pangolin

v1.19.3 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

Published 1mo VPN & Tunnels

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

identity-management iot nat-traversal oidc pam private-access

+10 more

proxy remote-access self-hosted single-sign-on ssh tunneling vpn zero-trust zero-trust-network-access ztna

Affected surfaces

auth breaking_upgrade

Summary

AI summary

Updates https://pangolin.net/news/1-19-release, https://github.com/fosrl/pangolin/releases/tag/1.19.0, and https://docs.pangolin.net/self-host/how-to-update across a mixed release.

Full changelog

Read the 1.19 Announcement

Read the full announcement with discussion of new features: Pangolin 1.19: Browser Remote Access — SSH, RDP, VNC & More

What's Changed

Refer to the original 1.19 notes for a complete list of what changed since 1.18.

Add update notifications for different client types
Add delete resources associated with site
Add country flags
Add warning about not using .local aliases
Fix no data in status history when last data was over 90 days ago
Fix split by space causing issues with commands in role form
Fix inconsitant query params for limit and page size by enforcing strict inputs
Fix inconsistant API data in get vs update with policies
Fix request logs not loading on initial page open in CE
Fix remove NoNewPrivileges from default systemd install
Fix ALL ASN not allowed as an input
Fix add missing delete global idp route to integration api
Fix unescaped regex chars in rules
Fix supporter footer on resource login page to remove supporter
Improve efficiency and concurrency when changing site resources
Improve org policy error message responses

New Contributors

@kshitijshresth made their first contribution in https://github.com/fosrl/pangolin/pull/3251
@gmpinder made their first contribution in https://github.com/fosrl/pangolin/pull/3206
@mr1beast made their first contribution in https://github.com/fosrl/pangolin/pull/3336

Full Changelog: https://github.com/fosrl/pangolin/compare/1.19.2...1.19.3

How to Update

[!WARNING]
This version includes a new mode of private resource: SSH. If you had previously used host resources and configured the SSH access tab, you will now need to switch these to SSH resources in order to manage the SSH config. If you do not switch they will continue to function as before but you will be unable to adjust settings.

[!IMPORTANT]
1.19 browser-based SSH requires the Badger Traefik plugin to be on the latest version v1.4.1. The migration will automatically do this if it can find the Traefik config in the standard location BUT YOU WILL NEED TO RESTART TRAEFIK TO PULL THE NEW PLUGIN. Otherwise, please ensure your Badger is up to date.

[!IMPORTANT]
Browser-based RDP, SSH, and VNC as well as the new Pangolin SSH mode requires Newt version 1.13.0 or greater.

[!IMPORTANT]
Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.

View documentation