Reemo Infra¶

Ce changelog constitue l’historique complet des modifications de Reemo Infra.

v2.3.2 - 2026-06-06¶

Nouvelles fonctionnalités et améliorations

Déploiement bi-site : Nouveau mode de déploiement actif/actif sur deux sites indépendants, chacun hébergeant une instance complète de la plateforme. La cohérence des accès utilisateurs est assurée par un fournisseur d’identité SAML partagé. Voir Déploiement bi-site.

Accès à l’API interne : Exposition de /api/internal sur un nom d’hôte dédié, protégé par filtrage IP, mTLS dédié et clé HMAC applicative. Voir Accès à l’API interne.

Sécurité et Correctifs

Correctifs CVE : CVE-2025-13465, CVE-2025-13466, CVE-2025-15284, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-58754, CVE-2025-62718, CVE-2026-2004, CVE-2026-2005, CVE-2026-2006, CVE-2026-2007, CVE-2026-2391, CVE-2026-2739, CVE-2026-2950, CVE-2026-3449, CVE-2026-3605, CVE-2026-4800, CVE-2026-4867, CVE-2026-4923, CVE-2026-4926, CVE-2026-5807, CVE-2026-6638, CVE-2026-8723, CVE-2026-9256, CVE-2026-22184, CVE-2026-25639, CVE-2026-25680, CVE-2026-25681, CVE-2026-25896, CVE-2026-26278, CVE-2026-26958, CVE-2026-26996, CVE-2026-27135, CVE-2026-27136, CVE-2026-27651, CVE-2026-27654, CVE-2026-27837, CVE-2026-28387, CVE-2026-28388, CVE-2026-28389, CVE-2026-28390, CVE-2026-30951, CVE-2026-31789, CVE-2026-32141, CVE-2026-33036, CVE-2026-33228, CVE-2026-33349, CVE-2026-33750, CVE-2026-33757, CVE-2026-33814, CVE-2026-33815, CVE-2026-33816, CVE-2026-34601, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-40175, CVE-2026-40200, CVE-2026-41242, CVE-2026-41650, CVE-2026-41672, CVE-2026-41673, CVE-2026-41674, CVE-2026-41675, CVE-2026-41907, CVE-2026-42033, CVE-2026-42034, CVE-2026-42035, CVE-2026-42036, CVE-2026-42037, CVE-2026-42038, CVE-2026-42039, CVE-2026-42040, CVE-2026-42041, CVE-2026-42042, CVE-2026-42043, CVE-2026-42044, CVE-2026-42264, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-42945, CVE-2026-44288, CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44293, CVE-2026-44294, CVE-2026-44665, CVE-2026-44728, CVE-2026-45736, CVE-2026-45740, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, GHSA-c7w3-x93f-qmm8, GHSA-r4q5-vmmm-2653, GHSA-vvjj-xcjg-gr5g

Compatibilité minimale

Versions minimales requises pour ce déploiement :

DOCKER_VERSION_API: "3.21.5-d186f0ccb2b8"
DOCKER_VERSION_APICRON: "3.21.5-33154909d440"
DOCKER_VERSION_APICRONCLOUD: "3.21.5-2a57bba8b9b7"
DOCKER_VERSION_APICRONLDAP: "3.21.5-4dfdfa0921c9"
DOCKER_VERSION_APICRONLOG: "3.21.5-2a394c1e25a7"
DOCKER_VERSION_APICRONWORKSTATION: "3.21.5-66711302b632"
DOCKER_VERSION_APICRONSECURITYLOGS: "3.21.5-47668fb85932"
DOCKER_VERSION_LOGAPI: "1.1.1-78fea2306340"
DOCKER_VERSION_LOGAPIDB: "1.1.1-a993054759b2"
DOCKER_VERSION_LOGAPICRON: "1.1.1-00bd0740e7f3"
DOCKER_VERSION_APPLIANCEPORTAL: "1.28.3-89ae535e8a24"
DOCKER_VERSION_APPLIANCEAPI: "1.0.3-f2bc388870ba"
DOCKER_VERSION_DB: "3.21.5-a9a70e81c7c9"
DOCKER_VERSION_HAPROXY: "3.2.19-d1ee3d39029f"
DOCKER_VERSION_MAINTENANCE: "1.28.3-8706c007ccdb"
DOCKER_VERSION_MARIADB: "11.4.11-380e34a5849d"
DOCKER_VERSION_PORTAL: "3.23.2-c863eb1184d5"
DOCKER_VERSION_PROAPI: "3.10.2-4e594442e1c3"
DOCKER_VERSION_PRORELAYAPI: "1.6.3-c5972aa1de90"
DOCKER_VERSION_PROCLOUDAPI: "1.3.3-78c44c16b467"
DOCKER_VERSION_SIGNAL: "2.11.3-00e9885dee0c"
DOCKER_VERSION_TRAEFIK: "3.7.1-1c4571ee17bf"
DOCKER_VERSION_WORKSTATION: "1.28.3-7adedf16c688"
DOCKER_VERSION_WOLAPI: "2.1.2-91fa252e0fe1"
DOCKER_VERSION_WS-RELAY-SERVER: "1.2.0-6aa63f223fe9"
DOCKER_VERSION_TURN: "4.6.3-03dec9d133eb"

v2.3.1 - 2026-05-16¶

Cette version de maintenance met à jour les composants internes des services vers leurs dernières versions stables.

