Skip to content
This repository has been archived by the owner on Feb 22, 2022. It is now read-only.

[stable/oauth2-proxy] Upgrade to 5.0+ to resolve security issue #21198

Closed
jeremyolliver opened this issue Mar 3, 2020 · 3 comments
Closed

[stable/oauth2-proxy] Upgrade to 5.0+ to resolve security issue #21198

jeremyolliver opened this issue Mar 3, 2020 · 3 comments
Labels
lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale.

Comments

@jeremyolliver
Copy link

Hi, I noticed on the README at https://github.com/pusher/oauth2_proxy#security that there's an open redirect vulnerability which requires running oauth2-proxy 5.0+ to resolve. The latest version in this chart to date runs 4.0 - I'd like to continue running the official stable helm chart that packages this, but it's important that this contains available security fixes. I'm not yet sure if I'll have time to submit a PR, so I wanted to file this to track the issue first.

@stale
Copy link

stale bot commented Apr 2, 2020

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Any further update will cause the issue/pull request to no longer be considered stale. Thank you for your contributions.

@stale stale bot added the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Apr 2, 2020
@stale
Copy link

stale bot commented Apr 17, 2020

This issue is being automatically closed due to inactivity.

@stale stale bot closed this as completed Apr 17, 2020
@abdennour
Copy link

Not sure why these bots are closed many valid issues.

@jeremyolliver do you get any workaround ?
Many things are outdated when we check the official software doc

  • The image repo is now quay.io/oauth2-proxy/oauth2-proxy, and No more quay.io/pusher/oauth2-proxy
  • processing .Values.extraArgs in templates/deployment.yam is outdated.
    Indeed, All args are now started by - not --.

....

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale.
Projects
None yet
Development

No branches or pull requests

2 participants