[Bug 249162] New: lighttpd 1.4.15 multiple vulnerabilities

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.




https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=249162

           Summary: lighttpd 1.4.15 multiple vulnerabilities
           Product: Fedora
           Version: f7
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: medium
          Priority: medium
         Component: lighttpd
        AssignedTo: matthias(a)rpmforge.net
        ReportedBy: ville.skytta(a)iki.fi
         QAContact: extras-qa(a)fedoraproject.org
                CC: fedora-security-list(a)redhat.com


http://www.vuxml.org/freebsd/fc9c217e-3791-11dc-bb1a-000fea449b8a.html

"Some vulnerabilities have been reported in lighttpd, which can be exploited by
malicious people to bypass certain security restrictions or cause a DoS (Denial
of Service)."

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug 249162] CVE-2007-394{6-9} lighttpd 1.4.15 multiple vulnerabilities

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2007-394{6-9} lighttpd 1.4.15 multiple vulnerabilities
Alias: CVE-2007-3946

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=249162


lkundrak(a)redhat.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|lighttpd 1.4.15 multiple    |CVE-2007-394{6-9} lighttpd
                   |vulnerabilities             |1.4.15 multiple
                   |                            |vulnerabilities
              Alias|                            |CVE-2007-3946




------- Additional Comments From lkundrak(a)redhat.com  2007-07-25 09:07 EST -------
CVE-2007-3946 Lighttpd SA 2007:04-07
CVE-2007-3947 Lighttpd SA 2007:03
CVE-2007-3948 ?
CVE-2007-3949 Lighttpd SA 2007:08 (patch: 
CVE-2007-3950 ?
?             Lighttpd SA 2007:09

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug 249162] CVE-2007-394{6-9} lighttpd 1.4.15 multiple vulnerabilities

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2007-394{6-9} lighttpd 1.4.15 multiple vulnerabilities
Alias: CVE-2007-3946

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=249162


matthias(a)rpmforge.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED




------- Additional Comments From matthias(a)rpmforge.net  2007-07-26 04:37 EST -------
Lighttpd 1.4.16 has just been released, and rebuilt for all current Fedora and
EPEL branches. Packages are waiting to be pushed.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug 249162] CVE-2007-394{6-9} lighttpd 1.4.15 multiple vulnerabilities

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2007-394{6-9} lighttpd 1.4.15 multiple vulnerabilities
Alias: CVE-2007-3946

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=249162





------- Additional Comments From updates(a)fedoraproject.org  2007-07-27 01:54 EST -------
lighttpd-1.4.16-1.fc7 has been pushed to the Fedora 7 stable repository.  If problems
still persist, please make note of it in this bug report.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug 249162] CVE-2007-394{6-9} lighttpd 1.4.15 multiple vulnerabilities

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2007-394{6-9} lighttpd 1.4.15 multiple vulnerabilities
Alias: CVE-2007-3946

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=249162


updates(a)fedoraproject.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |CLOSED
         Resolution|                            |ERRATA
   Fixed In Version|                            |1.4.16-1.fc7




-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.