Skip to content

Release 11.3.21#30827

Merged
camscale merged 5 commits intobranch/v11from
release/11.3.21
Aug 23, 2023
Merged

Release 11.3.21#30827
camscale merged 5 commits intobranch/v11from
release/11.3.21

Conversation

@camscale
Copy link
Copy Markdown
Contributor

@camscale camscale commented Aug 22, 2023 •
edited
Loading

  • Fixed S3 metric name for completed multipart uploads. #30712
  • Fixed Teleport Connect to properly show errors from the remote end. #30694
  • Fixed Review Requests to disallow reviews after request is resolved. #30688
  • Fixed Discovery service panics on GKE clusters without labels. #30648
  • Fixed memory leak using PAM libraries. #30519
  • Fixed "user is not managed" error when accessing ElastiCache and MemoryDB. #30358
  • Fixed resources being deleted from Firestore on update. #30289
  • Updated LDAP desktop discovery to handle slow DNS queries better. #30465
  • Updated SAML certificate parsing to allow leading/trailing spaces. #30452
  • Improved audit logging support for large SQL Server queries. #30245
  • Explicitly mention registered and new device when running tsh mfa add on Windows. #30217
  • Tighten discovery service permissions. #29996
  • helm: Add support for custom annodations in the teleport-kube-agent Secret. #30840

Security fix

  • Security improvements with possible medium severity DoS conditions through protocol level attacks. #30854

@github-actions github-actions Bot requested review from rosstimothy and zmb3 August 22, 2023 08:00
@jentfoo jentfoo mentioned this pull request Aug 22, 2023
Merged
jentfoo
jentfoo reviewed Aug 23, 2023
View reviewed changes
Comment thread CHANGELOG.md Outdated
camscale and others added 4 commits August 22, 2023 18:42
@camscale @jentfoo
Add security fix changelog
07d614b
@camscale @jentfoo
Update changelog with helm annotations PR as late addition
64e051a
@camscale @jentfoo
Fix typo in changelog entry (spelling)
83292cc
@jentfoo
Json Unmarshal Panic fix
f5ade8e 
From recent fuzzing work a new panic was discovered where a pointer is allocated then a pointer to the pointer is passed into json.Unmarshal.  It is then possible for this original pointer to remain a `nil` reference.

This pattern looks unexpected, so all cases of double pointers being passed into json.Unmarshal were changed to the more standard empty struct pointer style to avoid potential nil reference panics.
@camscale camscale added this pull request to the merge queue Aug 23, 2023
Merged via the queue into branch/v11 with commit 4aeefbc Aug 23, 2023
@camscale camscale deleted the release/11.3.21 branch August 23, 2023 02:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@r0mant r0mant r0mant approved these changes

@rosstimothy rosstimothy Awaiting requested review from rosstimothy

@zmb3 zmb3 Awaiting requested review from zmb3

+1 more reviewer

@jentfoo jentfoo jentfoo approved these changes

Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

backport helm size/sm

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@camscale @r0mant @jentfoo