Release date: April 16, 2025
This patch release resolves the following issues:
Platform
Infrastructure Assurance
previously used Traefik version 2.10.4 in which a security vulnerability was
identified that allows HTTP clients to remove or modify certain HTTP headers
such as X-Forwarded-Host or
X-Forwarded-Port, leading to potential security risks.
This issue occurs due to the HTTP/1.1 behavior, where a
Connection header can be used to define certain headers
as hop-by-hop, causing Traefik to remove these headers unintentionally.
To address this issue, Infrastructure Assurance has been upgraded to v25.1.2. This version of Infrastructure Assurance uses Traefik v2.11.9 that is one of the patched versions addressing this issue.
Knowledge
The Hardware element down alert for Check Point Maestro devices now correctly displays the names of the affected hardware elements. In earlier releases, incorrect element identifiers are displayed instead of the actual hardware element names.