Compatibilité minimale

Versions minimales requises pour ce déploiement :

DOCKER_VERSION_API: "3.21.4-146c02550011"
DOCKER_VERSION_APICRON: "3.21.4-d3bc5ed629cb"
DOCKER_VERSION_APICRONCLOUD: "3.21.4-d59f177a2a2f"
DOCKER_VERSION_APICRONLDAP: "3.21.4-a65b1cfa0cf9"
DOCKER_VERSION_APICRONLOG: "3.21.4-a4e807342283"
DOCKER_VERSION_APICRONWORKSTATION: "3.21.4-33e21cb4fcfa"
DOCKER_VERSION_APICRONSECURITYLOGS: "3.21.4-0a61141f3e76"
DOCKER_VERSION_LOGAPI: "1.1.0-a64566e3d54f"
DOCKER_VERSION_LOGAPIDB: "1.1.0-3466cf6a0791"
DOCKER_VERSION_LOGAPICRON: "1.1.0-b656bda92321"
DOCKER_VERSION_APPLIANCEPORTAL: "1.28.3-908cdd089377"
DOCKER_VERSION_APPLIANCEAPI: "1.0.2-1f6e35cc1185"
DOCKER_VERSION_DB: "3.21.4-232c25392cc1"
DOCKER_VERSION_HAPROXY: "3.2.11-f06172d18e6f"
DOCKER_VERSION_MAINTENANCE: "1.28.2-fc44f99b2d4a"
DOCKER_VERSION_MARIADB: "11.4.10-4411f76f4dd3"
DOCKER_VERSION_PORTAL: "3.23.1-378cca765ea1"
DOCKER_VERSION_PROAPI: "3.10.1-8af9c413b5f5"
DOCKER_VERSION_PRORELAYAPI: "1.6.2-a7acbcf5b413"
DOCKER_VERSION_PROCLOUDAPI: "1.3.2-ff438b3aa3e0"
DOCKER_VERSION_SIGNAL: "2.11.1-68f784d6f1c0"
DOCKER_VERSION_TRAEFIK: "3.6.2-6615ec713b19"
DOCKER_VERSION_WORKSTATION: "1.28.3-98c0bccf7b51"
DOCKER_VERSION_WOLAPI: "2.1.2-91fa252e0fe1"
DOCKER_VERSION_WS-RELAY-SERVER: "1.2.0-cba145684261"
DOCKER_VERSION_TURN: "4.6.3-dbe067016e10"
DOCKER_VERSION_EXIM4: "4.93-8f788bd32678"
DOCKER_VERSION_MYSQL: "8.0.40-0ubuntu0.24.04.1-5960a370b81f"
DOCKER_VERSION_MYSQLCLUSTER_MGMD: "8.0.41-cluster-6e8f4818a951"
DOCKER_VERSION_MYSQLCLUSTER_MYSQLD: "8.0.45-cluster-0bb02b85086e"
DOCKER_VERSION_MYSQLCLUSTER_NDBD: "8.0.41-8745984346f8"

v2.3.0 - 2026-04-24¶

Nouvelles fonctionnalités et améliorations

Journaux de séurité (Log API) : Toutes les actions utilisateurs sont désormais enregistrées dans une base de données dédiée, accessible via l’interface d’administration. Voir Journaux de sécurité.

Provisionnement d’appliance : Nouveau type de fournisseur permettant d’exécuter des conteneurs localement sur une appliance Reemo. Voir Provisionnement d’appliance.

Serveur de fichiers : Support de la gestion par groupes et de la co-édition.

CGU Intégrées : Les administrateurs peuvent désormais inclure un fichier de conditions générales directement sur le portail (plus besoin d’URL externe).

Workspaces Jitsi :

Lancement immédiat de conférence (sans planification préalable).

Ajout d’un mode Jitsi dédié pour les services d’espace de travail.

Validation des formulaires renforcée et gestion des erreurs de workstations améliorée.

Revues de droits : Prise en charge des collections et possibilité de surligner des éléments pour faciliter les cycles de revue.

UI/UX : Ajout de la pagination sur la page Ressources et correction de diverses coquilles.

Sécurité et Correctifs

Réinitialisation de mot de passe : L’accès est désormais restreint aux rôles autorisés uniquement.

Stabilité : Correction des problèmes de fiabilité du healthcheck de la base de données.

Correctifs CVE

API : CVE-2026-2391, CVE-2026-2739, CVE-2026-27837, CVE-2026-30951, CVE-2026-32141, CVE-2026-33228

Portail : CVE-2026-26996

Provision-API : CVE-2026-2391

Compatibilité minimale

Versions minimales requises pour ce déploiement :

DOCKER_VERSION_API: "3.19.1-5f7ca23a689f"
DOCKER_VERSION_APICRON: "2.7.2-ab04725fa033"
DOCKER_VERSION_APICRONCLOUD: "2.5.1-de7d299d775e"
DOCKER_VERSION_APICRONLDAP: "1.2.1-ee8a4f36b15f"
DOCKER_VERSION_APICRONLOG: "1.2.1-9d64f3097c4a"
DOCKER_VERSION_APICRONWORKSTATION: "1.3.1-4050abe8a44a"
DOCKER_VERSION_APICRONSECURITYLOGS: "1.0.1-5cf3582cf34e"
DOCKER_VERSION_LOGAPI: "1.1.0-a64566e3d54f"
DOCKER_VERSION_LOGAPIDB: "1.1.0-3466cf6a0791"
DOCKER_VERSION_LOGAPICRON: "1.1.0-b656bda92321"
DOCKER_VERSION_APPLIANCEPORTAL: "1.28.3-9252cc005347"
DOCKER_VERSION_APPLIANCEAPI: "1.0.2-1f6e35cc1185"
DOCKER_VERSION_DB: "3.19.0-08a0a09a1c79"
DOCKER_VERSION_HAPROXY: "3.2.11-f06172d18e6f"
DOCKER_VERSION_MAINTENANCE: "1.28.2-fc44f99b2d4a"
DOCKER_VERSION_MARIADB: "11.4.10-4411f76f4dd3"
DOCKER_VERSION_PORTAL: "3.22.1-d615c7a45793"
DOCKER_VERSION_PROAPI: "3.9.1-0cf947ffd116"
DOCKER_VERSION_PRORELAYAPI: "1.6.2-a7acbcf5b413"
DOCKER_VERSION_PROCLOUDAPI: "1.3.2-ff438b3aa3e0"
DOCKER_VERSION_SIGNAL: "2.11.1-68f784d6f1c0"
DOCKER_VERSION_TRAEFIK: "3.6.2-6615ec713b19"
DOCKER_VERSION_WORKSTATION: "1.28.3-98c0bccf7b51"
DOCKER_VERSION_WOLAPI: "2.1.2-91fa252e0fe1"
DOCKER_VERSION_WS-RELAY-SERVER: "1.2.0-cba145684261"
DOCKER_VERSION_TURN: "4.6.3-dbe067016e10"
DOCKER_VERSION_EXIM4: "4.93-8f788bd32678"
DOCKER_VERSION_MYSQL: "8.0.40-0ubuntu0.24.04.1-5960a370b81f"
DOCKER_VERSION_MYSQLCLUSTER_MGMD: "8.0.41-cluster-6e8f4818a951"
DOCKER_VERSION_MYSQLCLUSTER_MYSQLD: "8.0.45-cluster-0bb02b85086e"
DOCKER_VERSION_MYSQLCLUSTER_NDBD: "8.0.41-8745984346f8"

v2.2.2 - 2026-03-18¶

Resources: Merged computers and containers in an unified view called Resources

UI:

