Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update ghcr.io/warp-tech/warpgate Docker tag to v0.8.1 - autoclosed #48

Closed
wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Aug 20, 2023

Mend Renovate

This PR contains the following updates:

Package Update Change
ghcr.io/warp-tech/warpgate minor v0.7.4 -> v0.8.1

Release Notes

warp-tech/warpgate (ghcr.io/warp-tech/warpgate)

v0.8.1

Compare Source

Security fixes

CVE-2023-43660

The SSH key verification for a user could be bypassed by sending an SSH key offer without a signature. This allowed bypassing authentication completely under following conditions:

  • The attacker knows the username and a valid target name
  • The attacked knows the user's public key
  • Only SSH public key authentication is required for the user account

Fixes

  • dec0b97: Fix redirection with a relative location (Nicolas SEYS) #​896

v0.8.0

Compare Source

Changes

  • 0bc9ae1: session details (IP & security key) are now shown during OOB auth to reduce the chance of phishing a user into approving an auth attempt #​858
  • 983d0ad: bumped russh

Fixes


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot changed the title Update ghcr.io/warp-tech/warpgate Docker tag to v0.8.0 Update ghcr.io/warp-tech/warpgate Docker tag to v0.8.1 Sep 27, 2023
@renovate renovate bot force-pushed the renovate/ghcr.io-warp-tech-warpgate-0.x branch from 0a860ed to 9342f94 Compare September 27, 2023 22:09
@renovate renovate bot changed the title Update ghcr.io/warp-tech/warpgate Docker tag to v0.8.1 Update ghcr.io/warp-tech/warpgate Docker tag to v0.8.1 - autoclosed Sep 28, 2023
@renovate renovate bot closed this Sep 28, 2023
@renovate renovate bot deleted the renovate/ghcr.io-warp-tech-warpgate-0.x branch September 28, 2023 07:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants