11516 2007-04-16 16:09:17 +0400 CVE-2007-1869 + CVE-2007-1870 in lighttpd 2007-04-16 16:30:58 +0400 1 1 4 Development Sisyphus lighttpd unstable all Linux CLOSED NOTABUG P2 normal --- 1 icesik taf taf qa-sisyphus oldest_to_newest 48889 0 icesik 2007-04-16 16:09:18 +0400 http://www.lighttpd.net/assets/2007/4/13/lighttpd_sa2007_01.txt http://www.lighttpd.net/assets/2007/4/13/lighttpd_sa2007_02.txt Solution: Update to version 1.4.15 48890 1 vvk 2007-04-16 16:20:58 +0400 Already fixed in: * Thu Feb 08 2007 Vladimir V Kamarzin <vvk@altlinux.ru> 1.4.13-alt1.1607 - Updated to 1.4.x branch svn revision 1607 - Securuty fix: + Fix remote DOS in CRLF parsing + Fix a crash for files with an mtime of 0 reported by cubiq on irc - Integrate lighttpd-1.4.3-config.patch Чорт. Заметил опечатку :) 48894 2 icesik 2007-04-16 16:30:58 +0400 (In reply to comment #1) > Already fixed in: > > * Thu Feb 08 2007 Vladimir V Kamarzin <vvk@altlinux.ru> 1.4.13-alt1.1607 > - Updated to 1.4.x branch svn revision 1607 > - Securuty fix: > + Fix remote DOS in CRLF parsing > + Fix a crash for files with an mtime of 0 reported by cubiq on irc > - Integrate lighttpd-1.4.3-config.patch > > Чорт. Заметил опечатку :) Ага. Понял. Я только на версию посмотрел. :(