diff --git a/website/docs/releases/2025/v2025.4.md b/website/docs/releases/2025/v2025.4.md index 31aabd7f16..3b51350cfd 100644 --- a/website/docs/releases/2025/v2025.4.md +++ b/website/docs/releases/2025/v2025.4.md @@ -291,6 +291,10 @@ helm upgrade authentik authentik/authentik -f values.yaml --version ^2025.4 - lifecycle: fix arguments not being passed to worker command (cherry-pick #14574) (#14620) - sources/scim: fix all users being added to group when no members are given (cherry-pick #14645) (#14666) +## Fixed in 2025.4.3 + +- security: fix CVE-2025-52553 (#15289) + ## API Changes #### What's New diff --git a/website/docs/releases/2025/v2025.6.md b/website/docs/releases/2025/v2025.6.md index 995ba1e881..7f5e5a695b 100644 --- a/website/docs/releases/2025/v2025.6.md +++ b/website/docs/releases/2025/v2025.6.md @@ -152,6 +152,22 @@ helm upgrade authentik authentik/authentik -f values.yaml --version ^2025.6 - web/elements: fix dual select without sortBy (cherry-pick #14977) (#14979) - web/elements: fix typo in localeComparator (cherry-pick #15054) (#15055) +## Fixed in 2025.6.3 + +- ci: fix CodeQL failing on cherry-pick PRs (cherry-pick #15205) (#15206) +- ci: fix post-release e2e builds failing (cherry-pick #15082) (#15092) +- core: bump goauthentik/fips-python from 3.13.3-slim-bookworm-fips to 3.13.5-slim-bookworm-fips in 2025.6 (#15274) +- core: bump protobuf from 6.30.2 to v6.31.1 (cherry-pick #14894) (#15173) +- core: bump requests from 2.32.3 to v2.32.4 (cherry-pick #15129) (#15135) +- core: bump tornado from 6.4.2 to v6.5.1 (cherry-pick #15100) (#15116) +- core: bump urllib3 from 2.4.0 to v2.5.0 (cherry-pick #15131) (#15174) +- security: fix CVE-2025-52553 (cherry-pick #15289) (#15290) +- sources/ldap: fix sync on empty groups (cherry-pick #15158) (#15171) +- stages/user_login: fix session binding logging (#15175) +- web/elements: Add light mode custom css handling (cherry-pick #14944) (#15096) +- web/elements: typing error when variables are not converted to string (cherry-pick #15169) (#15222) +- web/user: fix infinite loop when no user settings flow is set (cherry-pick #15188) (#15192) + ## API Changes #### What's New