[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Accepted bozohttpd 20111118-1+deb7u1 (source amd64) into oldstable



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 26 May 2016 05:46:07 +0200
Source: bozohttpd
Binary: bozohttpd
Architecture: source amd64
Version: 20111118-1+deb7u1
Distribution: wheezy-security
Urgency: high
Maintainer: Mattias Nordstrom <mnordstr@debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description: 
 bozohttpd  - Bozotic HTTP server
Closes: 755197
Changes: 
 bozohttpd (20111118-1+deb7u1) wheezy-security; urgency=high
 .
   * Non-maintainer upload by the LTS team.
   * Fix CVE-2014-5015:
     bozotic HTTP server (aka bozohttpd) before 201407081 truncates paths when
     checking .htpasswd restrictions, which allows remote attackers to bypass
     the HTTP authentication scheme and access restrictions via a long path.
     (Closes: #755197)
   * CVE-2015-8212:
     Fix a security issue in CGI suffix handler support which would allow remote
     code execution.
Checksums-Sha1: 
 fdf7b070018dbb99f1e3395830d68dc2620aaf2a 1834 bozohttpd_20111118-1+deb7u1.dsc
 3e130483c827a6a2edf890c1216ab92731c3fd7f 56213 bozohttpd_20111118.orig.tar.gz
 efbd8f3fc65a67f4752ed6c97e99aea22bb74fb3 5772 bozohttpd_20111118-1+deb7u1.diff.gz
 00b8652075f10c2ab0bf3ae0947479fb3cc2dd21 44664 bozohttpd_20111118-1+deb7u1_amd64.deb
Checksums-Sha256: 
 35d115f580673ea6791709d198652914d83abccd03c24acf30acdc09a834ce7a 1834 bozohttpd_20111118-1+deb7u1.dsc
 6cb6ab6fb3b127af452ffd4ddbdd5e9c1676934bd19b8b5edc12c33e0fe4278d 56213 bozohttpd_20111118.orig.tar.gz
 8cbc434d63a54e6f48d5eee94c571447bdc1c3e1f90416d265c7227789b20964 5772 bozohttpd_20111118-1+deb7u1.diff.gz
 18b80dd0e31837e98805c171d2db398ade464fdd5eee62a0843fd864a3caeaaa 44664 bozohttpd_20111118-1+deb7u1_amd64.deb
Files: 
 db666391064add19e2ce3df08d3acde4 1834 httpd extra bozohttpd_20111118-1+deb7u1.dsc
 a067033495b153b6b6db2469ca3a2c04 56213 httpd extra bozohttpd_20111118.orig.tar.gz
 5d4adcadd70ea9e7e40eceb0a9ad6e5e 5772 httpd extra bozohttpd_20111118-1+deb7u1.diff.gz
 0fe6b2bd885afd57945ad28faec319d0 44664 httpd extra bozohttpd_20111118-1+deb7u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=qbyM
-----END PGP SIGNATURE-----


Reply to: