Release 11.3.25

CHANGELOG.md

@@ -1,5 +1,53 @@
 # Changelog
 
+## 11.3.25 (09/20/23)
+
+### Security fixes
+
+#### [Critical] Privilege escalation via host user creation
+
+When using automatic Linux user creation, an attacker could exploit a race
+condition in the user creation functionality to create arbitrary files on the
+system as root writable by the created user.
+
+This could allow the attacker to escalate their privileges to root.
+
+Users who aren't using automatic Linux host user creation aren’t affected by
+this vulnerability.
+
+[#32208](https://github.com/gravitational/teleport/pull/32208)
+
+#### [High] Insufficient auth token verification when signing self-hosted database certificates
+
+When signing self-hosted database certificates, Teleport did not sufficiently
+validate the authorization token type.
+
+This could allow an attacker to sign valid database access certificates using a
+guessed authorization token name.
+
+Users who aren’t using self-hosted database access aren’t affected by this
+vulnerability.
+
+[#32217](https://github.com/gravitational/teleport/pull/32217)
+
+#### [High] Privilege escalation via untrusted config file on Windows
+
+When loading the global tsh configuration file tsh.yaml on Windows, Teleport
+would look for the file in a potentially untrusted directory.
+
+This could allow a malicious user to create harmful command aliases for all tsh
+users on the system.
+
+Users who aren’t using tsh on Windows aren’t affected by this vulnerability.
+
+[#32225](https://github.com/gravitational/teleport/pull/32225)
+
+### Other fixes and improvements
+
+* Fixed directory sharing in Desktop Access for non-ascii directory names. [#31922](https://github.com/gravitational/teleport/pull/31922)
+* Fixed desktop sessions' viewport size to the size of browser window at session start. [#31522](https://github.com/gravitational/teleport/pull/31522)
+* Updated OpenSSL to 3.0.11 [#32167](https://github.com/gravitational/teleport/pull/32167)
+
 ## 11.3.23 (09/06/23)
 
 * Updated Go to `v1.20.8`. [#31509](https://github.com/gravitational/teleport/pull/31509)

Makefile

@@ -11,7 +11,7 @@
 #   Stable releases:   "1.0.0"
 #   Pre-releases:      "1.0.0-alpha.1", "1.0.0-beta.2", "1.0.0-rc.3"
 #   Master/dev branch: "1.0.0-dev"
-VERSION=11.3.23
+VERSION=11.3.25
 
 DOCKER_IMAGE ?= teleport
 

api/version.go

@@ -3,7 +3,7 @@
 package api
 
 const (
-	Version = "11.3.23"
+	Version = "11.3.25"
 )
 
 // Gitref variable is automatically set to the output of git-describe

build.assets/macos/tsh/tsh.app/Contents/Info.plist

@@ -19,13 +19,13 @@
 		<key>CFBundlePackageType</key>
 		<string>APPL</string>
 		<key>CFBundleShortVersionString</key>
-		<string>11.3.23</string>
+		<string>11.3.25</string>
 		<key>CFBundleSupportedPlatforms</key>
 		<array>
 			<string>MacOSX</string>
 		</array>
 		<key>CFBundleVersion</key>
-		<string>11.3.23</string>
+		<string>11.3.25</string>
 		<key>DTCompiler</key>
 		<string>com.apple.compilers.llvm.clang.1_0</string>
 		<key>DTPlatformBuild</key>

build.assets/macos/tshdev/tsh.app/Contents/Info.plist

@@ -17,13 +17,13 @@
 		<key>CFBundlePackageType</key>
 		<string>APPL</string>
 		<key>CFBundleShortVersionString</key>
-		<string>11.3.23</string>
+		<string>11.3.25</string>
 		<key>CFBundleSupportedPlatforms</key>
 		<array>
 			<string>MacOSX</string>
 		</array>
 		<key>CFBundleVersion</key>
-		<string>11.3.23</string>
+		<string>11.3.25</string>
 		<key>DTCompiler</key>
 		<string>com.apple.compilers.llvm.clang.1_0</string>
 		<key>DTPlatformBuild</key>

examples/chart/teleport-cluster/Chart.yaml

@@ -1,4 +1,4 @@
-.version: &version "11.3.23"
+.version: &version "11.3.25"
 
 name: teleport-cluster
 apiVersion: v2

examples/chart/teleport-cluster/charts/teleport-operator/Chart.yaml

@@ -1,4 +1,4 @@
-.version: &version "11.3.23"
+.version: &version "11.3.25"
 
 name: teleport-operator
 apiVersion: v2