Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-1635

Высокий

ALT-PU-2023-1635: package traefik update to version 2.9.10-alt1

Источник
errata.altlinux.org
Дата публикации
18.04.2023
Дата обновления
04.02.2026
Устраненные уязвимости
1

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades traefik to version 2.9.10-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 7.5
nvd
больше 3 лет назад

Traefik (pronounced traffic) is a modern HTTP reverse proxy and load balancer for deploying microservices. There is a vulnerability in Go when parsing the HTTP headers, which impacts Traefik. HTTP header parsing could allocate substantially more memory than required to hold the parsed headers. This behavior could be exploited to cause a denial of service. This issue has been patched in versions 2.9.10 and 2.10.0-rc2.

CVSS3: 7.5
debian
больше 3 лет назад

Traefik (pronounced traffic) is a modern HTTP reverse proxy and load b ...

CVSS3: 7.5
github
больше 3 лет назад

Traefik HTTP header parsing could cause a denial of service

CVSS3: 7.5
altlinux
больше 3 лет назад

ALT-PU-2023-1587: package `traefik` update to version 2.9.10-alt1