Skip to content

Teleport 2.4.8

Compare
Choose a tag to compare
@russjones russjones released this 30 May 19:48
· 18395 commits to master since this release

Description

As part of a routine security audit, one security vulnerability and several miscellaneous issues where discovered that affect Teleport LTS releases 2.4 and 2.5. Older versions of Teleport may also be vulnerable. More details will be published soon.

Actions

Anyone running Teleport versions older than Teleport 2.4 are strongly encouraged to upgrade to a supported Teleport LTS release (Teleport 2.4 and Teleport 2.5).

Anyone running Teleport 2.4 or Teleport 2.5 are strongly encouraged to upgrade to Teleport 2.4.8 or Teleport 2.5.8. Download links are below.

Note: To mitigate the issue, two backward incompatible changes were made to Teleport. We recommend making these changes to your cluster before upgrading to Teleport 2.4.8 or 2.5.8.

  • Role templates (depreciated in Teleport 2.3) were fully removed. We recommend migrating to role variables which are documented here: https://gravitational.com/teleport/docs/ssh_rbac/#roles
  • Resource names (like roles, connectors, trusted clusters) can no longer contain unicode or other special characters. Update the names of all user created resources to only include characters, hyphens, and dots.

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download