Date: Sat, 07 Feb 2026 11:30:58 +0000 From: Thomas Zander <riggs@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: 95e7551ea1b5 - main - security/vuxml: Document potential DoS in traefik Message-ID: <69872272.26eab.be9bbe0@gitrepo.freebsd.org>
index | next in thread | raw e-mail
The branch main has been updated by riggs: URL: https://cgit.FreeBSD.org/ports/commit/?id=95e7551ea1b536bbed644ef04cffe7764fb91812 commit 95e7551ea1b536bbed644ef04cffe7764fb91812 Author: Thomas Zander <riggs@FreeBSD.org> AuthorDate: 2026-02-07 11:28:58 +0000 Commit: Thomas Zander <riggs@FreeBSD.org> CommitDate: 2026-02-07 11:28:58 +0000 security/vuxml: Document potential DoS in traefik --- security/vuxml/vuln/2026.xml | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml index d1196e70a632..8efbdbd7fa7d 100644 --- a/security/vuxml/vuln/2026.xml +++ b/security/vuxml/vuln/2026.xml @@ -1,3 +1,34 @@ + <vuln vid="1a82bf18-0417-11f1-be6f-5404a68ad561"> + <topic>traefik -- ACME TLS-ALPN fast path potential DoS</topic> + <affects> +<package> +<name>traefik</name> +<range><lt>3.6.7</lt></range> +</package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>The traefik project reports:</p> + <blockquote cite="https://github.com/traefik/traefik/security/advisories/GHSA-cwjm-3f7h-9hwq">; + <p>There is a potential vulnerability in Traefik ACME TLS certificates' automatic + generation: the ACME TLS-ALPN fast path can allow unauthenticated clients to + tie up goroutines and file descriptors indefinitely when the ACME TLS challenge + is enabled.A malicious client can open many connections, send a minimal ClientHello + with acme-tls/1, then stop responding, leading to denial of service of the entrypoint. + </p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2026-22045</cvename> + <url>https://nvd.nist.gov/vuln/detail/CVE-2026-22045</url>; + </references> + <dates> + <discovery>2026-01-15</discovery> + <entry>2026-02-07</entry> + </dates> + </vuln> + <vuln vid="bfe9adc8-0224-11f1-8790-c5fb948922ad"> <topic>python -- several security vulnerabilities</topic> <affects>home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?69872272.26eab.be9bbe0>