| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
Fedora alert FEDORA-2008-2278 (lighttpd)
| From: | updates@fedoraproject.org | |
| To: | fedora-package-announce@redhat.com | |
| Subject: | [SECURITY] Fedora 8 Update: lighttpd-1.4.18-6.fc8 | |
| Date: | Thu, 06 Mar 2008 16:36:35 +0000 | |
| Message-ID: | <200803061637.m26GbuvJ013264@bastion.fedora.phx.redhat.com> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-2278 2008-03-06 16:11:48 -------------------------------------------------------------------------------- Name : lighttpd Product : Fedora 8 Version : 1.4.18 Release : 6.fc8 URL : http://www.lighttpd.net/ Summary : Lightning fast webserver with light system requirements Description : Secure, fast, compliant and very flexible web-server which has been optimized for high-performance environments. It has a very low memory footprint compared to other webservers and takes care of cpu-load. Its advanced feature-set (FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many more) make it the perfect webserver-software for every server that is suffering load problems. Available rpmbuild rebuild options : --with : gamin webdavprops webdavlocks memcache --without : ldap gdbm lua (cml) -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 4 2008 Matthias Saou <http://freshrpms.net/> 1.4.18-6 - Include patch for CVE-2008-0983 (crash when low on file descriptors). - Include patch for CVE-2008-1111 (cgi source disclosure). * Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - Autorebuild for GCC 4.3 * Wed Dec 5 2007 Release Engineering <rel-eng at fedoraproject dot org> - Rebuild for deps * Wed Oct 31 2007 Matthias Saou <http://freshrpms.net/> 1.4.18-3 - Update mod_geoip source to fix segfault upon stopping lighttpd. * Mon Oct 22 2007 Matthias Saou <http://freshrpms.net/> 1.4.18-2 - Include mod_geoip additional source, make it an optional sub-package. - Reorder sub-packages alphabetically in spec file. - Make sub-packages require exact release, just in case. - Change default webroot back from /srv to /var. -------------------------------------------------------------------------------- References: [ 1 ] Bug #435805 - CVE-2008-1111 lighttpd CGI source disclosure https://bugzilla.redhat.com/show_bug.cgi?id=435805 [ 2 ] Bug #434163 - CVE-2008-0983 lighttpd crashes when it's low on file descriptors https://bugzilla.redhat.com/show_bug.cgi?id=434163 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update lighttpd' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann...
(Log in to post comments)