From 44f8e6599bbd99c014574ecf37d20393529f7b2b Mon Sep 17 00:00:00 2001 From: nmfretz Date: Sat, 21 Dec 2024 22:51:20 +1100 Subject: [PATCH 1/2] Update vaultwarden to 1.32.7 --- vaultwarden/docker-compose.yml | 2 +- vaultwarden/umbrel-app.yml | 11 +++++++---- 2 files changed, 8 insertions(+), 5 deletions(-) diff --git a/vaultwarden/docker-compose.yml b/vaultwarden/docker-compose.yml index e9c1ba4c08..87ca99a17e 100644 --- a/vaultwarden/docker-compose.yml +++ b/vaultwarden/docker-compose.yml @@ -8,7 +8,7 @@ services: PROXY_AUTH_ADD: "false" server: - image: vaultwarden/server:1.32.6@sha256:0498b67709f769fee36b1acf02f69e8d9981b051aa5b8200878d938bd537d39d + image: vaultwarden/server:1.32.7@sha256:7a0aa23c0947be3582898deb5170ea4359493ed9a76af2badf60a7eb45ac36af user: "1000:1000" restart: on-failure stop_grace_period: 1m diff --git a/vaultwarden/umbrel-app.yml b/vaultwarden/umbrel-app.yml index fb40211bfb..d291a084a7 100644 --- a/vaultwarden/umbrel-app.yml +++ b/vaultwarden/umbrel-app.yml @@ -2,7 +2,7 @@ manifestVersion: 1 id: vaultwarden category: files name: Vaultwarden -version: "1.32.6" +version: "1.32.7" tagline: Unofficial Bitwarden® compatible server description: >- Vaultwarden is an alternative @@ -46,10 +46,13 @@ description: >- *Please note that Vaultwarden is not associated with the Bitwarden® project nor 8bit Solutions LLC. When using this app, please report any bugs or suggestions to us directly, regardless of whatever clients you are using (mobile, desktop, browser, etc), and do not use Bitwarden®'s official support channels. releaseNotes: >- + ⚠️ This release includes important security fixes. Updating is strongly recommended. + + Key highlights in this release: - - Fixed push notification functionality - - Improved organization member management - - Enhanced sync compatibility with native clients + - Fixed security vulnerability affecting organization groups + - Enhanced security measures and optimizations + - Improved SMTP configuration handling - Various bug fixes and stability improvements From 5215b428f0a80cc669ef9c28294ab167eecf9f5e Mon Sep 17 00:00:00 2001 From: nmfretz Date: Mon, 30 Dec 2024 16:35:21 +1000 Subject: [PATCH 2/2] Note that security fix is not relevant to Vaultwarden on umbrelOS --- vaultwarden/umbrel-app.yml | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/vaultwarden/umbrel-app.yml b/vaultwarden/umbrel-app.yml index d291a084a7..c078521bd1 100644 --- a/vaultwarden/umbrel-app.yml +++ b/vaultwarden/umbrel-app.yml @@ -46,11 +46,8 @@ description: >- *Please note that Vaultwarden is not associated with the Bitwarden® project nor 8bit Solutions LLC. When using this app, please report any bugs or suggestions to us directly, regardless of whatever clients you are using (mobile, desktop, browser, etc), and do not use Bitwarden®'s official support channels. releaseNotes: >- - ⚠️ This release includes important security fixes. Updating is strongly recommended. - - Key highlights in this release: - - Fixed security vulnerability affecting organization groups + - Fixed security vulnerability affecting organization groups (not relevant to Vaultwarden on umbrelOS) - Enhanced security measures and optimizations - Improved SMTP configuration handling - Various bug fixes and stability improvements