Update to vaultwarden-1.35.6
The previous release contained an issue where Two Factor Remember Tokens
and Recovery Tokens were not accepted at all. This has been fixed now in
this release.
Changes: https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.6
Security update to vaultwarden-1.35.5
This release contains security fixes for the following advisories:
- GHSA-937x-3j8m-7w7p Unconfirmed Owner Can Purge Entire Organization
Vault
- GHSA-569v-845w-g82p Cross-Org Group Binding Enables Unauthorized Read
And Write Access Into Another Organization
- GHSA-6j4w-g4jh-xjfx Refresh tokens not invalidated on security stamp
rotation
Changes: https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.5
libclock: add POSIX-compatible AlignedTimer for OpenBSD
https://invent.kde.org/plasma/plasma-workspace/-/merge_requests/6487timerfd_create(2) and timerfd_settime(2) are Linux-specific and not available
on OpenBSD. This alternative implementation uses a single-shot QTimer that
reschedules itself.
The next expiry is computed by rounding the current CLOCK_REALTIME down to the
last interval boundary and stepping forward by one interval.
This was marked BROKEN-sparc64 back when PHP 8.1 was still in the tree.
The issues then no longer apply, it builds fine on sparc64.
Remove BROKEN-sparc64
GCC 15 has the needed bit.h file that was missing when this
was marked BROKEN-sparc64 (like openttd, which was pointed out
by gkoehler).
Remove BROKEN-sparc64 now that it builds again.