FEDORA-EPEL-2010-2696 — security update for lighttpd and spawn-fcgi

stable

lighttpd-1.4.26-2.el5 and spawn-fcgi-1.6.2-1.el5.1

FEDORA-EPEL-2010-2696 created by thias 14 years ago for Fedora EPEL 5

Update lighttpd to the latest version of the 1.4 branch, with the spawn-fcgi program split out for the first time on EL. This fixes CVE-2010-0295 and also includes a fix for upstream bug #2157 where SSL stopped working with RHEL 5.4.

This update has been pushed to testing

14 years ago

till commented & provided feedback 14 years ago

karma

critical bug 577546 is fixed by this, the older lighttpd would not start at all.

jsteffan commented & provided feedback 14 years ago

karma

This needs to be pushed. lighttpd shipping in EPEL right now is completely broken with the 5.4 openssl updates.

thias commented 14 years ago

This update has been submitted for stable.

This update has been pushed to stable

14 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

lighttpd-1.4.26-2.el5

spawn-fcgi-1.6.2-1.el5.1

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

14 years ago

in testing

14 years ago

in stable

14 years ago

BZ#561340 CVE-2010-0295 lighttpd: Remote DoS (excessive memory use) by handling specially-crafted HTTP request

lighttpd-1.4.26-2.el5

spawn-fcgi-1.6.2-1.el5.1

Automated Test Results

None