Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(container): update vaultwarden/server ( 1.32.6 → 1.32.7 ) #357

Merged
merged 1 commit into from
Dec 20, 2024

Conversation

commit-commander[bot]
Copy link
Contributor

This PR contains the following updates:

Package Update Change
vaultwarden/server patch 1.32.6 -> 1.32.7

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

dani-garcia/vaultwarden (vaultwarden/server)

v1.32.7

Compare Source

Security Fixes

We have yet a few other security fixes for this release. We discovered that groups were able to be edited by any admin from any organization because the organization was not validated or used within the query. This could potentially allow an admin from other organizations to modify, or delete groups from any organization if they know the uuid of the group.
We suggest people to update a.s.a.p. to mitigate this risk.

What's Changed

Full Changelog: dani-garcia/vaultwarden@1.32.6...1.32.7


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@commit-commander
Copy link
Contributor Author

--- kubernetes/main/apps/vaultwarden/app Kustomization: flux-system/vaultwarden HelmRelease: vaultwarden/vaultwarden

+++ kubernetes/main/apps/vaultwarden/app Kustomization: flux-system/vaultwarden HelmRelease: vaultwarden/vaultwarden

@@ -86,13 +86,13 @@

                   secretKeyRef:
                     key: SMTP_USERNAME
                     name: vaultwarden-secret
               TZ: Europe/Sofia
             image:
               repository: vaultwarden/server
-              tag: 1.32.6@sha256:0498b67709f769fee36b1acf02f69e8d9981b051aa5b8200878d938bd537d39d
+              tag: 1.32.7@sha256:7a0aa23c0947be3582898deb5170ea4359493ed9a76af2badf60a7eb45ac36af
             probes:
               liveness:
                 custom: true
                 enabled: true
                 spec:
                   exec:

@commit-commander
Copy link
Contributor Author

--- HelmRelease: vaultwarden/vaultwarden Deployment: vaultwarden/vaultwarden

+++ HelmRelease: vaultwarden/vaultwarden Deployment: vaultwarden/vaultwarden

@@ -140,13 +140,13 @@

           valueFrom:
             secretKeyRef:
               key: SMTP_USERNAME
               name: vaultwarden-secret
         - name: TZ
           value: Europe/Sofia
-        image: vaultwarden/server:1.32.6@sha256:0498b67709f769fee36b1acf02f69e8d9981b051aa5b8200878d938bd537d39d
+        image: vaultwarden/server:1.32.7@sha256:7a0aa23c0947be3582898deb5170ea4359493ed9a76af2badf60a7eb45ac36af
         livenessProbe:
           exec:
             command:
             - /bin/sh
             - -c
             - curl --fail --silent --show-error http://localhost/alive

@d4rkfella d4rkfella merged commit 958649b into main Dec 20, 2024
10 checks passed
@d4rkfella d4rkfella deleted the renovate/main-vaultwarden-server-1.x branch December 20, 2024 11:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant