gravitational/teleport v18.9.2 on GitHub

Description

Fixed HTTP application access connections returning repeated 403 errors after certificate renewal. When the certificate behind a long-lived connection expires, the proxy now sends Connection: close so the client reestablishes the connection with a renewed certificate instead of reusing a dead one. #68099
Add "tsh apps logins" command to query available logins for the given cloud application (currently only AWS is supported). #68052
Fixed cloud-hosted Slack plugin exposing credentials in request URLs. #68017
Added the Sub CA tctl auth delete-override command, a user-friendly alternative over tctl edit ca_overrides or tctl rm ca_overrides. #68014
Fixed potential deadlock when reading access list owners from the cache as the cache becomes unhealthy. #68013
Added the Sub CA tctl auth create-override command, a user-friendly alternative over tctl create ca_override.yaml. #67983
Fix MFA prompts to show correct --mfa-mode values for webauthn authenticators. #67971
Prevent misrouting when multiple apps share the same public address. #67947
Fix an issue where the WebUI would prompt for MFA multiple times for admin actions (or outright fail for select commands) when sso is the only allowed second factor on the cluster. #67867
Fixed desktop connection failures to Windows 11 / Windows Server 2025 instances. #67483

Enterprise:

Download the current and previous releases of Teleport at https://goteleport.com/download.

Download the current release of Teleport plugins from the links below.