From 50bd40ec022073529482daaa5c49a500704f6db2 Mon Sep 17 00:00:00 2001 From: hc-github-team-secure-vault-core <82990506+hc-github-team-secure-vault-core@users.noreply.github.com> Date: Wed, 23 Aug 2023 11:23:35 -0400 Subject: [PATCH] backport of commit e29d98aadb6557921e5d509f3b967e3262f22cb9 (#22526) Co-authored-by: Nick Cabatoff --- api/client.go | 2 +- changelog/22523.txt | 3 +++ 2 files changed, 4 insertions(+), 1 deletion(-) create mode 100644 changelog/22523.txt diff --git a/api/client.go b/api/client.go index d20477e1d..1e720196d 100644 --- a/api/client.go +++ b/api/client.go @@ -535,7 +535,7 @@ func (c *Config) ParseAddress(address string) (*url.URL, error) { // be pointing to the protocol used in the application layer and not to // the transport layer. Hence, setting the fields accordingly. u.Scheme = "http" - u.Host = socket + u.Host = "localhost" u.Path = "" } else { return nil, fmt.Errorf("attempting to specify unix:// address with non-transport transport") diff --git a/changelog/22523.txt b/changelog/22523.txt new file mode 100644 index 000000000..e53ab652b --- /dev/null +++ b/changelog/22523.txt @@ -0,0 +1,3 @@ +```release-note:bug +api: Fix breakage with UNIX domain socket addresses introduced by newest Go versions as a security fix. +```