Announcing:
LiteSpeed Web Server v6.3.6
In this release: Extensive security hardening, bug fixes, and more!
RELEASE LOG:
[Security] Extensive general code hardening.
[Feature] Protect against HTTP/2/HTTP/3 stream flood abuse.
[Feature] Add Bun support for Node.js applications.
[Improvement] Strengthen HTTP/2/HTTP/3 header validation.
[Improvement] Automatically block access to URLs containing `/.env*`.
[Improvement] Auto-remount stale MySQL socket file in namespace.
[Improvement] Disable SHA-1 signing algorithm for TLSv1.2 handshake.
[Improvement] Add CAPTCHA page status code customization via Apache-style directive `LsRecaptcha status_code ...` at server level.
[Bug fix] Properly handle quoted target URL in Apache `ErrorDocument` configuration directive.
[Bug fix] Address a corner case for Apache `ProxyPass` configuration handling.
[Bug fix] Address a corner case that blocks PROXY protocol.
[Tuning] Update QUIC Alt-Svc to advertise `h3` and `h3-29` only by default.
https://docs.litespeedtech.com/lsws/changelog/
Please remember, there may be some delay between this announcement and the ability to auto-update. If you don't want to wait, you can update manually via the following command: `/usr/local/lsws/admin/misc/lsup.sh -f -v 6.3.6`
Cheers!
LiteSpeed Web Server v6.3.6
In this release: Extensive security hardening, bug fixes, and more!
RELEASE LOG:
[Security] Extensive general code hardening.
[Feature] Protect against HTTP/2/HTTP/3 stream flood abuse.
[Feature] Add Bun support for Node.js applications.
[Improvement] Strengthen HTTP/2/HTTP/3 header validation.
[Improvement] Automatically block access to URLs containing `/.env*`.
[Improvement] Auto-remount stale MySQL socket file in namespace.
[Improvement] Disable SHA-1 signing algorithm for TLSv1.2 handshake.
[Improvement] Add CAPTCHA page status code customization via Apache-style directive `LsRecaptcha status_code ...` at server level.
[Bug fix] Properly handle quoted target URL in Apache `ErrorDocument` configuration directive.
[Bug fix] Address a corner case for Apache `ProxyPass` configuration handling.
[Bug fix] Address a corner case that blocks PROXY protocol.
[Tuning] Update QUIC Alt-Svc to advertise `h3` and `h3-29` only by default.
https://docs.litespeedtech.com/lsws/changelog/
Please remember, there may be some delay between this announcement and the ability to auto-update. If you don't want to wait, you can update manually via the following command: `/usr/local/lsws/admin/misc/lsup.sh -f -v 6.3.6`
Cheers!