FEDORA-EPEL-2010-2696 — security update for lighttpd and spawn-fcgi

stable

lighttpd-1.4.26-2.el5 and spawn-fcgi-1.6.2-1.el5.1

FEDORA-EPEL-2010-2696 created by thias 15 years ago for Fedora EPEL 5

Update lighttpd to the latest version of the 1.4 branch, with the spawn-fcgi program split out for the first time on EL. This fixes CVE-2010-0295 and also includes a fix for upstream bug #2157 where SSL stopped working with RHEL 5.4.

This update has been pushed to testing

15 years ago

till commented & provided feedback 15 years ago

karma

critical bug 577546 is fixed by this, the older lighttpd would not start at all.

jsteffan commented & provided feedback 15 years ago

karma

This needs to be pushed. lighttpd shipping in EPEL right now is completely broken with the 5.4 openssl updates.

thias commented 15 years ago

This update has been submitted for stable.

This update has been pushed to stable

15 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

15 years ago

in testing

15 years ago

in stable

15 years ago

Builds

lighttpd-1.4.26-2.el5

spawn-fcgi-1.6.2-1.el5.1

BZ#561340 CVE-2010-0295 lighttpd: Remote DoS (excessive memory use) by handling specially-crafted HTTP request

lighttpd-1.4.26-2.el5

spawn-fcgi-1.6.2-1.el5.1

Automated Test Results

None