shield Security update for lighttpd

sdksp4-lighttpd-13033

This update for lighttpd fixes the following issues: Security issues fixed: - CVE-2016-1000212: Don't allow requests to set the HTTP_PROXY variable. As *CGI apps might pick it up and use it for outgoing requests. (bsc#990847) - CVE-2015-3200: Log injection via malformed base64 string in Authentication header. (bsc#932286) Bug fixes: - Add su directive to logrotate file as the directory is owned by lighttpd. (bsc#981347) - Fix out of bounds read in mod_scgi.

• Release Date
  Mar 17 2017
• References
  Bugzilla: 932286, 981347, 990847
  CVEs: CVE-2015-3200, CVE-2016-1000212
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  lighttpd
  A Secure, Fast, Compliant, and Very Flexible Web Server

  1.4.20-2.58.1 lock rpm lock src

  lighttpd-mod_cml
  CML (Cache Meta Language) module for Lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_magnet
  A module to control the request handling in lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_mysql_vhost
  MySQL based virtual hosts (vhosts) module for Lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_rrdtool
  Lighttpd module to feed rrdtool databases

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_trigger_b4_dl
  Another anti hot-linking module for Lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_webdav
  WebDAV module for Lighttpd

  1.4.20-2.58.1 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  lighttpd
  A Secure, Fast, Compliant, and Very Flexible Web Server

  1.4.20-2.58.1 lock rpm lock src

  lighttpd-mod_cml
  CML (Cache Meta Language) module for Lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_magnet
  A module to control the request handling in lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_mysql_vhost
  MySQL based virtual hosts (vhosts) module for Lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_rrdtool
  Lighttpd module to feed rrdtool databases

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_trigger_b4_dl
  Another anti hot-linking module for Lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_webdav
  WebDAV module for Lighttpd

  1.4.20-2.58.1 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  lighttpd
  A Secure, Fast, Compliant, and Very Flexible Web Server

  1.4.20-2.58.1 lock rpm lock src

  lighttpd-mod_cml
  CML (Cache Meta Language) module for Lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_magnet
  A module to control the request handling in lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_mysql_vhost
  MySQL based virtual hosts (vhosts) module for Lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_rrdtool
  Lighttpd module to feed rrdtool databases

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_trigger_b4_dl
  Another anti hot-linking module for Lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_webdav
  WebDAV module for Lighttpd

  1.4.20-2.58.1 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  lighttpd
  A Secure, Fast, Compliant, and Very Flexible Web Server

  1.4.20-2.58.1 lock rpm lock src

  lighttpd-mod_cml
  CML (Cache Meta Language) module for Lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_magnet
  A module to control the request handling in lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_mysql_vhost
  MySQL based virtual hosts (vhosts) module for Lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_rrdtool
  Lighttpd module to feed rrdtool databases

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_trigger_b4_dl
  Another anti hot-linking module for Lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_webdav
  WebDAV module for Lighttpd

  1.4.20-2.58.1 lock rpm

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  lighttpd
  A Secure, Fast, Compliant, and Very Flexible Web Server

  1.4.20-2.58.1 lock rpm lock src

  lighttpd-mod_cml
  CML (Cache Meta Language) module for Lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_magnet
  A module to control the request handling in lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_mysql_vhost
  MySQL based virtual hosts (vhosts) module for Lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_rrdtool
  Lighttpd module to feed rrdtool databases

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_trigger_b4_dl
  Another anti hot-linking module for Lighttpd

  1.4.20-2.58.1 lock rpm

  lighttpd-mod_webdav
  WebDAV module for Lighttpd

  1.4.20-2.58.1 lock rpm