Announcing:
LiteSpeed Web Server v6.4.0RC2
In this release: Security improvements, bug fixes, and more!
RELEASE LOG:
- [Security] Enhance `lscgid` request authentication and validation.
- [Security] Apply stronger validation of internal redirect URLs.
- [Security] Block setting of important internal-use environment variables from `.htaccess`.
- [Feature] Add JSON request body processing for ModSecurity engine.
- [Feature] Add `ctl:ruleRemoveTargetById` and `ctl:ruleRemoveTargetByTag` support for ModSecurity engine.
- [Feature] Enable post-quantum cryptography key exchange.
- [Bug fix] Address Anubis handling corner cases.
- [Bug fix] Include all bug fixes applied to 6.3.x releases.
https://docs.litespeedtech.com/lsws/changelog/
As this is a Release Candidate, there may be stability issues with this version. Please proceed with caution. If you wish to upgrade anyway, you may do so via the following command: `/usr/local/lsws/admin/misc/lsup.sh -f -v 6.4.0RC2`
Cheers!
LiteSpeed Web Server v6.4.0RC2
In this release: Security improvements, bug fixes, and more!
RELEASE LOG:
- [Security] Enhance `lscgid` request authentication and validation.
- [Security] Apply stronger validation of internal redirect URLs.
- [Security] Block setting of important internal-use environment variables from `.htaccess`.
- [Feature] Add JSON request body processing for ModSecurity engine.
- [Feature] Add `ctl:ruleRemoveTargetById` and `ctl:ruleRemoveTargetByTag` support for ModSecurity engine.
- [Feature] Enable post-quantum cryptography key exchange.
- [Bug fix] Address Anubis handling corner cases.
- [Bug fix] Include all bug fixes applied to 6.3.x releases.
https://docs.litespeedtech.com/lsws/changelog/
As this is a Release Candidate, there may be stability issues with this version. Please proceed with caution. If you wish to upgrade anyway, you may do so via the following command: `/usr/local/lsws/admin/misc/lsup.sh -f -v 6.4.0RC2`
Cheers!