{"id":"openSUSE-SU-2022:10007-1","summary":"Security update for caddy","details":"This update for caddy fixes the following issues:\n\nUpdate to version 2.5.1:\n\n* Fixed regression in Unix socket admin endpoints.\n* Fixed regression in caddy trust commands.\n* Hash-based load balancing policies (ip_hash, uri_hash, header, and cookie)\n  use an improved highest-random-weight (HRW) algorithm for increased\n  consistency.\n* Dynamic upstreams, which is the ability to get the list of upstreams at\n  every request (more specifically, every iteration in the proxy loop of\n  every request) rather than just once at config-load time.\n* Caddy will automatically try to get relevant certificates from the local\n  Tailscale instance.\n* New OpenTelemetry integration.\n* Added new endpoints /pki/ca/\u003cid\u003e and /pki/ca/\u003cid\u003e/certificates for\n  getting information about Caddy's managed CAs.\n* Rename _caddy to zsh-completion\n* Fix MatchPath sanitizing [bsc#1200279, CVE-2022-29718]\n","modified":"2026-03-11T07:33:27.567259Z","published":"2022-06-10T18:01:10Z","related":["CVE-2022-29718"],"upstream":["CVE-2022-29718"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ID6TRFNJC4CQHO4WTAHUQ4FGQUP3OZ7D/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200279"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-29718"}],"affected":[{"package":{"name":"caddy","ecosystem":"SUSE:Package Hub 15 SP4","purl":"pkg:rpm/suse/caddy&distro=SUSE%20Package%20Hub%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-bp154.2.5.1"}]}],"ecosystem_specific":{"binaries":[{"caddy":"2.5.1-bp154.2.5.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:10007-1.json"}},{"package":{"name":"caddy","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/caddy&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-bp154.2.5.1"}]}],"ecosystem_specific":{"binaries":[{"caddy":"2.5.1-bp154.2.5.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:10007-1.json"}}],"schema_version":"1.7.5"}