Starstruk Logo MarkStarstruk

v15.5.2

gravitational/teleportv15.5.2Jun 6, 2025by camscale

AI Summary

Teleport v15.5.2 is a patch release focused on security fixes and bug improvements. The release includes a medium-severity security fix for PKINIT (Kerberos) authentication that could allow users to overwrite host files on SQL Server databases, along with several UI and database discovery fixes.

Key Highlights

  • Fixed medium-severity security vulnerability in PKINIT (Kerberos) authentication for SQL Server databases
  • Fixed unknown resource kinds causing rendering errors in the web UI
  • Fixed formatting of cache_component label for Prometheus metrics
  • Fixed database discovery failing with more than 5 OpenSearch domains

Full Release Notes

## Description

### Security fixes

This patch includes some security fixes.
These issues are present in previous v15 releases.
Impacted users are recommended to upgrade their auth and proxy servers to the latest version.

#### [Medium] Unsanitized user input affecting PKINIT (Kerberos)

* Fixed users being able to overwrite host files on SQL Server database systems when using Kerberos. [#55144](https://github.com/gravitational/teleport/pull/55144)

This vulnerability affects users who authenticate to SQL Server with Kerberos using the PKINIT flow.

### Other fixes and improvements

* Fixed unknown resource kinds rendering errors in the web UI. [#55211](https://github.com/gravitational/teleport/pull/55211)
* Fixed the formatting of the `cache_component` label for the Prometheus metrics `teleport_cache_health` and `teleport_cache_last_reset_seconds`. [#55193](https://github.com/gravitational/teleport/pull/55193)
* Fixed database discovery failing when there are more than 5 OpenSearch domains. [#55060](https://github.com/gravitational/teleport/pull/55060)

## Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

## Plugins

Download the current release of Teleport plugins from the links below.
* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v15.5.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v15.5.2-linux-arm64-bin.tar.gz) 
* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v15.5.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v15.5.2-linux-arm64-bin.tar.gz)
* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v15.5.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v15.5.2-linux-arm64-bin.tar.gz)
* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v15.5.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v15.5.2-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v15.5.2-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v15.5.2-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v15.5.2-darwin-universal-bin.tar.gz)
* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v15.5.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v15.5.2-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v15.5.2-darwin-amd64-bin.tar.gz)
* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v15.5.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v15.5.2-linux-arm64-bin.tar.gz)
* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v15.5.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v15.5.2-linux-arm64-bin.tar.gz)
* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v15.5.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v15.5.2-linux-arm64-bin.tar.gz)
* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v15.5.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v15.5.2-linux-arm64-bin.tar.gz)