Get Gentoo!
gentoo.org sites
gentoo.org Wiki Bugs Forums Packages
Planet Archives Sources
Infra Status

Cherokee: Multiple vulnerabilities — GLSA 202012-09

Multiple vulnerabilities have been found in Cherokee, the worst of which could result in a Denial of Service condition.

Affected packages

Package www-servers/cherokee on all architectures
Affected versions <= 1.2.104-r2
Unaffected versions

Background

Cherokee is an extra-light web server.

Description

Multiple vulnerabilities have been discovered in Cherokee. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

Gentoo has discontinued support for Cherokee. We recommend that users unmerge package: 

 # emerge --unmerge "www-servers/cherokee"

References

Release date
December 23, 2020

Latest revision
December 23, 2020: 1

Severity
low

Exploitable
remote

Bugzilla entries