26 |
strings to the ssh-server. Thanks to David Fletcher <david!megapico |
strings to the ssh-server. Thanks to David Fletcher <david!megapico |
27 |
co uk> for reporting the problem. |
co uk> for reporting the problem. |
28 |
|
|
29 |
* This release plugs the following security vulnerabilities, reported |
* This release patch the following security vulnerabilities, reported |
30 |
by Evgeny Legerov <e.legerov!s-quadra com>: |
by Evgeny Legerov <e.legerov!s-quadra com>: |
31 |
Vulnerability 1: Long http method stack overflow |
Vulnerability 1: Long http method stack overflow |
32 |
Vulnerability 2: Denial of Service via negative Content-Length field |
Vulnerability 2: Denial of Service via negative Content-Length field |
33 |
These vulnerabilities exist in previous monit releases down to the |
These vulnerabilities exist in previous monit releases down to the |
34 |
1.4 release. |
1.4 release. This issue only affect previous monit releases if |
35 |
|
monit is started with http server support. |
36 |
|
|
37 |
|
|
38 |
Version 4.1 |
Version 4.1 |