teleport

Description

As part of a routine security audit, one security vulnerability and several miscellaneous issues where discovered that affect Teleport LTS releases 2.4 and 2.5. Older versions of Teleport may also be vulnerable. More details will be published soon.

Actions

Anyone running Teleport versions older than Teleport 2.4 are strongly encouraged to upgrade to a supported Teleport LTS release (Teleport 2.4 and Teleport 2.5).

Anyone running Teleport 2.4 or Teleport 2.5 are strongly encouraged to upgrade to Teleport 2.4.8 or Teleport 2.5.8. Download links are below.

Note: To mitigate the issue, two backward incompatible changes were made to Teleport. We recommend making these changes to your cluster before upgrading to Teleport 2.4.8 or 2.5.8.

• Role templates (depreciated in Teleport 2.3) were fully removed. We recommend migrating to role variables which are documented here: https://gravitational.com/teleport/docs/ssh_rbac/#roles
• Resource names (like roles, connectors, trusted clusters) can no longer contain unicode or other special characters. Update the names of all user created resources to only include characters, hyphens, and dots.

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download

Warning

Pre-releases are not production ready, use at your own risk!

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download

Warning

Pre-releases are not production ready, use at your own risk!

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download

IMPORTANT: Pre-releases are not production ready, use at your own risk!

This release of Teleport focuses on bugfixes.

Bug Fixes

• Allow creation of users from tctl create. #1949

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download

IMPORTANT: Pre-releases are not production safe, use at your own risk.

This release of Teleport focuses on bugfixes.

Bug Fixes

Improvements to Teleport HUP signal handling for more reliable reload. #1844
Restore output format of tctl nodes add --format=json. #1846

https://get.gravitational.com/teleport-v2.5.6-linux-amd64-bin.tar.gz
https://get.gravitational.com/teleport-v2.5.6-linux-arm-bin.tar.gz
https://get.gravitational.com/teleport-v2.5.6-darwin-amd64-bin.tar.gz

IMPORTANT: Alpha releases are not production ready. Use at your own risk.

• Upgrade go SSH library
• Improve session recording performance

This release of Teleport focuses on bugfixes.

Bug Fixes

• Improvements to Teleport HUP signal handling for more reliable reload. #1844
• Restore output format of tctl nodes add --format=json. #1846

IMPORTANT Pre-releases are not production ready, use at your own risk!

Syslog fixes and more reliable HUP

This release of Teleport focuses on bugfixes.

Bug Fixes

• Allow creation of multiple sessions per connection (fixes Ansible issues with the recording proxy). #1811

NOTE: Not production ready! Use at your own risk.

Use new Auth API to send events.

IMPORTANT: Pre-releases are not production ready, use at your own risk!

This release of Teleport focuses on bugfixes.

Bug Fixes

• Only reset SIGINT handler if it has not been set to ignore. #1814
• Improvement of user-visible errors. #1798 #1779

IMPORTANT: Pre-releases are not production ready, use at your own risk!

This release of Teleport contains a bugfix.

Bug Fixes

• Only reset SIGINT handler if it has not been set to ignore. #1814

IMPORTANT: Pre-releases are not production ready, use at your own risk!

Add support for S3 paths in upload URI.

This release of Teleport focuses on bugfixes.

Bug Fixes

• Fix logging, collect status of forked processes. #1785 #1776
• Turn off proxy support when no-tls is used. #1800
• Correct the signup URL. #1777
• Fix GitHub team pagination issues. #1734
• Increase global dial timeout to 30 seconds. #1760
• Reuse existing singing key. #1713
• Don't panic on channel failures. #1808

This release of Teleport focuses on bugfixes.

Bug Fixes

• Increase global dial timeout to 30 seconds. #1760
• Don't panic on channel failures. #1808

This release of Teleport includes bug fixes and regression fixes.

Bug Fixes

• Run session migration in the background. #1784
• Include node name in regenerated host certificates. #1786

WARNING: Pre-releases are not production ready. Use at your own risk.

Add early support for DynamoDB-backed event storage and S3 session recordings.