update to got-0.124
- make the chroot path directive in gotwebd.conf actually work
- fix a segfault in tog while using the & search feature
- plug a tree object leak in the gotd repo_write process
- fix gotd wrongly complaining about a missing gotsys.conf in pack files
- expand tabs in log messages displayed by tog diff to prevent misalignment
- prevent non-root users from blocking gotctl reload requests
- plug a memory leak in got-read-commit
- allow UTF-8 in gotsys.conf site owner names and repository descriptions
- reject non-UTF-8-encoded reference names in gotsys.conf
- make gotwebd display logged-in usernames in case of group-membership auth
Update to vaultwarden-1.35.6
The previous release contained an issue where Two Factor Remember Tokens
and Recovery Tokens were not accepted at all. This has been fixed now in
this release.
Changes: https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.6
Security update to vaultwarden-1.35.5
This release contains security fixes for the following advisories:
- GHSA-937x-3j8m-7w7p Unconfirmed Owner Can Purge Entire Organization
Vault
- GHSA-569v-845w-g82p Cross-Org Group Binding Enables Unauthorized Read
And Write Access Into Another Organization
- GHSA-6j4w-g4jh-xjfx Refresh tokens not invalidated on security stamp
rotation
Changes: https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.5