v4.39.16
Fixed 10
- Authentication discovery check too strict
- Authentication excessive filter escape
- Configuration max retries default
- Disable npm scripts for docker dev build
- Ignore node modules for vite watchers
- Improve root directory finding
- Middlewares strip path incorrect match criteria
- OIDC jwt profile claims policy hydration
- Server sanitise language cookie
- Web UI stuck state enrolling 2fa
Security 1
- Fix security issues detailed in GHSA-gmfg-3v4q-9qr4
Security Fixes
This release fixes security issues. For more information please see GHSA-gmfg-3v4q-9qr4.
Bug Fixes
- authentication: discovery check too strict (#11350) (5c1633b), closes #10840 by @james-d-elliott
- authentication: excessive filter escape (#11285) (10f7603), closes #11284 by @james-d-elliott
- configuration: max retries default (#11173) (f29bb95) by @james-d-elliott
- disable npm scripts for docker dev build (#11044) (4da3c53) by @Crowley723
- ignore node modules for vite watchers (#11412) (c8070f2) by @Crowley723
- improve root directory finding (#11029) (d4529e3) by @Crowley723
- middlewares: strip path incorrect match criteria (#11402) (75a3b99) by @james-d-elliott
- oidc: jwt profile claims policy hydration (#10663) (24ee120) by @james-d-elliott
- server: sanitise language cookie (#11341) (ed66b2b) by @nightah
- web: ui stuck state enrolling 2fa (#11367) (52f01f2), closes #10859 by @Br1an67
New Contributors
- @kapec94 made their first contribution in https://github.com/authelia/authelia/pull/10841
- @n0rad made their first contribution in https://github.com/authelia/authelia/pull/10854
- @fortellerq made their first contribution in https://github.com/authelia/authelia/pull/11001
- @caiocdcs made their first contribution in https://github.com/authelia/authelia/pull/11045
- @spomata made their first contribution in https://github.com/authelia/authelia/pull/10999
- @xaabi6 made their first contribution in https://github.com/authelia/authelia/pull/11081
- @TheSander562 made their first contribution in https://github.com/authelia/authelia/pull/10899
- @moedtm made their first contribution in https://github.com/authelia/authelia/pull/10896
- @AlexViridi made their first contribution in https://github.com/authelia/authelia/pull/11130
- @tonyaellie made their first contribution in https://github.com/authelia/authelia/pull/11187
- @kiaraly made their first contribution in https://github.com/authelia/authelia/pull/11176
- @louisonsarlinmagnus made their first contribution in https://github.com/authelia/authelia/pull/11210
- @x0k made their first contribution in https://github.com/authelia/authelia/pull/11227
- @tomaszduda23 made their first contribution in https://github.com/authelia/authelia/pull/11225
- @wischi-chr made their first contribution in https://github.com/authelia/authelia/pull/9867
- @FlorianObermayer made their first contribution in https://github.com/authelia/authelia/pull/11248
- @andreasbrett made their first contribution in https://github.com/authelia/authelia/pull/11257
- @Br1an67 made their first contribution in https://github.com/authelia/authelia/pull/11367
- @tkf144 made their first contribution in https://github.com/authelia/authelia/pull/11399
Docker Container
docker pull authelia/authelia:4.39.16docker pull ghcr.io/authelia/authelia:4.39.16