4 ms·
Patched in 2.7.5: https://github.com/caddyserver/caddy/releases/tag/v2.7.5 https://github.com/caddyserver/caddy/releases/tag/v2.7.5 I think it might also requi
by MallocVoidstar 3y ago
Patched in 2.7.5: https://github.com/caddyserver/caddy/releases/tag/v2.7.5 https://github.com/caddyserver/caddy/releases/tag/v2.7.5
I think it might also require a patched version of Go.
- kelthan 3y agoThere are new versions of Go which have this CVE patched already published and available for download.
- jprd 3y agoYou could 'caddy upgrade' pretty quickly to get the patch (servers had updated go), though the release number bump didn't happen immediately. Running the same now, or pulling a new binary, using xcaddy, etc. will get you 2.7.5 which also includes some other small fixes not related to rapid reset.