Refactored main navigation

Refactored user settings

Containers: Added container “blueprints” feature

SSO: Added ability to choose SCIM organization target for instance connectors

SCIM: Send correct headers in responses

Minimum service compatibility:

DOCKER_VERSION_API: "3.13.3-bd7f0d433e0b"
DOCKER_VERSION_APICRON: "2.7.1-afc0e73f8da5"
DOCKER_VERSION_APICRONCLOUD: "2.5.1-5f8fb3874e63"
DOCKER_VERSION_APICRONLDAP: "1.2.1-f8618dec9868"
DOCKER_VERSION_APICRONLOG: "1.2.1-0dd6a69fc3da"
DOCKER_VERSION_DB: "3.13.3-9b8d31648285"
DOCKER_VERSION_HAPROXY: "3.2.11-f06172d18e6f"
DOCKER_VERSION_MAINTENANCE: "1.28.2-fc44f99b2d4a"
DOCKER_VERSION_MARIADB: "11.4.8-76c37289f907"
DOCKER_VERSION_PROAPI: "3.6.1-f1f063f83583"
DOCKER_VERSION_PRORELAYAPI: "1.6.1-1ef7f50fe8d1"
DOCKER_VERSION_PROCLOUDAPI: "1.3.1-e1c44ba80c1a"
DOCKER_VERSION_SIGNAL: "2.11.1-68f784d6f1c0"
DOCKER_VERSION_PORTAL: "3.16.3-77f09d543866"
DOCKER_VERSION_TRAEFIK: "3.6.2-6615ec713b19"
DOCKER_VERSION_WOLAPI: "2.1.1-e37688351043"
DOCKER_VERSION_WS-RELAY-SERVER: "1.2.0-28a2fd055501"
DOCKER_VERSION_TURN: "4.6.3-dbe067016e10"
DOCKER_VERSION_EXIM4: "4.93-8f788bd32678"
DOCKER_VERSION_MYSQL: "8.0.40-0ubuntu0.24.04.1-5960a370b81f"
DOCKER_VERSION_MYSQLCLUSTER_MGMD: "8.0.41-cluster-6e8f4818a951"
DOCKER_VERSION_MYSQLCLUSTER_MYSQLD: "8.0.41-cluster-79b2446edde5"
DOCKER_VERSION_MYSQLCLUSTER_NDBD: "8.0.41-8745984346f8"

v2.2.1 - 2026-03-10¶

Image: Added capability drop option

File Transfer:

Improved UI/UX

Added file extensions permissions

Added file size permissions

Announcements: Added “important” flag to trigger modal display of an announcement

Collections: Increased maximum autofill rules from 5 to 10

Agent install: Fixed scripts

Logs: Added LogAPI support

Login: Fixed an issue with “Keeper” browser extension

Minimum service compatibility:

DOCKER_VERSION_API: "3.11.1-7f386452fd16"
DOCKER_VERSION_APICRON: "2.7.1-afc0e73f8da5"
DOCKER_VERSION_APICRONCLOUD: "2.5.1-5f8fb3874e63"
DOCKER_VERSION_APICRONLDAP: "1.2.1-f8618dec9868"
DOCKER_VERSION_APICRONLOG: "1.2.1-0dd6a69fc3da"
DOCKER_VERSION_DB: "3.11.1-098a3f46c5ce"
DOCKER_VERSION_HAPROXY: "3.2.11-f06172d18e6f"
DOCKER_VERSION_MAINTENANCE: "1.28.2-fc44f99b2d4a"
DOCKER_VERSION_MARIADB: "11.4.8-76c37289f907"
DOCKER_VERSION_PROAPI: "3.6.1-f1f063f83583"
DOCKER_VERSION_PRORELAYAPI: "1.6.1-8e3424e50379"
DOCKER_VERSION_PROCLOUDAPI: "1.3.1-e1c44ba80c1a"
DOCKER_VERSION_SIGNAL: "2.11.1-68f784d6f1c0"
DOCKER_VERSION_PORTAL: "3.13.3-f150bfb4a1ae"
DOCKER_VERSION_TRAEFIK: "3.6.2-6615ec713b19"
DOCKER_VERSION_WOLAPI: "2.1.1-e37688351043"
DOCKER_VERSION_WS-RELAY-SERVER: "1.2.0-28a2fd055501"
DOCKER_VERSION_TURN: "4.6.3-dbe067016e10"
DOCKER_VERSION_EXIM4: "4.93-8f788bd32678"
DOCKER_VERSION_MYSQL: "8.0.40-0ubuntu0.24.04.1-5960a370b81f"
DOCKER_VERSION_MYSQLCLUSTER_MGMD: "8.0.41-cluster-6e8f4818a951"
DOCKER_VERSION_MYSQLCLUSTER_MYSQLD: "8.0.41-cluster-79b2446edde5"
DOCKER_VERSION_MYSQLCLUSTER_NDBD: "8.0.41-8745984346f8"

v2.0.0 LTS - 2026-02-02¶

Nouvelle PKI interne

Exécution de Traefik en mode rootless (sans privilèges root)

Mise à jour vers Traefik v3

Remplacement de MySQL par MariaDB

Implémentation du mTLS pour MariaDB

Mise en place du mTLS entre Reemod et Signal

Mise en place du mTLS entre Traefik et Relayws

Inclusion du rôle relayws

Inclusion du rôle provision

RedHat / Rocky Linux : Modification automatique des règles du pare-feu pour l’ouverture des services Swarm et HTTPS (via l’option FIREWALL_REDHAT)

