Skip to content
This repository has been archived by the owner on Feb 9, 2024. It is now read-only.

Release 6.0.0-rc.4

Pre-release
Pre-release
Compare
Choose a tag to compare
@knisbet knisbet released this 08 Jul 18:17
· 825 commits to master since this release
6.0.0-rc.4
5d75cea
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

6.0.0-rc.4

Bugfixes

  • Fix a security issue with insecure decompression of application bundles.
  • Fix a security issue that allowed remote code execution in the tele cli tool.
  • Fix a security issue with missing ACLs in internal API.
  • Fix a security issue with install scripts command injection.
  • Fix a security issue that allowed for two factor authentication to be bypassed.
  • Fix a security issue that allowed for cross-site scripting in Internet Explorer.

Warning
This release fixes security vulnerabilities within Gravity. Please see Gravity Enterprise Announcement for more information.

Assets 2
Loading