Skip to content

v14.24-1

Choose a tag to compare

@cesmarvin cesmarvin released this 04 Sep 08:26
· 16 commits to develop since this release

Security

  • [#87] Rotate the superuser password once in post-upgrade.sh — it may have been generated by a doguctl older than v0.12.2 which used math/rand instead of crypto/rand
  • [#87] Affected values are indistinguishable from safe ones, so every instance rotates regardless of its installed version, guarded by the new dogu config marker password_rotated
  • [#87] A fresh installation sets the marker in initAdmin and never rotates