ALT-PU-2023-1325: package caddy update to version 2.6.4-alt1
Описание
This update upgrades caddy to version 2.6.4-alt1.
Устраненные уязвимости1
Связанные уязвимости
An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) via a crafted URI. Note: This has been disputed as a bug, not a security vulnerability, in the Caddy web server that emerged when an administrator's bad configuration containing a malformed request URI caused the server to return an empty reply instead of a valid HTTP response to the client.
An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) via a crafted URI. Note: This has been disputed as a bug, not a security vulnerability, in the Caddy web server that emerged when an administrator's bad configuration containing a malformed request URI caused the server to return an empty reply instead of a valid HTTP response to the client.
Withdrawn Advisory: Out-of-bounds Read can lead to client side denial of service
ALT-PU-2023-1033: package `caddy` update to version 2.6.2-alt1