v1.11.7

Changelog

Added

• Enabled authenticators can now be configured via a configuration file, or the
  CONJUR_AUTHENTICATORS environment variable.
  cyberark/conjur##2173
• Trusted Proxies can now be configured with a configuration file or by setting
  the CONJUR_TRUSTED_PROXIES environment variable.
  cyberark/conjur#2168
• Added conjurctl configuration show command to print the Conjur configuration
  values and the sources they are loaded from.
  cyberark/conjur#2169
• Added conjurctl configuration apply command restart the Conjur process and
  pick up changes to the configuration file.
  cyberark/conjur#2171

Fixed

• Fix bug where running conjurctl server or conjurctl account create with
  passwords that contain ,s sent via stdin raised an error.
  cyberark/conjur#2159
• Update the default keepalive timeout for puma to be longer than most common proxy and load balancers.
  Previously, the load balancer in front of Conjur would commonly have a longer timeout than the
  server itself, which can lead to Conjur closing connections even as there are pending requests and
  the proxy returning 502 errors to the client.
  PR cyberark/conjur#2191

Security

• Upgrade Rails to 5.2.5 to resolve CVE-2021-22885
  cyberark/conjur#2149
• Upgrade Nokogiri to 1.11.5 to resolve
  GHSA-7rrm-v45f-jp64.
• Upgrade Puma to 4.3.8 to resolve
  CVE-2021-29509.
• Upgrade Bundler to 2.2.18 to resolve
  CVE-2020-36327.