Dear all,
We have released today a maintenance release of Abyss Web Server with the following changes:
- Added the Norwegian certification authority BuyPass as an alternative for delivering free ACME certificates;
- Added the ability to stop/restart ACME orders for free certificates;
- Improved error reporting when ACME orders fail;
- Updated the SSL/TLS engine;
- Added TLS/1.3 support to the console (remote Web management interface);
- Fixed a bug related to parsing malformed HTTP dates in requests that could result in a denial of service under load. This vulnerability was reported by Jan Kopecky and is registered under CVE-2021-3328;
- Fixed a bug related to handling malformed HTTP Range requests.
A detailed list of changes is available in
https://aprelium.com/news/abws2-14-1.html .