website: update release notes (#8348)

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
This commit is contained in:
Jens L
2024-01-29 17:50:22 +01:00
committed by GitHub
parent 1db322b42f
commit f79054fe8c
2 changed files with 16 additions and 0 deletions

View File

@ -193,6 +193,18 @@ helm upgrade authentik authentik/authentik -f values.yaml --version ^2023.10
- sources/oauth: fix missing get_user_id for OIDC-like sources (Azure AD) (#7970)
- web/flows: fix device picker incorrect foreground color (cherry-pick #8067) (#8069)
## Fixed in 2023.10.7
- providers/oauth2: fix fix [CVE-2024-23647](../../security/CVE-2024-23647.md) (cherry-pick #8345) (#8347)
- rbac: fix invitations listing with restricted permissions (cherry-pick #8227) (#8229)
- root: fix listen trusted_proxy_cidrs config loading from environment (#8075)
- root: fix redis config not being updated to match previous change
- sources/oauth: fix azure_ad user_id and add test and fallback (cherry-pick #8146) (#8152)
- sources/oauth: fix URLs being overwritten by OIDC urls (cherry-pick #8147) (#8156)
- sources/oauth: revert azure_ad profile URL change (cherry-pick #8139) (#8141)
- stages/authenticator_validate: use friendly_name for stage selector when enrolling (cherry-pick #8255) (#8256)
- web/flows: fix icon for generic oauth source with dark theme (cherry-pick #8148) (#8151)
## API Changes
#### What's New

View File

@ -167,6 +167,10 @@ image:
- providers/oauth2: fix [CVE-2024-21637](../../security/CVE-2024-21637.md), Reported by [@lauritzh](https://github.com/lauritzh) (#8104)
## Fixed in 2023.8.7
- providers/oauth2: fix fix [CVE-2024-23647](../../security/CVE-2024-23647.md) (cherry-pick #8345) (#8347)
## API Changes
#### What's New