bunkerity/bunkerweb v1.6.4

on GitHub

Documentation : https://docs.bunkerweb.io/1.6.4/

Docker tags :

• BunkerWeb : bunkerity/bunkerweb:1.6.4 or ghcr.io/bunkerity/bunkerweb:1.6.4
• Scheduler : bunkerity/bunkerweb-scheduler:1.6.4 or ghcr.io/bunkerity/bunkerweb-scheduler:1.6.4
• Autoconf : bunkerity/bunkerweb-autoconf:1.6.4 or ghcr.io/bunkerity/bunkerweb-autoconf:1.6.4
• UI : bunkerity/bunkerweb-ui:1.6.4 or ghcr.io/bunkerity/bunkerweb-ui:1.6.4

Linux packages : https://packagecloud.io/app/bunkerity/bunkerweb/search?q=1.6.4&filter=all&dist=

Changelog :

• [SECURITY] Fix open-redirection vulnerability in the Web UI regarding the next parameter in the loading process (CVE-2025-8066).
• [FEATURE] Enhance ModSecurity plugin to support human-readable size values for request body limits (requests without files)
• [BUGFIX] Fix limit zones for HTTP/3 connections in limitconn.conf to ensure proper connection limiting for HTTP/3 requests.
• [LINUX] Support RHEL 10.0
• [LINUX] Support Debian 13 (Trixie)