Skip to content

security: fix CVE-2024-38371 (cherry-pick #10229)#10233

Merged
rissson merged 1 commit intoversion-2024.4from
cherry-pick-988109-version-2024.4
Jun 26, 2024
Merged

security: fix CVE-2024-38371 (cherry-pick #10229)#10233
rissson merged 1 commit intoversion-2024.4from
cherry-pick-988109-version-2024.4

Conversation

@gcp-cherry-pick-bot
Copy link
Contributor

Cherry-picked security: fix CVE-2024-38371 (#10229)

@gcp-cherry-pick-bot gcp-cherry-pick-bot bot requested review from a team as code owners June 26, 2024 09:24
@rissson rissson enabled auto-merge (squash) June 26, 2024 09:26
@netlify
Copy link

netlify bot commented Jun 26, 2024

Deploy Preview for authentik-docs ready!

Name Link
🔨 Latest commit d6d79f2
🔍 Latest deploy log https://app.netlify.com/sites/authentik-docs/deploys/667bde5c0b1d7c0008c3ac61
😎 Deploy Preview https://deploy-preview-10233--authentik-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@codecov
Copy link

codecov bot commented Jun 26, 2024

Codecov Report

Attention: Patch coverage is 90.47619% with 4 lines in your changes missing coverage. Please review.

Project coverage is 92.51%. Comparing base (8af754e) to head (d6d79f2).

Files Patch % Lines
authentik/providers/oauth2/views/device_init.py 85.71% 4 Missing ⚠️
Additional details and impacted files
@@                Coverage Diff                 @@
##           version-2024.4   #10233      +/-   ##
==================================================
+ Coverage           92.48%   92.51%   +0.03%     
==================================================
  Files                 669      669              
  Lines               32917    32925       +8     
==================================================
+ Hits                30443    30461      +18     
+ Misses               2474     2464      -10     
Flag Coverage Δ
e2e 50.55% <23.80%> (+0.02%) ⬆️
integration 25.90% <0.00%> (-0.01%) ⬇️
unit 89.83% <90.47%> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@rissson rissson merged commit b5ffd16 into version-2024.4 Jun 26, 2024
@rissson rissson deleted the cherry-pick-988109-version-2024.4 branch June 26, 2024 09:42
@github-actions
Copy link
Contributor

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-ghcr.io/goauthentik/dev-server:gh-d6d79f2d39aed9d8af4813419ef87492d8b821cc
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

For arm64, use these values:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-ghcr.io/goauthentik/dev-server:gh-d6d79f2d39aed9d8af4813419ef87492d8b821cc-arm64
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
image:
    repository: ghcr.io/goauthentik/dev-server
    tag: gh-ghcr.io/goauthentik/dev-server:gh-d6d79f2d39aed9d8af4813419ef87492d8b821cc

For arm64, use these values:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
image:
    repository: ghcr.io/goauthentik/dev-server
    tag: gh-ghcr.io/goauthentik/dev-server:gh-d6d79f2d39aed9d8af4813419ef87492d8b821cc-arm64

Afterwards, run the upgrade commands from the latest release notes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants