Fission v1.23.0 Security Update: Vulnerability Fixes & HMAC Auth Enhancement

Vulnerability Overview In version , the Fission project addressed several security-related issues, including dependency updates, improvements to security policies, and fixes for potential vulnerabilities. Impact Scope Dependency Updates: Multiple dependencies were updated, which may impact functionality related to these dependencies. Security Policy Improvements: New security measures, such as network policies and application-layer authentication, were added. This may affect existing network configurations and authentication mechanisms. Potential Vulnerability Fixes: Several potential security vulnerabilities were remediated. The specific impact scope requires further analysis based on the details of each vulnerability. Remediation Steps 1. Dependency Updates: - Updated multiple dependencies, including , , , and others. - For specific update details, refer to Release Highlights. 2. Security Policy Improvements: - Added per-service NetworkPolicies, covering each Fission listener. - Implemented HMAC application-layer authentication for StorageSvc . - Improved ingress trigger parsing to allow equals signs ( ). - Extended HMAC application-layer authentication to the fetcher, builder, executor, and router-internal components. 3. Potential Vulnerability Fixes: - Multiple security-related issues were resolved. For detailed fix information, see the Full Changelog. Code Blocks No specific POC code or exploit code is included on this page. Summary Version introduced several security enhancements and dependency updates to the Fission project, addressing multiple potential vulnerabilities. Users are advised to upgrade to this version as soon as possible to ensure system security.

Goal Reached Thanks to every supporter — we hit 100%!

Fission v1.23.0 Security Update: Vulnerability Fixes & HMAC Auth Enhancement

More from this source