[SECURITY] Fedora EPEL 5 Update: lighttpd-1.4.35-1.el5

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2014-0837 2014-03-15 16:48:45 -------------------------------------------------------------------------------- Name : lighttpd Product : Fedora EPEL 5 Version : 1.4.35 Release : 1.el5 URL : http://www.lighttpd.net/ Summary : Lightning fast webserver with light system requirements Description : Secure, fast, compliant and very flexible web-server which has been optimized for high-performance environments. It has a very low memory footprint compared to other webservers and takes care of cpu-load. Its advanced feature-set (FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many more) make it the perfect webserver-software for every server that is suffering load problems. -------------------------------------------------------------------------------- Update Information: 1.4.35, fixes SA-2014-01, CVE-2014-2323, CVE-2014-2324 [1] http://seclists.org/oss-sec/2014/q1/561 [2] http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2014_01.txt [3] http://www.lighttpd.net/2014/3/12/1.4.35/ -------------------------------------------------------------------------------- References: [ 1 ] Bug #1075711 - CVE-2014-2324 CVE-2014-2323 lighttpd: SQL injection and directory traversal vulnerabilities [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1075711 [ 2 ] Bug #1075710 - CVE-2014-2324 CVE-2014-2323 lighttpd: SQL injection and directory traversal vulnerabilities [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1075710 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update lighttpd' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------