Releases

Check if affected (1)

• securityAzure IMDS node attestation validation

  Applies if you use the azure_imds server node attestor plugin.

  The azure_imds server node attestor now validates the certificate used for the signature against the trusted Azure roots, preventing forged attested documents from being accepted during node attestation. The fix ships in SPIRE v1.15.1.

Check if affected (1)

• securityThe azure_imds node attestor validation is corrected

  Applies if you use the azure_imds server node attestor plugin.

  SPIRE v1.14.7 corrects validation in the azure_imds server node attestor plugin. The fix ensures the certificate used for signature verification matches the certificate validated against trusted Azure roots, preventing forged attested documents from being accepted.