| Revision Date: | 2022-06-10 | Version: | 1 |
| Title: | Security update for caddy (Moderate) |
| Description: |
This update for caddy fixes the following issues:
Update to version 2.5.1:
Fixed regression in Unix socket admin endpoints. * Fixed regression in caddy trust commands. * Hash-based load balancing policies (ip_hash, uri_hash, header, and cookie) use an improved highest-random-weight (HRW) algorithm for increased consistency. * Dynamic upstreams, which is the ability to get the list of upstreams at every request (more specifically, every iteration in the proxy loop of every request) rather than just once at config-load time. * Caddy will automatically try to get relevant certificates from the local Tailscale instance. * New OpenTelemetry integration. * Added new endpoints /pki/ca/ and /pki/ca//certificates for getting information about Caddy's managed CAs. * Rename _caddy to zsh-completion * Fix MatchPath sanitizing [bsc#1200279, CVE-2022-29718]
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1200279
CVE-2013-1982
CVE-2013-1982
CVE-2022-29718
openSUSE-SU-2022:10007-1
|
| Platform(s): | openSUSE 12.3 Update
openSUSE 13.1
openSUSE Leap 15.4
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 15 SP1
SUSE Linux Enterprise High Availability 12
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Live Patching 12
SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Desktop Applications 15
SUSE Linux Enterprise Module for Legacy Software 12
SUSE Linux Enterprise Module for Public Cloud 12
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Storage 6
SUSE Manager Proxy 4.0
SUSE Manager Server 4.0
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.4 is installed AND caddy-2.5.1-bp154.2.5.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND librpcsecgss3-0.19-16 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
AND Package Information
libXext-devel-1.3.3-1.30 is installed
OR libXext6-1.3.3-1.30 is installed
OR libXext6-32bit-1.3.3-1.30 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
AND Package Information
libXext-devel-1.3.3-1 is installed
OR libXext6-1.3.3-1 is installed
OR libXext6-32bit-1.3.3-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Desktop Applications 15 is installed
AND Package Information
vorbis-tools-1.4.0-1 is installed
OR vorbis-tools-lang-1.4.0-1 is installed
|