Update to vaultwarden-1.35.6
The previous release contained an issue where Two Factor Remember Tokens
and Recovery Tokens were not accepted at all. This has been fixed now in
this release.
Changes: https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.6
rpki-client: ignore malformed revocationDate in CRLs
Do not treat x509_get_time() failure as a hard error in file mode.
Just skip the entry we can't format and emit a warning.
ok claudio
check the prefix (cidr) len for an allowedip is valid.
ie, don't allow prefixes greater than 32 or 128 bits for ipv4 and
ipv6 respectively.
found by Daniel Wade (danjwade95 at gmail dot com), who also suggested
the fix.
ok deraadt@ jmatthew@
These programs spin if they receive a RA from the local network with
ND option with length 0. from Daniel Wade
ok florian
this will be errata 7.7/036_v6daemons.patch and 7.8/030_v6daemons.patch
drm/amd/display: Fix DCE LVDS handling
From Alex Deucher
24ce568f7553a55404cddf8f0fca2a7c0ea9451c in linux-6.18.y/6.18.22
90d239cc53723c1a3f89ce08eac17bf3a9e9f2d4 in mainline linux
drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13
From Yang Wang
ba9be472a438ea348f0fffaaebf541960ee643db in linux-6.18.y/6.18.22
3e6dd28a11083e83e11a284d99fcc9eb748c321c in mainline linux
drm/amdgpu/pm: drop SMU driver if version not matched messages
From Alex Deucher
2b8ae82d85d75347984297ed60d5005622992f6b in linux-6.18.y/6.18.22
a3ffaa5b397f4df9d6ac16b10583e9df8e6fa471 in mainline linux
drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB
From Donet Tom
77c918eaa4c916751769242567407f61c6af142a in linux-6.18.y/6.18.22
4487571ef17a30d274600b3bd6965f497a881299 in mainline linux
drm/amdgpu: validate doorbell_offset in user queue creation
From Junrui Luo
3543005a42d7e8e12b21897ef6798541bf7cbcd3 in linux-6.18.y/6.18.22
a018d1819f158991b7308e4f74609c6c029b670c in mainline linux
drm/amdgpu: Fix wait after reset sequence in S4
From Lijo Lazar
1e130cf9cd172c684ff471d9cd8bccf06db64d88 in linux-6.18.y/6.18.22
daf470b8882b6f7f53cbfe9ec2b93a1b21528cdc in mainline linux
drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP
From Ville Syrjala
d0fd0bea847526dbe3d862c01e98a1617538565d in linux-6.18.y/6.18.22
9c9a57e4e337f94e23ddf69263fd0685c91155fb in mainline linux
drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode
From Ville Syrjala
86e926b108880c0109b8635e459450447156aeb7 in linux-6.18.y/6.18.22
4dfce79e098915d8e5fc2b9e1d980bc3251dd32c in mainline linux
drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw()
From Srinivasan Shanmugam
10c13c111d0d7f8e101c742feff264fc98e3f9f7 in linux-6.18.y/6.18.22
e927b36ae18b66b49219eaa9f46edc7b4fdbb25e in mainline linux
drm/ioc32: stop speculation on the drm_compat_ioctl path
From Greg Kroah-Hartman
f0e441be08a2eab10b2d06fccfa267ee599dd6b3 in linux-6.18.y/6.18.22
f8995c2df519f382525ca4bc90553ad2ec611067 in mainline linux
Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug"
From Maarten Lankhorst
89c3a4ba60309cc6333a8f3940a1866fc21a9000 in linux-6.18.y/6.18.22
45ebe43ea00d6b9f5b3e0db9c35b8ca2a96b7e70 in mainline linux
pfr_pool_get() in call to pfr_prepare_network()must use af
instead of hardcoded AF_INET
Issues reported and patch submitted by:
Renaud Allard <renaud () allard ! it>
OK sashan@
pf_frag_compare() should not be using subtraction to compare
fragment IDs
Issues reported and patch submitted by:
Renaud Allard <renaud () allard ! it>
OK sashan@
Fix error handling in pf_sourcelim_add()
There are two issues in pf_sourcelim_add() error path:
- stale pointers are left in pf_sourcelim_id_tree_inactive when
duplicate source limiter instance is found in pf_sourcelim_nm_tree
- overload table may leak when insertion of new source limiter instance
fails.
Both issues reported and patch submitted by:
Renaud Allard <renaud () allard ! it>
OK sashan@
sys/qwz: fixed some missmatched against ATH12k
It fully parse SERVICE_READY_EXT2 peer-metadata capability and fill
wmi_resource_config's tail.
It also fixes a crash/free of null, and adjusted buffer and timeouts to
match Linux to actually get full RDDM.
It uses world regulatory domain.
Plus a few small typos.
qwz now loads, but firmware crashes on scan.
OK: mglocker@
Security update to vaultwarden-1.35.5
This release contains security fixes for the following advisories:
- GHSA-937x-3j8m-7w7p Unconfirmed Owner Can Purge Entire Organization
Vault
- GHSA-569v-845w-g82p Cross-Org Group Binding Enables Unauthorized Read
And Write Access Into Another Organization
- GHSA-6j4w-g4jh-xjfx Refresh tokens not invalidated on security stamp
rotation
Changes: https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.5
