ALT-PU-2026-7164: package traefik update to version 3.6.15-alt1
Описание
This update upgrades traefik to version 3.6.15-alt1.
Устраненные уязвимости10
Ссылки7
GHSA-5m6w-wvh7-57vm
https://github.com/advisories/GHSA-5m6w-wvh7-57vmGHSA-6384-m2mw-rf54
https://github.com/advisories/GHSA-6384-m2mw-rf54GHSA-6jwx-7vp4-9847
https://github.com/advisories/GHSA-6jwx-7vp4-9847GHSA-6x2q-h3cr-8j2h
https://github.com/advisories/GHSA-6x2q-h3cr-8j2hGHSA-p6hg-qh38-555r
https://github.com/advisories/GHSA-p6hg-qh38-555rGHSA-xhjw-95fp-8vgq
https://github.com/advisories/GHSA-xhjw-95fp-8vgqСвязанные уязвимости
Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an authentication bypass vulnerability in Traefik's ForwardAuth middleware when trustForwardHeader=false is configured and Traefik is deployed behind a trusted upstream proxy. This issue has been patched in versions 2.11.43, 3.6.14, and 3.7.0-rc.2.
Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an authentication bypass vulnerability in Traefik's ForwardAuth middleware when trustForwardHeader=false is configured and Traefik is deployed behind a trusted upstream proxy. This issue has been patched in versions 2.11.43, 3.6.14, and 3.7.0-rc.2.
Traefik is an HTTP reverse proxy and load balancer. Prior to versions ...
Traefik's ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass authentication
Уязвимость промежуточного программного обеспечения ForwardAuth обратного прокси сервера Containous Traefik, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации