[Security risk] please update openlitespeed V1.8.2

jonhcarter

Hello,

V1.8.1 has a security risk, which is fixed in V1.8.2. Please update OpenLitespeed to the latest version.

Server Core

[Security] Block “litespeed_role” cookie used for hacking LSCWP.
[Improvement] Move OSCP cache, status and rtreport to SHM location to reduce disk wearing.
[Improvement] Add support for QUIC stream priority.
[Bug Fix] Make Ruby application compatible with Ruby 3.3 and Rails 7.2
[Bug Fix] Fix per IP ACL and statistics.
[Bug Fix] More strict HTTP request validation.
[Bug Fix] Fix setting cookie via a rewrite rule.
[Bug Fix] Address issues in namespace and cgroup support.
[Misc] Update lsquic to v4.0.11 .
[Misc] Update libmodsecurity to v3.0.13 .

Thanks in advance

aaPanel_Kern

Hello, thank you for your feedback. You can download and install the upgrade manually first.

jonhcarter

aaPanel_Kern, please share the commands and the path where to run the commands. Also, is it safe to update directly?

aaPanel_Kern

Refer to the official tutorial

https://docs.openlitespeed.org/installation/source/

jonhcarter

After the upgrade getting the error: Web server is down

I have tried to start, restart, and reload everything. It shows it's already started but it's not working.

Kindly send the update in aapanel. The direct update is not working. Now I have to rebuild my server from the backup.

jonhcarter

Are you there?

aaPanel_Kern

Hello, I don’t have time to test it at the moment. It is recommended that you use a new server to install it, add the website, and then perform the update.
Pay attention to check for errors

aaP_stoka13

Updated successfully with command:

/usr/local/lsws/admin/misc/lsup.sh