MGASA-2018-0430

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2018-0430.html

Import Source

https://advisories.mageia.org/MGASA-2018-0430.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2018-0430

Published

2018-11-03T11:55:18Z

Modified

2026-04-16T04:26:41.174590Z

Summary

Updated lighttpd packages fix security vulnerabilities

Details

Updated lighttpd package fixes security vulnerabilities:

Potential path traversal with specific configs or in some use cases in mod_alias.

use-after-free invalid Range requests in core.

Process headers after combining folded headers in core.

Skip username "." and ".." in mod_userdir.

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.4.51-1.mga6

{
    "section": "core"
}

source

"https://advisories.mageia.org/MGASA-2018-0430.json"