ืื ืืืืืืืืื ืืืืคึผ ืกืขืจืืืขืจ lighttpd 1.4.64 ืืื ืืืคืจืืื. ืื ื ืืึทืข ืืืขืจืกืืข ืื ืืจืึทืืืกืื 95 ืขื ืืขืจืื ืืขื, ืึทืจืืึทื ืืขืจืขืื ื ืคืจืืขืจ ืคึผืืึทื ื ืขื ืขื ืืขืจืื ืืขื ืฆื ืคืขืืืงืืึทื ืืืึทืืืขืก ืืื ืึท ืจืืื ืืงืื ื ืคืื ืึทืืืืืืืื ืคืึทื ืืงืฉืึทื ืึทืืืื:
- ืื ืคืขืืืงืืึทื ืืืืืึทืื ืคึฟืึทืจ ืืจืึทืฆืืขื ืจืืกืืึทืจื / ืฉืึทืืืึทืื ืึทืคึผืขืจืืืฉืึทื ื ืืื ืจืืืืกื ืคืื ืืืขื ืืืงืืึทื ืฆื 8 ืกืขืงืื ืืขืก. ืื ืืืืืึทืื ืงืขื ืขื ืืืื ืงืึทื ืคืืืืขืจื ื ืืฆื ืื "server.graceful-shutdown-timeout" ืึธืคึผืฆืืข.
- ืื ืืืขืจืืึทื ื ืฆื ื ืืฆื ืื ืคึฟืึทืจืืึทืืืื ื ืืื ืื PCRE2 ืืืืืืึธืืขืง (--with-pcre2) ืืื ืืขืืืื; ืฆื ืฆืืจืืงืงืืืขื ืฆื ืื ืึทืื ืืืขืจืกืืข ืคืื โโPCRE, ืืืจ ืงืขื ืขื ื ืืฆื ืื "--with-pcre" ืึธืคึผืฆืืข.
- ืืึธืืืืขืก ืืื ืึทืืขืจ ืืืคึผืจืืฉืืืืืื ืืึธืื ืฉืืื ืึทืืืขืงืืขื ืืืขื:
- mod_geoip (ืืืจ ืืึทืจืคึฟื ืฆื ื ืืฆื mod_maxminddb),
- mod_authn_mysql (ืืืจ ืืึทืจืคึฟื ืฆื ื ืืฆื mod_authn_dbi),
- mod_mysql_vhost (ืืืจ ืืึทืจืคึฟื ืฆื ื ืืฆื mod_vhostdb_dbi),
- mod_cml (ืืืจ ืืึทืจืคึฟื ืฆื ื ืืฆื mod_magnet),
- mod_flv_streaming (ืคืึทืจืคืึทืื ืืืึทืืฉ ื ืึธื ืึทืืึธืืื ืคืืึทืฉ ืืืืกืืขืืื ืืขื),
- mod_trigger_b4_dl (ืืืจ ืืึทืจืคึฟื ืฆื ื ืืฆื ืึท ืคืึทืจืืืึทื ืคึฟืึทืจ ืืืึท).
Lighttpd 1.4.64 ืืืื ืคืืงืกืื ืึท ืืืึทืื ืขืจืึทืืืืืื (CVE-2022-22707) ืืื ืื ืืึธื_ืขืงืกืืคืึธืจืืืึทืจื ืืึธืืืืข ืืืึธืก ื ืึท 4-ืืืืข ืืึทืคืขืจ ืึธืืืืขืจืคืืึธื ืืืขื ืคึผืจืึทืกืขืกืื ื ืืึทืื ืืื ืื ืคืึธืจืืืขืจืืื ืืืืคึผ ืืขืืขืจ. ืืืื ืื ืืขืืืขืืึธืคึผืขืจืก, ืื ืคึผืจืึธืืืขื ืืื ืืืืืืขื ืฆื ืึท ืึธืคึผืืืืงืขื ืื ื ืคืื ืืื ืกื ืืื ืึทืืึทืื ืืืจ ืฆื ืจืืืึธืืืื ืึธื ืืืืื ืึทื ืึทืื ืึธืจืืึทื ืืขืจืืึทื ืืืฉืึทื ืคืื ืึท ืืื ืืขืจืืจืื ื ืคึผืจืึธืฆืขืก. ืขืงืกืคึผืืึธืืืึทืืืึธื ืืื ืืขืืืขื ืืืืื ืืืขื ืื ืคืึธืจืืืขืจืืื ืืขืืขืจ ืืึทื ืืืขืจ ืืื ืขื ืืืืึทืื ืืื ืงืขื ื ืืฉื ืืขืจืฉืืึทื ืขื ืืื ืื ืคืขืืืงืืึทื ืงืึทื ืคืืืืขืจืืืฉืึทื.
ืืงืืจ: opennet.ru