Debian/lighttpd: unknown
The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which
Action: Upgrade lighttpd to 1.4.30-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.30-1 | - |
Fixed versions
| 1.4.30-1 |
Sources
- osv: DEBIAN-CVE-2012-4929#Debian:12/lighttpd
- https://security-tracker.debian.org/tracker/CVE-2012-4929
published · modified · JSON