Skip to content

Releases: gravitational/teleport

Teleport 17.1.4

07 Jan 08:45
db102d9
Compare
Choose a tag to compare

Description

  • Fixed a Postgres database-access auto-user provisioning syntax error that caused a misleading debug level error log in most cases, unless the database admin is not a superuser and the database was upgraded from Postgres v15 or lower to Postgres v16 or higher, in which case the role "teleport-auto-user" must be granted to the database admin with the ADMIN option manually. #50782
  • Fixes a bug where S3 bucket details fail to fetch due to incorrect bucket region. #50763
  • Present connection errors to the Web UI terminal during database sessions. #50700

Enterprise:

  • Fix missing cleanup actions if the Oracle db connection is closed in its initial phases.

Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

Plugins

Download the current release of Teleport plugins from the links below.

Teleport 17.1.3

02 Jan 22:05
9726471
Compare
Choose a tag to compare

Description

  • Fixes a bug where v16 Teleport cannot connect to v17.1.0, v17.1.1 and v17.1.2 clusters. #50658
  • Prevent panicking during shutdown when SQS consumer is disabled. #50648
  • Add a --labels flag to the tctl tokens ls command. #50624

Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

Plugins

Download the current release of Teleport plugins from the links below.

Teleport 17.1.2

30 Dec 21:30
5274176
Compare
Choose a tag to compare

Description

  • Fixed a bug in the WebUI that could cause an access denied error when accessing application. #50611
  • Improve session playback initial delay caused by an additional events query. #50592
  • Fix a bug in the tbot Helm chart causing invalid configuration when both default and custom outputs were used. #50526
  • Restore the ability to play session recordings in the web UI without specifying the session duration in the URL. #50459
  • Fix regression in tbot on Linux causing the Kubernetes credential helper to fail. #50413

Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

Plugins

Download the current release of Teleport plugins from the links below.

Teleport 17.1.1

20 Dec 18:14
73233d4
Compare
Choose a tag to compare

Warning

17.1.1 fixes a regression in 17.1.0 that causes SSH server heartbeats to disappear
after a few minutes. Please skip 17.1.0 and upgrade straight to 17.1.1 or above. #50490

Description

Access requests support for AWS Identity Center

AWS Identity Center integration now allows users to request short or long term access to permission sets via Access Requests.

Database access for PostgreSQL via web UI

Database access users can now connect to PostgreSQL databases connected to Teleport right from the web UI and use psql-style interface to query the database.

Hosted email plugin for Access Requests

Users now have the ability to setup Mailgun or generic SMTP server for Access Request notifications using Teleport web UI without needing to self-host the email plugin.

Multi-port support for VNet

Users now supports multiple ports (or a range of ports) with a single TCP application, and Teleport VNet will make all of the application's ports accessible on the virtual network.

Graphical Role Editor

Teleport's web UI includes a new role editor that allows users to create and modify roles without resorting to a raw YAML editor.

Granular SSH port forwarding controls

Teleport now allows cluster administrators to enable local and remote port forwarding separately rather than grouping both types of port forwarding behind a single option.

Other improvements and fixes

  • Fixed an issue that could cause some antivirus tools to block Teleport's Device Trust feature on Windows machines. #50453
  • Updates the UI login redirection service to honor redirection to enterprise/saml-idp/sso path even if user is already authenticated with Teleport. #50442
  • Reduced cluster state storage load in clusters with a large amount of resources. #50430
  • Updated golang.org/x/net to v0.33.0 (addresses CVE-2024-45338). #50397
  • Fixed an issue causing panics in SAML app or OIDC integration deletion relating to AWS Identity Center integration. #50360
  • Fix missing roles in Access Lists causing users to be locked out of their account. #50298
  • Added support for connecting to PostgreSQL databases using WebUI. #50287
  • Improved the performance of Teleport agents serving a large number of resources in Kubernetes. #50279
  • Improve performance of Kubernetes App Auto Discover. #50269
  • Added more granular access controls for SSH port forwarding. Access to remote or local port forwarding can now be controlled individually using the new ssh_port_forwarding role option. #50241
  • Properly close ssh port forwarding connections to prevent requests hanging indefinitely. #50238
  • Teleport's RDP client now sets the load balancing cookie to improve compatibility with local traffic managers. #50226
  • Fixes an intermittent EKS authentication failure when dealing with EKS auto-discovery. #50197
  • Expose /.well-known/jwks-okta public endpoint for Okta API services type App. #50177
  • Switched to a new role editor UI. #50030
  • Added support for multiple ports to TCP applications. #49711
  • Allow multiple consecutive occurrences of - and . in SSH server hostnames. #50410
  • Fixed bug causing users to see notifications for their own access requests in some cases. #50076
  • Improved the cluster initialization process's ability to recovery from errors. #49966

Enterprise:

  • Adds AWS Account name to Identity Center Roles and resources. Some manual cleanup may be required where users and Access Lists have been assigned the obsolete roles.

Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

Plugins

Download the current release of Teleport plugins from the links below.

Teleport 17.1.0

20 Dec 18:19
6e777d4
Compare
Choose a tag to compare

Warning

17.1.1 fixes a regression in 17.1.0 that causes SSH server heartbeats to disappear
after a few minutes. Please skip 17.1.0 and upgrade straight to 17.1.1 or above. #50490

Teleport 16.4.12

19 Dec 02:43
5722b8b
Compare
Choose a tag to compare

Description

  • Updated golang.org/x/net to v0.33.0 (addresses CVE-2024-45338). #50398
  • Improved the performance of Teleport agents serving a large number of resources in Kubernetes. #50280
  • Improve performance of Kubernetes App Auto Discover. #50268
  • Properly close ssh port forwarding connections to prevent requests hanging indefinitely. #50239
  • Teleport's RDP client now sets the load balancing cookie to improve compatibility with local traffic managers. #50225
  • Fixes an intermittent EKS authentication failure when dealing with EKS auto-discovery. #50198
  • Improved the cluster initialization process's ability to recovery from errors. #49967

Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

Plugins

Download the current release of Teleport plugins from the links below.

Teleport 17.0.5

11 Dec 22:16
7cc4c2a
Compare
Choose a tag to compare

Description

  • Updated golang.org/x/crypto to v0.31.0 (CVE-2024-45337). #50078
  • Fixed tsh ssh -Y when jumping between multiple servers. #50031
  • Reduced Auth memory consumption when agents join using the azure join method. #49998
  • Our OSS OS packages (rpm, deb, etc) now have up-to-date metadata. #49962
  • tsh correctly respects the --no-allow-passwordless flag. #49933
  • The web session authorization dialog in Teleport Connect is now a dedicated tab, which properly shows a re-login dialog when the local session is expired. #49931
  • Added an interactive mode for tctl auth rotate. #49896
  • Fixed a panic when the auth server does not provide a license expiry. #49876

Enterprise:

  • Fixed a panic occurring during SCIM push operations when resource.metadata is empty. #5654
  • Improved "IP mismatch" audit entries for device trust web. #5642
  • Fixed assigning suggested reviewers in the edge case when the user already has access to the requested resources. #5629

Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

Plugins

Download the current release of Teleport plugins from the links below.

Teleport 16.4.11

11 Dec 23:39
ce79021
Compare
Choose a tag to compare

Description

  • Updated golang.org/x/crypto to v0.31.0 (CVE-2024-45337). #50079
  • Fix tsh ssh -Y when jumping between multiple servers. #50032
  • Fixed an issue preventing default shell assignment for host users. #50003
  • Reduce Auth memory consumption when agents join using the azure join method. #49999
  • Our OSS OS packages (rpm, deb, etc) now have up-to-date metadata. #49963
  • Tsh correctly respects the --no-allow-passwordless flag. #49934
  • The web session authorization dialog in Teleport Connect is now a dedicated tab, which properly shows a re-login dialog when the local session is expired. #49932
  • Prevent a panic if the Auth Service does not provide a license expiry. #49877

Enterprise:

  • Improved "IP mismatch" audit entries for device trust web.
  • Fixed assigning suggested reviewers in the edge case when the user already has access to the requested resources.
  • Users can now see a list of their enrolled devices on their Account page.
  • Jamf Service sync audit events are attributed to "Jamf Service".
  • Added license updater service.
  • Fixed a bug where Access Lists imported from Microsoft Entra ID fail to be created if their display names include special characters.

Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

Plugins

Download the current release of Teleport plugins from the links below.

Teleport 15.4.24

12 Dec 00:05
23330db
Compare
Choose a tag to compare

Description

  • Updated golang.org/x/crypto to v0.31.0 (CVE-2024-45337). #50080
  • Fix tsh ssh -Y when jumping between multiple servers. #50034
  • Reduce Auth memory consumption when agents join using the azure join method. #50000
  • Tsh correctly respects the --no-allow-passwordless flag. #49935
  • Client tools {tctl,tsh} auto-updates controlled by cluster configuration. #48648

Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

Plugins

Download the current release of Teleport plugins from the links below.

Teleport 17.0.4

06 Dec 02:54
627fdd5
Compare
Choose a tag to compare

Description

  • Fixed a bug introduced in 17.0.3 breaking in-cluster joining on some Kubernetes clusters. #49841
  • SSH or Kubernetes information included for audit log list for start session events. #49832
  • Avoid tight web session renewals for sessions with short TTL (between 3m and 30s). #49768
  • Updated Go to 1.23.4. #49758
  • Fixed re-rendering bug when filtering Unified Resources. #49744

Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

Plugins

Download the current release of Teleport plugins from the links below.