teleport

This release of Teleport focuses on bugfixes.

Bug Fixes

• Fixed issue that cause failed executing request: user agent missing missing error when upgrading from 2.6.

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download.

Note: Pre-releases are not production ready, use at your own risk!

This release of Teleport focuses on bugfixes.

Bug Fixes

• Fixed issue in Teleport 2.7.1 where rollback to Go 1.9.7 was not complete for linux-amd64 binaries.

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download.

This release of Teleport focuses on bugfixes.

Bug Fixes

• Fixed issue in Teleport 2.6.8 where rollback to Go 1.9.7 was not complete for linux-amd64 binaries.

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download.

Warning

Pre-releases are not production ready, use at your own risk!

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download

This release of Teleport focuses on bugfixes.

Bug Fixes

• Rollback to Go 1.9.7 for users with custom CA running into x509: certificate signed by unknown authority.

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download.

This release of Teleport focuses on bugfixes.

Bug Fixes

• Rollback to Go 1.9.7 for users with custom CA running into x509: certificate signed by unknown authority.

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download.

The primary goal of 2.7.0 release was to address the community feedback and improve the performance and flexibility when running Teleport clusters with large number of nodes.

New Features

• The Web UI now includes scp (secure copy) functionality. This allows Windows users and other users of the Web UI to upload/download files into SSH nodes using a web browser.
• Fine-grained control over forceful session termination has been added #1935. It is now possible to:
  • Forcefully disconnect idle clients (no client activity) after a specified timeout.
  • Forcefully disconnect clients when their certificates expire in the middle of an active SSH session.

Performance Improvements

• Performance of SSH login has been improved on large clusters (thousands of nodes). #2061
• DynamoDB storage back-end performance has been improved. #2021
• Performance of session recording via a proxy has been improved. #1966
• Connections between trusted clusters are managed better. #2023

Bug Fixes

As always, this release contains several bug fixes. The full list can be seen here. Here are some notable ones:

• It is now possible to issue certificates with a long TTL via admin's auth sign tool. Previously they were limited to 30 hours for undocumented reason. 1745
• Dynamic label values were shown as empty strings. 2056

Upgrading

Follow the recommended upgrade procedure to upgrade to this version.

Warning

Pre-releases are not production ready, use at your own risk!

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download

Warning

Pre-releases are not production ready, use at your own risk!

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download

This release of Teleport focuses on bugfixes.

Bug Fixes

• Resolved dynamic label regression. #2056

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download.

Warning

Pre-releases are not production ready, use at your own risk!

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download

Warning

Pre-releases are not production ready, use at your own risk!

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download

This release of Teleport fixes a regression in Teleport 2.6.5.

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download.

This release of Teleport focuses on bugfixes.

Bug Fixes

• Remote clusters no longer try to re-connect to proxies that have been permanently removed. #2023
• Speed up login on systems with many users. #2021
• Improve overall performance of the etcd backend. #2030
• Role login validation now applies after variables have been substituted. #2022

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download.

This release of Teleport focuses on bugfixes.

Bug Fixes

• Reduced go routine usage by the forwarding proxy. #1966
• Teleport no longer sends full version in the SSH handshake. #970
• Force flag works correctly for Trusted Clusters. #1871
• Allow manual creation of Certificate Authorities. #2001
• Include Teleport username in port forwarding events. #2004
• Allow tctl auth sign to create user certificate with arbitrary TTL values. #1745
• Upgrade to Go 1.10.3. #2008

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download.

This release of Teleport focuses on bugfixes.

Bug Fixes

• Use ciphers, KEX, and MAC algorithms from Teleport configuration in reverse tunnel server. #1984
• Update path sanitizer it allow @. #1985

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download.

This release of Teleport brings new features, significant performance and usability improvements, as well as the usual bugfixes.

During this release cycle, the Teleport source code has been audited for security vulnerabilities by Cure53 and this release (2.6.0) contains patches for the discovered problems.

New Features

• Support for DynamoDB for storing the audit log events. #1755
• Support for Amazon S3 for storing the recorded SSH sessions. #1755
• Support for rotating certificate authorities (CA rotation). #1899
• Integration with Linux PAM (pluggable authentication modules) subsystem. #742 and #1766
• The new CLI command tsh status shows users which Teleport clusters they are authenticated with. #1628

Additionally, Teleport 2.6.0 has been submitted to the AWS marketplace. Soon AWS users will be able to create properly configured, secure and highly available Teleport clusters with ease.

Configuration Changes

• Role templates (depreciated in Teleport 2.3) were fully removed. We recommend migrating to role variables which are documented here.

• Resource names (like roles, connectors, trusted clusters) can no longer contain unicode or other special characters. Update the names of all user created resources to only include characters, hyphens, and dots.

• advertise_ip has been deprecated and replaced with public_addr setting. See #1803. The existing configuration files will still work, but we advise Teleport administrators to update it to reflect the new format.

• Teleport no longer uses boltdb back-end for storing cluster state by default. The new default is called dir and it uses simple JSON files stored in /var/lib/teleport/backend. This change applies to brand new Teleport installations, the existing clusters will continue to use boltdb.

• The default set of enabled cryptographic primitives has been updated to reflect the latest state of SSH and TLS security. #1856.

Bug Fixes

The list of most visible bug fixes in this release:

• tsh now properly handles Ctrl+C #1882
• High CPU utilization on ARM platforms during daemon start-up. #1886
• Terminal window size can get out of sync on AWS. #1874
• Some CLI commands print errors twice. #1889
• SSH session playback can be interrupted for long sessions. #1774
• Processing HUP UNIX signal is unreliable when teleport daemon runs under systemd. #1844

You can see the full list of 2.6.0 changes here.

Upgrading

Follow the recommended upgrade procedure to upgrade to this version.

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download.

Warning

Pre-releases are not production ready, use at your own risk!

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download

Description

As part of a routine security audit, one security vulnerability and several miscellaneous issues where discovered that affect Teleport LTS releases 2.4 and 2.5. Older versions of Teleport may also be vulnerable. More details will be published soon.

Actions

Anyone running Teleport versions older than Teleport 2.4 are strongly encouraged to upgrade to a supported Teleport LTS release (Teleport 2.4 and Teleport 2.5).

Anyone running Teleport 2.4 or Teleport 2.5 are strongly encouraged to upgrade to Teleport 2.4.8 or Teleport 2.5.8. Download links are below.

Note: To mitigate the issue, two backward incompatible changes were made to Teleport. We recommend making these changes to your cluster before upgrading to Teleport 2.4.8 or 2.5.8.

• Role templates (depreciated in Teleport 2.3) were fully removed. We recommend migrating to role variables which are documented here: https://gravitational.com/teleport/docs/ssh_rbac/#roles
• Resource names (like roles, connectors, trusted clusters) can no longer contain unicode or other special characters. Update the names of all user created resources to only include characters, hyphens, and dots.

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download