v1.0.13

Changelog

Configuration

• This release updates dependencies that addresses the following vulnerabilities:
  • CVE-2024-28180
  • CVE-2024-45296

Release Authenticity

We sign all Bytesafe Community Edition binaries and docker images using Sigstore / cosign and encourage you to verify the authenticity of any binaries or docker images before execution.

The public key cosign.pub for verification of our builds is available in this repository and was at the time of this release:

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBpsLDqrhCmB6EcTnvnMzsCkH/xzM
y9YD/ysaVcQmjdhDvs1FOFFOsBGb3s1as4guLzF0tguwxUsf2Ur+V7DkYA==
-----END PUBLIC KEY-----

v1.0.12

Changelog

Configuration

• You can now configure PostgreSQL SSL mode with the DB_SSLMODE environment variable.

Release Authenticity

We sign all Bytesafe Community Edition binaries and docker images using Sigstore / cosign and encourage you to verify the authenticity of any binaries or docker images before execution.

The public key cosign.pub for verification of our builds is available in this repository and was at the time of this release:

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBpsLDqrhCmB6EcTnvnMzsCkH/xzM
y9YD/ysaVcQmjdhDvs1FOFFOsBGb3s1as4guLzF0tguwxUsf2Ur+V7DkYA==
-----END PUBLIC KEY-----

v1.0.10

Changelog

Dependencies

• This release updates dependencies that addresses the following vulnerabilities:

  • GHSA-9763-4f94-gfch
  • GHSA-7jwh-3vrq-q3m8
  • CVE-2024-27304
  • CVE-2024-27289
  • CVE-2023-45288
  • CVE-2024-24786

• Starting with this release we include the CycloneDX SBOM for bytesafe-ce

Release Authenticity

We sign all Bytesafe Community Edition binaries and docker images using Sigstore / cosign and encourage you to verify the authenticity of any binaries or docker images before execution.

The public key cosign.pub for verification of our builds is available in this repository and was at the time of this release:

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBpsLDqrhCmB6EcTnvnMzsCkH/xzM
y9YD/ysaVcQmjdhDvs1FOFFOsBGb3s1as4guLzF0tguwxUsf2Ur+V7DkYA==
-----END PUBLIC KEY-----

v1.0.9

Changelog

Dependencies

• This release updates dependencies that addresses the following vulnerabilities:
  • CVE-2023-48795
  • CVE-2023-49568
  • CVE-2020-8203

Release Authenticity

We sign all Bytesafe Community Edition binaries and docker images using Sigstore / cosign and encourage you to verify the authenticity of any binaries or docker images before execution.

The public key cosign.pub for verification of our builds is available in this repository and was at the time of this release:

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBpsLDqrhCmB6EcTnvnMzsCkH/xzM
y9YD/ysaVcQmjdhDvs1FOFFOsBGb3s1as4guLzF0tguwxUsf2Ur+V7DkYA==
-----END PUBLIC KEY-----

v1.0.8

Changelog

Dependencies

• This release updates dependencies that addresses the following vulnerabilities:
  • GHSA-w73w-5m7g-f7qc
  • GHSA-36jr-mh4h-2g58
  • GHSA-m425-mq94-257g
  • GHSA-3949-f494-cm99

Release Authenticity

We sign all Bytesafe Community Edition binaries and docker images using Sigstore / cosign and encourage you to verify the authenticity of any binaries or docker images before execution.

The public key cosign.pub for verification of our builds is available in this repository and was at the time of this release:

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBpsLDqrhCmB6EcTnvnMzsCkH/xzM
y9YD/ysaVcQmjdhDvs1FOFFOsBGb3s1as4guLzF0tguwxUsf2Ur+V7DkYA==
-----END PUBLIC KEY-----

v1.0.7

Changelog

Dependencies

• This release updates dependencies that addresses the following vulnerabilities:
  • CVE-2023-44270
  • GHSA-4374-p667-p6c8
  • CVE-2023-44487
  • CVE-2023-45133
  • CVE-2023-45683

Release Authenticity

We sign all Bytesafe Community Edition binaries and docker images using Sigstore / cosign and encourage you to verify the authenticity of any binaries or docker images before execution.

The public key cosign.pub for verification of our builds is available in this repository and was at the time of this release:

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBpsLDqrhCmB6EcTnvnMzsCkH/xzM
y9YD/ysaVcQmjdhDvs1FOFFOsBGb3s1as4guLzF0tguwxUsf2Ur+V7DkYA==
-----END PUBLIC KEY-----

v1.0.6

Changelog

Build

• Starting 1.0.6, we added Docker manifests for better multi-platform support. bytesafe/bytesafe-ce now contains both amd64 and arm64 images.

Release Authenticity

We sign all Bytesafe Community Edition binaries and docker images using Sigstore / cosign and encourage you to verify the authenticity of any binaries or docker images before execution.

The public key cosign.pub for verification of our builds is available in this repository and was at the time of this release:

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBpsLDqrhCmB6EcTnvnMzsCkH/xzM
y9YD/ysaVcQmjdhDvs1FOFFOsBGb3s1as4guLzF0tguwxUsf2Ur+V7DkYA==
-----END PUBLIC KEY-----

v1.0.5

Changelog

Bugfixes

• https://pkg.go.dev/vuln/GO-2023-1878

Release Authenticity

We sign all Bytesafe Community Edition binaries and docker images using Sigstore / cosign and encourage you to verify the authenticity of any binaries or docker images before execution.

The public key cosign.pub for verification of our builds is available in this repository and was at the time of this release:

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBpsLDqrhCmB6EcTnvnMzsCkH/xzM
y9YD/ysaVcQmjdhDvs1FOFFOsBGb3s1as4guLzF0tguwxUsf2Ur+V7DkYA==
-----END PUBLIC KEY-----

v1.0.4

Changelog

Features

• Do not persist unauthenticated sessions (performance)

Bugfixes

• Allow for local addresses (10.x.x.x / 192.168.x.x / etc) for upstreams and proxies.

Release Authenticity

We sign all Bytesafe Community Edition binaries and docker images using Sigstore / cosign and encourage you to verify the authenticity of any binaries or docker images before execution.

The public key cosign.pub for verification of our builds is available in this repository and was at the time of this release:

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBpsLDqrhCmB6EcTnvnMzsCkH/xzM
y9YD/ysaVcQmjdhDvs1FOFFOsBGb3s1as4guLzF0tguwxUsf2Ur+V7DkYA==
-----END PUBLIC KEY-----

v1.0.3

Changelog

Features

• Availability of new Bytesafe CE releases are now highlighted in the UI

Release Authenticity

We sign all Bytesafe Community Edition binaries and docker images using Sigstore / cosign and encourage you to verify the authenticity of any binaries or docker images before execution.

The public key cosign.pub for verification of our builds is available in this repository and was at the time of this release:

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBpsLDqrhCmB6EcTnvnMzsCkH/xzM
y9YD/ysaVcQmjdhDvs1FOFFOsBGb3s1as4guLzF0tguwxUsf2Ur+V7DkYA==
-----END PUBLIC KEY-----