[SECURITY] Fedora EPEL 5 Update: cherokee-1.2.99-1.el5

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2011-4417
2011-09-13 23:25:46
--------------------------------------------------------------------------------

Name        : cherokee
Product     : Fedora EPEL 5
Version     : 1.2.99
Release     : 1.el5
URL         : http://www.cherokee-project.com/
Summary     : Flexible and Fast Webserver
Description :
Cherokee is a very fast, flexible and easy to configure Web Server. It supports
the widespread technologies nowadays: FastCGI, SCGI, PHP, CGI, TLS and SSL
encrypted connections, Virtual hosts, Authentication, on the fly encoding,
Apache compatible log files, and much more.

--------------------------------------------------------------------------------
Update Information:

Latest 1.2.x upstream release and bugzilla resolving, built statically
with openssl 1.0.0d
This hopefully solves all known package bugs.










--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #713306 - CVE-2011-2190 CVE-2011-2191 cherokee: multiple vulnerabilities [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=713306
  [ 2 ] Bug #710473 - cherokee: A weakness in Cherokee’s administrative interface random administrator password generation [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=710473
  [ 3 ] Bug #728741 - Cherokee package is very old
        https://bugzilla.redhat.com/show_bug.cgi?id=728741
  [ 4 ] Bug #720515 - Provide native systemd unit file
        https://bugzilla.redhat.com/show_bug.cgi?id=720515
  [ 5 ] Bug #701196 - Cherokee not automatically started when installed
        https://bugzilla.redhat.com/show_bug.cgi?id=701196
  [ 6 ] Bug #712555 - Cherokee dies at boot time
        https://bugzilla.redhat.com/show_bug.cgi?id=712555
  [ 7 ] Bug #678243 - Dynamic Document Root doesn't work
        https://bugzilla.redhat.com/show_bug.cgi?id=678243
  [ 8 ] Bug #680051 - cherokee just released version 1.2.0
        https://bugzilla.redhat.com/show_bug.cgi?id=680051
  [ 9 ] Bug #678838 - Cherokee package is very old
        https://bugzilla.redhat.com/show_bug.cgi?id=678838
  [ 10 ] Bug #622514 - service cherokee reload should use SIGHUP
        https://bugzilla.redhat.com/show_bug.cgi?id=622514
  [ 11 ] Bug #678237 - Not using cherokee user and group as it should
        https://bugzilla.redhat.com/show_bug.cgi?id=678237
  [ 12 ] Bug #657085 - systemd cherokee.service
        https://bugzilla.redhat.com/show_bug.cgi?id=657085
  [ 13 ] Bug #570317 - cherokee.conf should have user=cherokee group=cherokee
        https://bugzilla.redhat.com/show_bug.cgi?id=570317
  [ 14 ] Bug #620327 - cherokee should provide webserver
        https://bugzilla.redhat.com/show_bug.cgi?id=620327
--------------------------------------------------------------------------------

This update can be installed with the "yum" update programs.  Use
su -c 'yum update cherokee' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora EPEL GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------