Security Advisory: LiteSpeed Web Server HTTP/2 Request Smuggling
This is a security release for LiteSpeed. Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.
Versiones afectadas
LiteSpeed Web Server 6.2.5 and earlier
Versión parcheada
LiteSpeed Web Server 6.2.6
CMD de actualización por defecto
yum update -yComandos de corrección
AlmaLinux 9 / CloudLinux 9
dnf update lsws
/usr/local/lsws/bin/lshttpd -rAlmaLinux 8 / CloudLinux 8
dnf update lsws
/usr/local/lsws/bin/lshttpd -rCentOS 7 / CloudLinux 7
yum update lsws
/usr/local/lsws/bin/lshttpd -rLo que esto significa bajo una licencia de SharedLicense
Your SharedLicense license itself is not affected — this is a change in LiteSpeed software, not in licensing. Update the product through its standard update channel. Licenses keep working through updates; nothing needs re-issuing or re-activating.
Referencias
Comprueba tu sistema en busca de vulnerabilidades
Selecciona tu producto y sistema operativo para ver los comandos de corrección exactos que se aplican a ti.
Comprueba tu sistema