level selector logging removal
Selectors are no longer logged at the agent level to avoid potential leakage of sensitive information.
Check if affected (1)
securityServer TCP endpoint TLS session tickets disabled
Applies if you use the server TCP endpoint.
TLS session tickets are disabled on the server side, so
VerifyPeerCertificateruns on every connection and TLS session ticket resumption cannot bypass SPIFFE certificate chain validation against the current trust bundle.