ALT-BU-2022-6243-1
Branch sisyphus_mipsel update bulletin.
Package lighttpd updated to version 1.4.67-alt1 for branch sisyphus_mipsel.
Closed vulnerabilities
BDU:2022-06126
Уязвимость модуля mod_wstunnel веб-сервера lighttpd, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2022-06197
Уязвимость модулей mod_fastcgi и mod_scgi веб-сервера lighttpd, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2022-37797
In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.
Modified: 2024-11-21
CVE-2022-41556
A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exhaustion) after a large amount of anomalous TCP behavior by clients. It is related to RDHUP mishandling in certain HTTP/1.1 chunked situations. Use of mod_fastcgi is, for example, affected. This is fixed in 1.4.67.
- https://git.lighttpd.net/lighttpd/lighttpd1.4/commit/b18de6f9264f914f7bf493abd3b6059343548e50
- https://git.lighttpd.net/lighttpd/lighttpd1.4/commit/b18de6f9264f914f7bf493abd3b6059343548e50
- https://github.com/lighttpd/lighttpd1.4/compare/lighttpd-1.4.66...lighttpd-1.4.67
- https://github.com/lighttpd/lighttpd1.4/compare/lighttpd-1.4.66...lighttpd-1.4.67
- https://github.com/lighttpd/lighttpd1.4/pull/115
- https://github.com/lighttpd/lighttpd1.4/pull/115
- FEDORA-2022-c26b19568d
- FEDORA-2022-c26b19568d
- GLSA-202210-12
- GLSA-202210-12
Package scummvm-tools updated to version 2.6.0-alt2 for branch sisyphus_mipsel.
Closed bugs
Ошибка при запуске