gcp-cherry-pick-bot[bot] dd8f809161 security: fix CVE-2024-47070 (cherry-pick #11536) (#11539) ...

security: fix CVE-2024-47070 (#11536)

* security: fix CVE-2024-47070



* Update website/docs/security/CVE-2024-47070.md




---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Signed-off-by: Jens L. <jens@beryju.org>
Co-authored-by: Jens L. <jens@goauthentik.io>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>

2024-09-27 16:20:41 +02:00

..

admin

outposts: add better UI for showing mismatched versions (#10885)

2024-08-12 23:17:15 +02:00

api

core: include version in built JS files (cherry-pick #9558) (#10148)

2024-06-18 17:39:04 +09:00

blueprints

enterprise: UI improvements, better handling of expiry (#10828)

2024-08-09 14:26:38 +02:00

brands

brands: add OIDC webfinger support (#10400)

2024-08-06 14:00:01 +02:00

core

core: fix permission check for scoped impersonation (cherry-pick #11315) (#11316)

2024-09-10 14:19:30 +02:00

crypto

security: fix CVE-2024-42490 (#11022)

2024-08-22 17:17:06 +02:00

enterprise

enterprise: fix API mixin license validity check (cherry-pick #11331) (#11342)

2024-09-11 13:22:01 +00:00

events

events: always use expiry from current tenant for events, not only when creating from HTTP request (cherry-pick #11415) (#11416)

2024-09-17 18:44:06 +02:00

flows

security: fix CVE-2024-42490 (#11022)

2024-08-22 17:17:06 +02:00

lib

security: fix CVE-2024-47070 (cherry-pick #11536) (#11539)

2024-09-27 16:20:41 +02:00

outposts

security: fix CVE-2024-42490 (#11022)

2024-08-22 17:17:06 +02:00

policies

outposts: add better UI for showing mismatched versions (#10885)

2024-08-12 23:17:15 +02:00

providers

security: fix CVE-2024-47077 (cherry-pick #11535) (#11537)

2024-09-27 16:19:24 +02:00

rbac

rbac: generate blueprint schema permissions from defined models not DB (#10962)

2024-08-19 13:44:13 +02:00

recovery

root: reformat with latest black version and fix tests (#8376)

2024-01-31 15:24:45 +01:00

root

security: fix CVE-2024-47070 (cherry-pick #11536) (#11539)

2024-09-27 16:20:41 +02:00

sources

sources/ldap: fix ms_ad userAccountControl not checking for lockout (cherry-pick #11532) (#11534)

2024-09-27 13:58:06 +02:00

stages

stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#10913)

2024-08-15 14:15:07 +02:00

tenants

root: use custom model serializer that saves m2m without bulk (cherry-pick #10139) (#10151)

2024-06-18 23:40:53 +09:00

__init__.py

release: 2024.8.2

2024-09-16 14:13:04 +02:00