[ixpmanager] [RELEASE] V7.4.0 - Security Updates (severity: moderate), System Validation feature, improvements + bug fixes

[Thomas Kerin]

INEX, with the IXP Manager Sponsorship Program, is pleased to announce 
the immediate availability of IXP Manager v7.4.0. This is a general 
release containing new core features, bug fixes and improvements, the 
removal of a legacy feature, as well as one security fix.

https://github.com/inex/IXP-Manager/releases/tag/v7.4.0

As recently announced, some recent security fixes have been published 
with proof-of-concept to the oss-security mailing list. As such, all 
users of IXP Manager should ensure they are using the latest released 
version.

This release addresses 33 GitHub Dependabot alerts. It also includes a 
fix for a reported moderate vulnerability (CVSS 5.4) - Broken Object 
Level Authorisation (BOLA) Allows Unauthorised Deletion of Other Users' 
API Keys [1].


Kind regards,
Thomas Kerin
IXP Manager Sponsorship Program

[1] 
https://github.com/inex/IXP-Manager/security/advisories/GHSA-mf5w-pq3w-gvr2



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.inex.ie/pipermail/ixpmanager/attachments/20260817/e6632739/attachment.htm>