Inclusion d’un serveur TURN dans le rôle (via l’option TURN_ENABLED)

Cluster NDB : Désactivation du swap

CVE-2026-25128 CVE-2025-13465 CVE-2025-15467 CVE-2026-24515 CVE-2025-69419 CVE-2025-69421 CVE-2026-22695 CVE-2026-22801 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 CVE-2026-27904 CVE-2026-27903 CVE-2026-26996 CVE-2026-25646

Minimum compatible avec les services:

DOCKER_VERSION_API: "2.40.3-975600d52a41"
DOCKER_VERSION_APICRON: "2.5.3-955c3972b401"
DOCKER_VERSION_APICRONCLOUD: "2.4.3-7d6cf8b29983"
DOCKER_VERSION_APICRONLDAP: "1.1.3-b19b907c797b"
DOCKER_VERSION_APICRONLOG: "1.1.3-d8c0ee24cca5"
DOCKER_VERSION_DB: "2.40.2-4450d82ffa77"
DOCKER_VERSION_HAPROXY: "3.2.10-e737e265a9a2"
DOCKER_VERSION_MAINTENANCE: "1.28.2-a1a5b7fe3ca7"
DOCKER_VERSION_MARIADB: "11.4.8-ec5f062e4b18"
DOCKER_VERSION_PROAPI: "3.3.4-44d7bb920d70"
DOCKER_VERSION_PRORELAYAPI: "1.6.1-5b1e046d1858"
DOCKER_VERSION_PROCLOUDAPI: "1.3.1-4c464096f366"
DOCKER_VERSION_SIGNAL: "2.10.1-0621799990be"
DOCKER_VERSION_PORTAL: "2.40.3-22d679122047"
DOCKER_VERSION_TRAEFIK: "3.6.2-c8bfffe893ca"
DOCKER_VERSION_WOLAPI: "2.1.0-aa16ea9f5ef0"
DOCKER_VERSION_WS-RELAY-SERVER: "1.2.0-54a7f8612869"
DOCKER_VERSION_TURN: "4.6.3-1235816496b5"
DOCKER_VERSION_EXIM4: "4.93-8f788bd32678"
DOCKER_VERSION_MYSQL: "8.0.40-0ubuntu0.24.04.1-5960a370b81f"
DOCKER_VERSION_MYSQLCLUSTER_MGMD: "8.0.41-cluster-6e8f4818a951"
DOCKER_VERSION_MYSQLCLUSTER_MYSQLD: "8.0.41-cluster-79b2446edde5"
DOCKER_VERSION_MYSQLCLUSTER_NDBD: "8.0.41-8745984346f8"

v1.9.0 - 2025-12-29¶

Mapping SAML pour les groupes et les rôles au sein des groupes

Mise à jour du client web

Limitation du nombre de conteneurs simultanés dans une collection

Association entre un profil de conteneur (container profile) et un relais WebSocket

Mise en place d’une Content Security Policy (CSP)

Portail : Possibilité de personnaliser la couleur du thème d’un portail

Portail : Possibilité de désactiver la zone d’administration (admin area)

Portail : Filtrage de l’affichage des ressources d’un utilisateur par portail

Datadog : Envoi des logs vers Datadog

Possibilité d’ajouter des tags aux container providers

Possibilité de dupliquer un container profile

Ajout d’un paramètre d’organisation empêchant les administrateurs de groupe de créer un container profile

Possibilité de lier plusieurs relais WebSocket à un container provider

Possibilité de lier un container profile à un relais WebSocket spécifique (si le fournisseur en possède plusieurs)

Possibilité de désactiver la bannière pour la PWA

Possibilité d’autoriser les administrateurs d’organisation à inviter des utilisateurs issus d’autres organisations

Masquage du mapping SSO lorsqu’aucun connecteur n’est configuré

Harmonisation de l’affichage des tags utilisateurs sur la fiche de profil et dans la liste

Minimum compatible avec les services:

DOCKER_VERSION_API: "2.40.0-1850848a257e"
DOCKER_VERSION_APICRON: "2.5.1-86594ce75da8"
DOCKER_VERSION_APICRONCLOUD: "2.4.1-c95b5ab6c63b"
DOCKER_VERSION_APICRONLDAP: "1.1.1-099ec94d0802"
DOCKER_VERSION_APICRONLOG: "1.1.1-992bf5513ff4"
DOCKER_VERSION_DB: "2.40.0-db29f8dc4fac"
DOCKER_VERSION_HAPROXY: "3.2.7-c482f2972aa1"
DOCKER_VERSION_MAINTENANCE: "1.28.0-568f8b68dcfd"
DOCKER_VERSION_MARIADB: "11.4.8-4a2cce570f31"
DOCKER_VERSION_PROAPI: "3.3.2-418948ddba9a"
DOCKER_VERSION_PRORELAYAPI: "1.4.1-5836ea49ef27"
DOCKER_VERSION_PROCLOUDAPI: "1.1.1-527d775a9b6e"
DOCKER_VERSION_SIGNAL: "2.8.1-47a18cbac80b"
DOCKER_VERSION_PORTAL: "2.40.0-10226c0ed3da"
DOCKER_VERSION_WOLAPI: "2.0.2-09a5922e0411"
DOCKER_VERSION_TRAEFIK: "2.11.28-45ccceed8716"
DOCKER_VERSION_EXIM4: "4.93-8f788bd32678"
DOCKER_VERSION_WS_RELAY_SERVER: "1.1.0-a3e10a81a7d8"
DOCKER_VERSION_MYSQL: "8.0.40-0ubuntu0.24.04.1-5960a370b81f"
DOCKER_VERSION_MYSQLCLUSTER_MGMD: "8.0.41-cluster-6e8f4818a951"
DOCKER_VERSION_MYSQLCLUSTER_MYSQLD: "8.0.41-cluster-79b2446edde5"
DOCKER_VERSION_MYSQLCLUSTER_NDBD: "8.0.41-8745984346f8"

v1.8.2 - 2025-11-01¶

Added passkeys support
File transfer
Multiple 2FA methods can be used in parallel
Updated email update flow to require confirmation via email (better security)
Multi signal
SAML Connectors instance wide
SAML Groups Mapping
Collections for computers
Collections auto-fill
Strong password generator when creating/editing users by organization or instance admin
Rich text editor for announcements
Ability to force 2FA instance wide
Custom organization icons
Filter containers by organization or group
Health check prometheus available from a portal route
Fix CVE-2025-47906 CVE-2025-59375 CVE-2025-58754 CVE-2025-49794 CVE-2025-49796 CVE-2025-49795 CVE-2025-6021 CVE-2025-58050

