Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump vaultwarden due to CVE #1547

Merged
merged 1 commit into from
Nov 22, 2024
Merged

Bump vaultwarden due to CVE #1547

merged 1 commit into from
Nov 22, 2024

Conversation

papertigers
Copy link
Contributor

Version 1.32.5 addresses a CVE so we should bump to the latest patch release.

https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.5

I don't have a build VM setup at the moment if someone could test this for me before merging that would be appreciated!

@oetiker oetiker merged commit 6c92ab7 into omniosorg:master Nov 22, 2024
1 check passed
@sjorge
Copy link
Contributor

sjorge commented Nov 23, 2024

Seems to be available in the omnios-extra repo on bloody now but not installable?

root@vault:~# pkg update ooce/application/[email protected]
Creating Plan (Solver setup): /
pkg update: No matching version of ooce/application/vaultwarden can be installed:
  Reject:  pkg://extra.omnios/ooce/application/[email protected]
  Reason:  No version for 'require' dependency on library/security/[email protected] can be found
root@vault:~# pkg info vaultwarden
             Name: ooce/application/vaultwarden
          Summary: Bitwarden compatible server
      Description: Unofficial Bitwarden compatible server written in Rust,
                   formerly known as bitwarden_rs
            State: Installed (Manually installed)
        Publisher: extra.omnios
          Version: 1.32.4
           Branch: 151053.0
   Packaging Date: Sat Nov 16 11:02:01 2024
Last Install Time: Sat Apr 16 12:09:54 2022
 Last Update Time: Sat Nov 23 18:32:39 2024
             Size: 85.48 MB
             FMRI: pkg://extra.omnios/ooce/application/[email protected]:20241116T110201Z
root@vault:~# pkg update -nv
No updates available for this image. (zone:vault)

@sjorge
Copy link
Contributor

sjorge commented Nov 24, 2024

Andy pushed a new build of bloody that fixed this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants