⚡ Security
- No security fixes since previous release
- Oldest release with no known security issue is
v3.22.00(2025-09-17)
💡 Highlights
This release adds support for more than just GET and POST methods to the HTTPS Proxy, configurable through
osh-http-proxy.conf.
A new feature also adds some quality of life to users of :file:/home-encrypted bastions: the node status can now be
seen directly in the sshd banner, so that they know whether they need to use another node, see the
Specific upgrade instructions
on how to enable it on an already installed bastion.
We also get our usual round of fixes and enhancements, listed below.
for an exhaustive (and boring) list, please refer to the commit log.
📌 Changes
- feat: switch banner if node is sealed
- feat: httpproxy: add support for more HTTP methods (#601)
- feat: add admin script apply-ingress-keys-from-globally.pl (#604)
- enh: allow colon in remote user names (#602)
- fix: scp: more robust parsing for remote users with special chars (#600)
- fix: debian 13 uses lastlog2 (#590)
- fix: hide mfa info msg in quiet mode (#598)
- fix:
accountInfo: correctly return info when PIV grace period is set (#594)