Minimum compatible avec les services:

DOCKER_VERSION_API: "2.36.2-c9597c47af2b"
DOCKER_VERSION_APICRON: "2.5.1-86594ce75da8"
DOCKER_VERSION_APICRONCLOUD: "2.4.1-c95b5ab6c63b"
DOCKER_VERSION_APICRONLDAP: "1.1.1-099ec94d0802"
DOCKER_VERSION_APICRONLOG: "1.1.1-992bf5513ff4"
DOCKER_VERSION_DB: "2.36.0-862075638d33"
DOCKER_VERSION_HAPROXY: "3.2.6-745d16f3d79b"
DOCKER_VERSION_MAINTENANCE: "1.28.0-d9517450d239"
DOCKER_VERSION_MARIADB: "11.4.8-9286b8273491"
DOCKER_VERSION_PROAPI: "3.3.2-14510efa9fcb"
DOCKER_VERSION_PRORELAYAPI: "1.4.1-5836ea49ef27"
DOCKER_VERSION_PROCLOUDAPI: "1.1.1-527d775a9b6e"
DOCKER_VERSION_SIGNAL: "2.8.1-47a18cbac80b"
DOCKER_VERSION_PORTAL: "2.34.0-30a2cb54a85a"
DOCKER_VERSION_WOLAPI: "2.0.2-09a5922e0411"
DOCKER_VERSION_TRAEFIK: "2.11.28-45ccceed8716"
DOCKER_VERSION_EXIM4: "4.93-8f788bd32678"
DOCKER_VERSION_WS_RELAY_SERVER: "1.1.0-a3e10a81a7d8"
DOCKER_VERSION_MYSQL: "8.0.40-0ubuntu0.24.04.1-5960a370b81f"
DOCKER_VERSION_MYSQLCLUSTER_MGMD: "8.0.41-cluster-6e8f4818a951"
DOCKER_VERSION_MYSQLCLUSTER_MYSQLD: "8.0.41-cluster-79b2446edde5"
DOCKER_VERSION_MYSQLCLUSTER_NDBD: "8.0.41-8745984346f8"

v1.8.1 - 2025-08-30¶

fix portal/api

Minimum compatible avec les services:

DOCKER_VERSION_API: "2.27.6-c5ea7fd950cd"
DOCKER_VERSION_APICRON: "2.5.0-6ce0249a9b3a"
DOCKER_VERSION_APICRONLDAP: "1.1.0-13545ac838a0"
DOCKER_VERSION_APICRONLOG: "1.1.0-a94a9fa3a0c2"
DOCKER_VERSION_APICRONCLOUD: "2.4.0-cf9b13e7df6e"
DOCKER_VERSION_PORTAL: "2.24.0-f1b9b6cdd4b5"
DOCKER_VERSION_SIGNAL: "2.7.1-da3fee502c57"
DOCKER_VERSION_PROAPI: "3.0.0-168157e1b41d"
DOCKER_VERSION_EXIM4: "4.93-8f788bd32678"
DOCKER_VERSION_HAPROXY: "3.2.3-33b4e38789a7"
DOCKER_VERSION_DB: "2.27.3-a87945c18c97"
DOCKER_VERSION_PRORELAYAPI: "1.3.4-e93b1053317a"
DOCKER_VERSION_PROCLOUDAPI: "1.1.1-527d775a9b6e"
DOCKER_VERSION_WS_RELAY_SERVER: "1.1.0-a3e10a81a7d8"
DOCKER_VERSION_MYSQL: "8.0.40-0ubuntu0.24.04.1-5960a370b81f"
DOCKER_VERSION_TRAEFIK: "2.11.28-45ccceed8716"
DOCKER_VERSION_MYSQLCLUSTER_MGMD: "8.0.41-cluster-6e8f4818a951"
DOCKER_VERSION_MYSQLCLUSTER_MYSQLD: "8.0.41-cluster-79b2446edde5"
DOCKER_VERSION_MYSQLCLUSTER_NDBD: "8.0.41-8745984346f8"
DOCKER_VERSION_WOLAPI: "2.0.2-d4703eee7ddc"
DOCKER_VERSION_MAINTENANCE: "1.26.2-5af147f320f0"

v1.8.0 - 2025-08-27¶

fix CVE-2025-7783 CVE-2025-7339
fix installation offline ProcloudAPI
fix healthcheck ProcloudAPI

Minimum compatible avec les services:

DOCKER_VERSION_API: "2.27.6-c5ea7fd950cd"
DOCKER_VERSION_APICRON: "2.5.0-6ce0249a9b3a"
DOCKER_VERSION_APICRONLDAP: "1.1.0-13545ac838a0"
DOCKER_VERSION_APICRONLOG: "1.1.0-a94a9fa3a0c2"
DOCKER_VERSION_APICRONCLOUD: "2.4.0-cf9b13e7df6e"
DOCKER_VERSION_PORTAL: "2.23.12-0c224a0b3a4f"
DOCKER_VERSION_SIGNAL: "2.7.1-da3fee502c57"
DOCKER_VERSION_PROAPI: "3.0.0-168157e1b41d"
DOCKER_VERSION_EXIM4: "4.93-8f788bd32678"
DOCKER_VERSION_HAPROXY: "3.2.3-33b4e38789a7"
DOCKER_VERSION_DB: "2.27.3-a87945c18c97"
DOCKER_VERSION_PRORELAYAPI: "1.3.4-e93b1053317a"
DOCKER_VERSION_PROCLOUDAPI: "1.1.1-527d775a9b6e"
DOCKER_VERSION_WS_RELAY_SERVER: "1.1.0-a3e10a81a7d8"
DOCKER_VERSION_MYSQL: "8.0.40-0ubuntu0.24.04.1-5960a370b81f"
DOCKER_VERSION_TRAEFIK: "2.11.28-45ccceed8716"
DOCKER_VERSION_MYSQLCLUSTER_MGMD: "8.0.41-cluster-6e8f4818a951"
DOCKER_VERSION_MYSQLCLUSTER_MYSQLD: "8.0.41-cluster-79b2446edde5"
DOCKER_VERSION_MYSQLCLUSTER_NDBD: "8.0.41-8745984346f8"
DOCKER_VERSION_WOLAPI: "2.0.2-d4703eee7ddc"
DOCKER_VERSION_MAINTENANCE: "1.26.2-5af147f320f0"

v1.7.4 - 2025-08-18¶

fix CVE-2025-54369 CVE-2025-54419 CVE-2025-7783 CVE-2025-7339
fix bug cookie
Possibilité de lier une image de conteneur à une autre image. Cette 2e image sera lancée en même temps que la première
Profile de remote expérience
Refresh automatique du CSRF token
Possibilité d’afficher / masquer le mot de passe dans l’interface lors du login / changement de mot de passe

Minimum compatible avec les services:

DOCKER_VERSION_API: "2.27.5-abf6937672bc"
DOCKER_VERSION_APICRON: "2.5.0-6ce0249a9b3a"
DOCKER_VERSION_APICRONLDAP: "1.1.0-13545ac838a0"
DOCKER_VERSION_APICRONLOG: "1.1.0-a94a9fa3a0c2"
DOCKER_VERSION_APICRONCLOUD: "2.4.0-cf9b13e7df6e"
DOCKER_VERSION_PORTAL: "2.23.7-2a476783945a"
DOCKER_VERSION_SIGNAL: "2.7.0-9dcfc9504fee"
DOCKER_VERSION_PROAPI: "3.0.0-168157e1b41d"
DOCKER_VERSION_EXIM4: "4.93-8f788bd32678"
DOCKER_VERSION_HAPROXY: "3.2.3-33b4e38789a7"
DOCKER_VERSION_DB: "2.27.3-a87945c18c97"
DOCKER_VERSION_PRORELAYAPI: "1.3.3-f391ea8af6f5"
DOCKER_VERSION_PROCLOUDAPI: "1.1.1-527d775a9b6e"
DOCKER_VERSION_WS_RELAY_SERVER: "1.1.0-a3e10a81a7d8"
DOCKER_VERSION_MYSQL: "8.0.40-0ubuntu0.24.04.1-5960a370b81f"
DOCKER_VERSION_TRAEFIK: "2.11.28-45ccceed8716"
DOCKER_VERSION_MYSQLCLUSTER_MGMD: "8.0.41-cluster-6e8f4818a951"
DOCKER_VERSION_MYSQLCLUSTER_MYSQLD: "8.0.41-cluster-79b2446edde5"
DOCKER_VERSION_MYSQLCLUSTER_NDBD: "8.0.41-8745984346f8"
DOCKER_VERSION_WOLAPI: "2.0.2-d4703eee7ddc"
DOCKER_VERSION_MAINTENANCE: "1.26.2-5af147f320f0"

v1.7.3¶

fix bug firefox

Minimum compatible avec les services:

DOCKER_VERSION_API: "2.24.1-9025fb2e51a3"
DOCKER_VERSION_APICRON: "2.4.2-400f0fc221e2"
DOCKER_VERSION_APICRONLDAP: "1.0.1-dfbb174ce4e6"
DOCKER_VERSION_APICRONLOG: "1.0.2-ed572809525d"
DOCKER_VERSION_APICRONCLOUD: "2.3.1-0343445141db"
DOCKER_VERSION_PORTAL: "2.20.0-6bd421635976"
DOCKER_VERSION_SIGNAL: "2.6.2-2b0629cfbc3e"
DOCKER_VERSION_PROAPI: "2.8.0-c35987cbe422"
DOCKER_VERSION_EXIM4: "4.93-8f788bd32678"
DOCKER_VERSION_HAPROXY: "2.8.13-8eb4f8c-83696c9ad549"
DOCKER_VERSION_DB: "2.24.1-2a8b349cc464"
DOCKER_VERSION_PRORELAYAPI: "1.3.3-ba8c9e69ee5f"
DOCKER_VERSION_PROCLOUDAPI: "1.1.0-8a1683717388"
DOCKER_VERSION_WS_RELAY_SERVER: "1.1.0-a3e10a81a7d8"
DOCKER_VERSION_MYSQL: "8.0.40-0ubuntu0.24.04.1-5960a370b81f"
DOCKER_VERSION_TRAEFIK: "v2.11"
DOCKER_VERSION_MYSQLCLUSTER_MGMD: "8.0.41-cluster-6e8f4818a951"
DOCKER_VERSION_MYSQLCLUSTER_MYSQLD: "8.0.41-cluster-79b2446edde5"
DOCKER_VERSION_MYSQLCLUSTER_NDBD: "8.0.41-8745984346f8"
DOCKER_VERSION_WOLAPI: "2.0.2-d4703eee7ddc"
DOCKER_VERSION_MAINTENANCE: "1.26.2-5af147f320f0"

v1.7.2¶

fix sso syntax error

Minimum compatible avec les services:

DOCKER_VERSION_API: "2.23.2-da83ca129b08"
DOCKER_VERSION_APICRON: "2.4.2-400f0fc221e2"
DOCKER_VERSION_APICRONLDAP: "1.0.1-dfbb174ce4e6"
DOCKER_VERSION_APICRONLOG: "1.0.2-ed572809525d"
DOCKER_VERSION_APICRONCLOUD: "2.3.1-0343445141db"
DOCKER_VERSION_PORTAL: "2.19.6-5f0d1c8571df"
DOCKER_VERSION_SIGNAL: "2.6.2-2b0629cfbc3e"
DOCKER_VERSION_PROAPI: "2.8.0-c35987cbe422"
DOCKER_VERSION_EXIM4: "4.93-8f788bd32678"
DOCKER_VERSION_HAPROXY: "2.8.13-8eb4f8c-83696c9ad549"
DOCKER_VERSION_DB: "2.23.2-c77ee3bec44b"
DOCKER_VERSION_PRORELAYAPI: "1.3.3-ba8c9e69ee5f"
DOCKER_VERSION_PROCLOUDAPI: "1.1.0-8a1683717388"
DOCKER_VERSION_WS_RELAY_SERVER: "1.1.0-a3e10a81a7d8"
DOCKER_VERSION_MYSQL: "8.0.40-0ubuntu0.24.04.1-5960a370b81f"
DOCKER_VERSION_TRAEFIK: "v2.11"
DOCKER_VERSION_MYSQLCLUSTER_MGMD: "8.0.41-cluster-6e8f4818a951"
DOCKER_VERSION_MYSQLCLUSTER_MYSQLD: "8.0.41-cluster-79b2446edde5"
DOCKER_VERSION_MYSQLCLUSTER_NDBD: "8.0.41-8745984346f8"
DOCKER_VERSION_WOLAPI: "2.0.2-d4703eee7ddc"
DOCKER_VERSION_MAINTENANCE: "1.26.2-5af147f320f0"

v1.7.1¶

fix postgreSQL

Minimum compatible avec les services:

DOCKER_VERSION_API: "2.21.3-0fb7c7f0cb7a"
DOCKER_VERSION_APICRON: "2.4.2-400f0fc221e2"
DOCKER_VERSION_APICRONLDAP: "1.0.1-dfbb174ce4e6"
DOCKER_VERSION_APICRONLOG: "1.0.2-ed572809525d"
DOCKER_VERSION_APICRONCLOUD: "2.3.1-0343445141db"
DOCKER_VERSION_PORTAL: "2.18.7-bd714de04cc8"
DOCKER_VERSION_SIGNAL: "2.6.2-2b0629cfbc3e"
DOCKER_VERSION_PROAPI: "2.8.0-c35987cbe422"
DOCKER_VERSION_EXIM4: "4.93-8f788bd32678"
DOCKER_VERSION_HAPROXY: "2.8.13-8eb4f8c-83696c9ad549"
DOCKER_VERSION_DB: "2.21.3-39a000af0e32"
DOCKER_VERSION_PRORELAYAPI: "1.3.3-ba8c9e69ee5f"
DOCKER_VERSION_PROCLOUDAPI: "1.1.0-8a1683717388"
DOCKER_VERSION_WS_RELAY_SERVER: "1.1.0-a3e10a81a7d8"
DOCKER_VERSION_MYSQL: "8.0.40-0ubuntu0.24.04.1-5960a370b81f"
DOCKER_VERSION_TRAEFIK: "v2.11"
DOCKER_VERSION_MYSQLCLUSTER_MGMD: "8.0.41-cluster-6e8f4818a951"
DOCKER_VERSION_MYSQLCLUSTER_MYSQLD: "8.0.41-cluster-79b2446edde5"
DOCKER_VERSION_MYSQLCLUSTER_NDBD: "8.0.41-8745984346f8"
DOCKER_VERSION_WOLAPI: "2.0.2-d4703eee7ddc"
DOCKER_VERSION_MAINTENANCE: "1.26.2-5af147f320f0"

v1.7.0¶

Ajout d’une vérification de la RAM pour ndbcluster
fix CVE-2025-27152, CVE-2025-29775, CVE-2025-29774
Ajout d’une vérification de version community.docker >= 3.10.2
fix XSS
Ajout du support des metrics de Prometheus

Minimum compatible avec les services:

DOCKER_VERSION_API: "2.21.3-0fb7c7f0cb7a"
DOCKER_VERSION_APICRON: "2.4.2-400f0fc221e2"
DOCKER_VERSION_APICRONLDAP: "1.0.1-dfbb174ce4e6"
DOCKER_VERSION_APICRONLOG: "1.0.2-ed572809525d"
DOCKER_VERSION_APICRONCLOUD: "2.3.1-0343445141db"
DOCKER_VERSION_PORTAL: "2.18.7-bd714de04cc8"
DOCKER_VERSION_SIGNAL: "2.6.2-2b0629cfbc3e"
DOCKER_VERSION_PROAPI: "2.8.0-c35987cbe422"
DOCKER_VERSION_EXIM4: "4.93-8f788bd32678"
DOCKER_VERSION_HAPROXY: "2.8.13-8eb4f8c-83696c9ad549"
DOCKER_VERSION_DB: "2.20.2-96bc62bbb4af"
DOCKER_VERSION_PRORELAYAPI: "1.3.3-ba8c9e69ee5f"
DOCKER_VERSION_PROCLOUDAPI: "1.1.0-8a1683717388"
DOCKER_VERSION_WS_RELAY_SERVER: "1.1.0-a3e10a81a7d8"
DOCKER_VERSION_MYSQL: "8.0.40-0ubuntu0.24.04.1-5960a370b81f"
DOCKER_VERSION_TRAEFIK: "v2.11"
DOCKER_VERSION_MYSQLCLUSTER_MGMD: "8.0.41-cluster-6e8f4818a951"
DOCKER_VERSION_MYSQLCLUSTER_MYSQLD: "8.0.41-cluster-79b2446edde5"
DOCKER_VERSION_MYSQLCLUSTER_NDBD: "8.0.41-8745984346f8"
DOCKER_VERSION_WOLAPI: "2.0.2-d4703eee7ddc"
DOCKER_VERSION_MAINTENANCE: "1.26.2-5af147f320f0"

v1.6.0¶

Ajouter la possibilité d’utiliser plusieurs environnements relayws différents et de les associer à des environnements Provisions
Dans l’interface possibilité d’associer Relayws/provision/certificats
Génération d’archives des différents composants pour ensuite procéder à une installation offline

Minimum compatible avec les services:

