gravitational/teleport v18.8.1 on GitHub

Description

Improved the performance of certain predicate expressions used to select SSH servers. #66769
Fixes an issue preventing joins using the azure join method in regions where the trust chain has been updated with an additional intermediate. #66764
Fix Teleport Connect's VNet failing to start on Linux when an older tsh is present at /usr/local/bin/tsh. #66757
The MFA prompt now includes the name of a leaf cluster if the resource belongs to one. #66741
When attempting to access a web app protected by Device Trust from an untrusted device, browsers now see a simple HTML page instead of a plain text response. #66717
Improved the error message on login in tsh and Teleport Connect when /webapi/ping returns a non-200 response. #66712
The kubernetes join method now supports allow rules targeting specific service account names and namespaces and supports wildcards when the new fields are used. #66700
Raise the app access upstream response-header cap from 5 minutes to 1 hour so long-running HTTP requests complete. #66687
Fixed an issue preventing host sudoers entries from being written on newer Linux distributions (i.e. Ubuntu 25.10) using sudo-rs. #66433

Enterprise:

Internal performance optimizations to the SCIM PATCH flow when multiple parallel PATCH requests target the same SCIM groups.
Fixed an issue with sessions failing to be summarized when using non-alternate buffer TUI applications.
Commands in the session summary timeline now show detected MITRE attack IDs and suspicious flags.
Fixed Web UI to no longer show audit review prompts or 0001-01-01 dates for static Access Lists.

Download the current and previous releases of Teleport at https://goteleport.com/download.

Download the current release of Teleport plugins from the links below.