barrier/doc/newsfragments/client-certificate-checking.bugfix at b677a0b41967c652cb2b3fcddaa2b70b199fcdea - barrier - Gitea: Git with a cup of tea

backup/barrier

mirror of https://github.com/debauchee/barrier.git synced 2026-05-11 00:58:14 +08:00

Files

Povilas Kanapickas 229abab99f Implement client identity verification

This commit fixes two security vulnerabilities: CVE-2021-42072 and
CVE-2021-42073.

The issues have been reported by Matthias Gerstner <mgerstner@suse.de>.

2021-11-01 04:50:15 +02:00

8 lines

312 B

Plaintext

Raw Blame History

 SECURITY ISSUE
 Barrier now supports client identity verification (fixes CVE-2021-42072, CVE-2021-42073).
 To support seamless upgrades from older versions of Barrier this is currently disabled by default.
 The feature can be enabled in the settings dialog. If enabled, older clients of Barrier will be
 rejected.