Уведомление безопасности DSA-1303

Критичная (7.8)

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Debian

lighttpd (any) lighttpd-doc (any) lighttpd-mod-cml (any) lighttpd-mod-magnet (any) lighttpd-mod-mysql-vhost (any) lighttpd-mod-trigger-b4-dl (any) lighttpd-mod-webdav (any)

Уведомление безопасности об уязвимостях lighttpd-mod-mysql-vhost, lighttpd-doc, lighttpd-mod-magnet, lighttpd, lighttpd-mod-cml, lighttpd-mod-webdav, lighttpd-mod-trigger-b4-dl

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
lighttpd - 1.4.13-4etch1
lighttpd-mod-cml - 1.4.13-4etch1
lighttpd-mod-magnet - 1.4.13-4etch1
lighttpd-mod-mysql-vhost - 1.4.13-4etch1
lighttpd-mod-trigger-b4-dl - 1.4.13-4etch1
lighttpd-mod-webdav - 1.4.13-4etch1
s390x:
lighttpd - 1.4.13-4etch1
lighttpd-mod-cml - 1.4.13-4etch1
lighttpd-mod-magnet - 1.4.13-4etch1
lighttpd-mod-mysql-vhost - 1.4.13-4etch1
lighttpd-mod-trigger-b4-dl - 1.4.13-4etch1
lighttpd-mod-webdav - 1.4.13-4etch1
i686:
lighttpd - 1.4.13-4etch1
lighttpd-mod-cml - 1.4.13-4etch1
lighttpd-mod-magnet - 1.4.13-4etch1
lighttpd-mod-mysql-vhost - 1.4.13-4etch1
lighttpd-mod-trigger-b4-dl - 1.4.13-4etch1
lighttpd-mod-webdav - 1.4.13-4etch1
hppa:
lighttpd - 1.4.13-4etch1
lighttpd-mod-cml - 1.4.13-4etch1
lighttpd-mod-magnet - 1.4.13-4etch1
lighttpd-mod-mysql-vhost - 1.4.13-4etch1
lighttpd-mod-trigger-b4-dl - 1.4.13-4etch1
lighttpd-mod-webdav - 1.4.13-4etch1
sparc:
lighttpd - 1.4.13-4etch1
lighttpd-mod-cml - 1.4.13-4etch1
lighttpd-mod-magnet - 1.4.13-4etch1
lighttpd-mod-mysql-vhost - 1.4.13-4etch1
lighttpd-mod-trigger-b4-dl - 1.4.13-4etch1
lighttpd-mod-webdav - 1.4.13-4etch1
x86-64:
lighttpd - 1.4.13-4etch1
lighttpd-mod-cml - 1.4.13-4etch1
lighttpd-mod-magnet - 1.4.13-4etch1
lighttpd-mod-mysql-vhost - 1.4.13-4etch1
lighttpd-mod-trigger-b4-dl - 1.4.13-4etch1
lighttpd-mod-webdav - 1.4.13-4etch1
alpha:
lighttpd - 1.4.13-4etch1
lighttpd-mod-cml - 1.4.13-4etch1
lighttpd-mod-magnet - 1.4.13-4etch1
lighttpd-mod-mysql-vhost - 1.4.13-4etch1
lighttpd-mod-trigger-b4-dl - 1.4.13-4etch1
lighttpd-mod-webdav - 1.4.13-4etch1
ia64:
lighttpd - 1.4.13-4etch1
lighttpd-mod-cml - 1.4.13-4etch1
lighttpd-mod-magnet - 1.4.13-4etch1
lighttpd-mod-mysql-vhost - 1.4.13-4etch1
lighttpd-mod-trigger-b4-dl - 1.4.13-4etch1
lighttpd-mod-webdav - 1.4.13-4etch1
mips:
lighttpd - 1.4.13-4etch1
lighttpd-mod-cml - 1.4.13-4etch1
lighttpd-mod-magnet - 1.4.13-4etch1
lighttpd-mod-mysql-vhost - 1.4.13-4etch1
lighttpd-mod-trigger-b4-dl - 1.4.13-4etch1
lighttpd-mod-webdav - 1.4.13-4etch1
noarch:
lighttpd-doc - 1.4.13-4etch1
mipsel:
lighttpd - 1.4.13-4etch1
lighttpd-mod-cml - 1.4.13-4etch1
lighttpd-mod-magnet - 1.4.13-4etch1
lighttpd-mod-mysql-vhost - 1.4.13-4etch1
lighttpd-mod-trigger-b4-dl - 1.4.13-4etch1
lighttpd-mod-webdav - 1.4.13-4etch1
arm:
lighttpd - 1.4.13-4etch1
lighttpd-mod-cml - 1.4.13-4etch1
lighttpd-mod-magnet - 1.4.13-4etch1
lighttpd-mod-mysql-vhost - 1.4.13-4etch1
lighttpd-mod-trigger-b4-dl - 1.4.13-4etch1
lighttpd-mod-webdav - 1.4.13-4etch1

http://www.debian.org/security/dsa-1303/

Источник: CVE
Наименование: CVE-2007-1869
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1869

Источник: CVE
Наименование: CVE-2007-1870
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1870