Concourse v5.8.1 Release Notes

Release Date: 2020-03-24 // about 4 years ago
  • ๐Ÿฑ ๐Ÿ”— fix

    • โฌ†๏ธ Bump golang.org/x/crypto module from v0.0.0-20191119213627-4f8c1d86b1ba to v0.0.0-20200220183623-bac4c82f6975 to address vulnerability in ssh package.

    ๐Ÿฑ ๐Ÿ”— fix

    • ๐Ÿ›  Fix an edge case of CVE-2018-15798 where redirect URI during login flow could be embedded with a malicious host.