v1.20.1-3

Security

• [#212] Update base images to fix cve-2025-68121
• [#206] CVE fixed cve-2026-24515

Changed

• [#206] Update Java base-image to v8.452.09-2
• [#206] Update Tomcat to v9.0.115

v1.20.1-2

Security

• [#204] CVE fixed: cve-2025-15467

v1.20.1-1

Fixed

• [#202] Reduce false-positive HTTP 401 Unauthorized status codes in the User REST API
  • Internal server errors like unavailable CAS or LDAP timeouts no longer end up as status code indicating an authentication problem but rather as HTTP 500 Internal server error

v1.20.0-5

Changed

• [#200] Set sensible resource requests and limits

v1.20.0.0-1

Caution

Hotfix-Release
This is a Hotfix-Release for Usermgt 1.20.0 for Ecosystems with CAS < v7.0.5.1-6
This release includes the fix for the encoding bug and does not use cas-service-accounts.
This release will not work in CES Multinode environments

Removed

• CAS service-accounts to be compatible with CAS < v7.0.5.1-6

v1.20.0-4

Changed

• Update Tomcat to 9.0.102 [#197]

Security

• [#197] Fix CVE-2025-24813

v1.20.0-3

Changed

• Renamed table headline key from Date to Date of import (en/de)

v1.20.0-2

Added

• [#193] Add missing keys to dogu descriptor

Changed

• If root log level is set to an invalid value, the script exits with an error message.

v1.20.0-1

Changed

• Update ces-build-lib to 4.0.1 and dogu-build-lib to v3.0.0 [#189]
• Update Tomcat to 9.0.36

Added

• Add Trivy-Scan of ces-build-lib
• Add develop-prerelease build step

v1.19.0-1

Changed

• The user form is now only valid if all required fields are filled out [#183]