chore(deps): update dependency gravitational/teleport to v15.3.1

[uniget-bot]

This PR contains the following updates:

Package	Update	Change
gravitational/teleport	patch	15.3.0 -> 15.3.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

gravitational/teleport (gravitational/teleport)

v15.3.1: Teleport 15.3.1

Compare Source

Description

• Fixed screen_size behavior for Windows Desktops, which was being overridden by the new resize feature. #​41241
• Ensure that the active sessions page shows up in the web UI for users with permissions to join sessions. #​41221
• Added indicators on the account settings page that tell which authentication methods are active. #​41169
• Fix a bug that was preventing tsh proxy kube certificate renewal from working when accessing a leaf kubernetes cluster via the root. #​41158
• Fixed AccessDeniedException for dynamodb:ConditionCheckItem operations when using AWS DynamoDB for cluster state storage. #​41133
• Added lock target to lock deletion audit events. #​41112
• Fixed a permissions issue that prevented the teleport-cluster helm chart operator from registering agentless ssh servers. #​41108
• Improve the reliability of the upload completer. #​41103
• Allows the listener for the tbot database-tunnel service to be set to a unix socket. #​41008

Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[nicholasdille-bot]

Auto-approved because label type/renovate is present.

[github-actions]

🔍 Vulnerabilities of ghcr.io/uniget-org/tools/teleport:15.3.1

📦 Image Reference ghcr.io/uniget-org/tools/teleport:15.3.1

digest	sha256:4721f2b67945785841c3bf277cabcdab6826edd745c856d95cfc128ad8a51adf
vulnerabilities
platform	linux/amd64
size	175 MB
packages	391

github.com/aws/aws-sdk-go 1.51.6 (golang) pkg:golang/github.com/aws/aws-sdk-go@1.51.6 Affected range >=0 Fixed version Not Fixed Description The Go AWS S3 Crypto SDK contains vulnerabilities that can permit an attacker with write access to a bucket to decrypt files in that bucket. Files encrypted by the V1 EncryptionClient using either the AES-CBC content cipher or the KMS key wrap algorithm are vulnerable. Users should migrate to the V1 EncryptionClientV2 API, which will not create vulnerable files. Old files will remain vulnerable until re-encrypted with the new client. Affected range >=0 Fixed version Not Fixed Description The Go AWS S3 Crypto SDK contains vulnerabilities that can permit an attacker with write access to a bucket to decrypt files in that bucket. Files encrypted by the V1 EncryptionClient using either the AES-CBC content cipher or the KMS key wrap algorithm are vulnerable. Users should migrate to the V1 EncryptionClientV2 API, which will not create vulnerable files. Old files will remain vulnerable until re-encrypted with the new client.

k8s.io/apiserver 0.29.0 (golang) pkg:golang/k8s.io/apiserver@0.29.0 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities Affected range <1.15.10 Fixed version 1.15.10, 1.16.7, 1.17.3 CVSS Score 4.3 CVSS Vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Description The Kubernetes API server component has been found to be vulnerable to a denial of service attack via successful API requests.

stdlib 1.21.9 (golang) pkg:golang/stdlib@1.21.9 Affected range <1.21.10 Fixed version 1.21.10 Description A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

[github-actions]

Attempting automerge. See https://github.com/uniget-org/tools/actions/runs/8994679005.

[github-actions]

PR has unknown mergeable_state (unstable) and can not be merged. See https://github.com/uniget-org/tools/actions/runs/8994679005.