Publishing details

• Published on 2016-12-16
• Copied from ubuntu trusty in Private PPA for Ubuntu Security Team

Changelog

bozohttpd (20111118-1+deb7u1build0.14.04.1) trusty-security; urgency=medium

  * fake sync from Debian

bozohttpd (20111118-1+deb7u1) wheezy-security; urgency=high

  * Non-maintainer upload by the LTS team.
  * Fix CVE-2014-5015:
    bozotic HTTP server (aka bozohttpd) before 201407081 truncates paths when
    checking .htpasswd restrictions, which allows remote attackers to bypass
    the HTTP authentication scheme and access restrictions via a long path.
    (Closes: #755197)
  * CVE-2015-8212:
    Fix a security issue in CGI suffix handler support which would allow remote
    code execution.

 -- Steve Beattie <email address hidden>  Fri, 24 Jun 2016 14:35:34 -0700

Builds

• amd64
• arm64
• armhf
• i386
• powerpc
• ppc64el

Package files

• bozohttpd_20111118-1+deb7u1build0.14.04.1.diff.gz (5.8 KiB)
• bozohttpd_20111118-1+deb7u1build0.14.04.1.dsc (1.7 KiB)
• bozohttpd_20111118.orig.tar.gz (54.9 KiB)