DOCKER_VERSION_API: "2.19.8-d10c5abe24e5"
DOCKER_VERSION_APICRON: "2.4.1-ce5d6c83e6c3"
DOCKER_VERSION_APICRONLDAP: "1.0.0-9a666cca22f4"
DOCKER_VERSION_APICRONLOG: "1.0.1-770644da34aa"
DOCKER_VERSION_APICRONCLOUD: "2.3.0-8b548709743b"
DOCKER_VERSION_PORTAL: "2.17.5-2193c91a06c0"
DOCKER_VERSION_SIGNAL: "2.6.1-96afdfdaf25d"
DOCKER_VERSION_PROAPI: "2.7.7-cbeaa78a4aee"
DOCKER_VERSION_EXIM4: "4.93-8f788bd32678"
DOCKER_VERSION_HAPROXY: "2.8.13-8eb4f8c-83696c9ad549"
DOCKER_VERSION_DB: "2.19.8-eba6393cc705"
DOCKER_VERSION_PRORELAYAPI: "1.3.2-58f1f88d3526"
DOCKER_VERSION_PROCLOUDAPI: "0.2.0-41419414ba37"
DOCKER_VERSION_WS_RELAY_SERVER: "1.1.0-a3e10a81a7d8"
DOCKER_VERSION_MYSQL: "8.0.40-0ubuntu0.24.04.1-5960a370b81f"
DOCKER_VERSION_TRAEFIK: "v2.11"
DOCKER_VERSION_MYSQLCLUSTER_MGMD: "8.0.41-cluster-6e8f4818a951"
DOCKER_VERSION_MYSQLCLUSTER_MYSQLD: "8.0.41-cluster-79b2446edde5"
DOCKER_VERSION_MYSQLCLUSTER_NDBD: "8.0.41-8745984346f8"
DOCKER_VERSION_WOLAPI: "2.0.1-5ec357a16fbd"
DOCKER_VERSION_MAINTENANCE: "1.26.2-5af147f320f0"

Warning

Cette version amène une nouvelle version du service ws-relay-server qui doit être présent aussi dans l’environnement relayws si vous l’utilisez. 2 choix possibles :

Mettre dans le fichier inventaire la variable DOCKER_VERSION_WS_RELAY_SERVER avec le tag deja présent dans l’environnement relayws
Loader la nouvelle version de ws-relay-server dans l’environnement relayws avant mise à jour de reemo-infra

v1.5.0¶

Les réplicas par noeud des services ProAPI et ProrelayAPI sont passés à 2
Ajout des types de portal orgadmin/instadmin/orguser accessible avec la variable PORTAL_TYPE
Ajout du réseau 0net pour les instances non reemo
Ajout du mTLS entre Traefik et Portal ( interruption de service de quelques secondes ), mettre à jour Traefik et Portal en même temps
Ajout du mTLS entre Traefik et Signal ( interruption de service de quelques secondes ), mettre à jour Traefik et Signal en même temps
Ajout d’un apt update pour l’installation sous Ubuntu
Création du réseau overlay 0net pour les instances non Reemo
Possibilité d’initialiser la politique de mot de passe à l’installation d’une Instance
Ajout de ProcloudAPI
Ajout de NDBCluster
Ajout de WolAPI
TLSv1.3 Only
Ajout page de maintenance

Minimum compatible avec les services:

DOCKER_VERSION_API: "2.18.5-3555dfe154fe"
DOCKER_VERSION_APICRON: "2.3.0-7e1864a11d70"
DOCKER_VERSION_APICRONLDAP: "1.0.0-9a666cca22f4"
DOCKER_VERSION_APICRONLOG: "1.0.1-770644da34aa"
DOCKER_VERSION_APICRONCLOUD: "2.3.0-8b548709743b"
DOCKER_VERSION_PORTAL: "2.16.7-cff9a18d8c42"
DOCKER_VERSION_SIGNAL: "2.6.1-96afdfdaf25d"
DOCKER_VERSION_PROAPI: "2.7.2-4dcfe8fac84e"
DOCKER_VERSION_EXIM4: "4.93-8f788bd32678"
DOCKER_VERSION_HAPROXY: "2.8.13-8eb4f8c-83696c9ad549"
DOCKER_VERSION_DB: "2.18.4-bd0fa37131d3"
DOCKER_VERSION_PRORELAYAPI: "1.3.1-135b843eb1ef"
DOCKER_VERSION_PROCLOUDAPI: "0.2.0-41419414ba37"
DOCKER_VERSION_WS_RELAY_SERVER: "1.1.0-a3e10a81a7d8"
DOCKER_VERSION_MYSQL: "8.0.40-0ubuntu0.24.04.1-5960a370b81f"
DOCKER_VERSION_TRAEFIK: "v2.11"
DOCKER_VERSION_MYSQLCLUSTER_MGMD: "8.0.41-cluster-6e8f4818a951"
DOCKER_VERSION_MYSQLCLUSTER_MYSQLD: "8.0.41-cluster-79b2446edde5"
DOCKER_VERSION_MYSQLCLUSTER_NDBD: "8.0.41-8745984346f8"
DOCKER_VERSION_WOLAPI: "2.0.1-5ec357a16fbd"
DOCKER_VERSION_MAINTENANCE: "1.26.2-5af147f320f0"

Warning

Cette version amène une nouvelle version du service ws-relay-server qui doit être présent aussi dans l’environnement relayws si vous l’utilisez. 2 choix possibles :

Mettre dans le fichier inventaire la variable DOCKER_VERSION_WS_RELAY_SERVER avec le tag deja présent dans l’environnement relayws
Loader la nouvelle version de ws-relay-server dans l’environnement relayws avant mise à jour de reemo-infra

v1.4.0¶

Ajout du versionning sur les services

v1.3.1¶

Fix: DB_SSL_CRT

v1.3.0¶

Fix: Les utilisateurs managés déconnectés sont redirigés vers la page de connexion de leur organisation au lieu de la page globale
Fix: Le mappage LDAP du champ fullName n’était pas sauvegardé correctement
Fix: Rafraîchissement de la liste des connecteurs pour l’affichage dans un menu déroulant d’une organisation après leur création
Fix: Gestion des certificats SSL en tant que secrets