Headline
CVE-2020-12845: Cherokee Web Server | Downloads
Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences. A remote unauthenticated attacker can crash the server by sending an HTTP request to protected resources using a malformed Authorization header that is mishandled during a cherokee_buffer_add call within cherokee_validator_parse_basic or cherokee_validator_parse_digest.
Quickstart Guide****Download Cherokee
Stable releases
- Version 1.2.103
- Version 1.2.102
- Version 1.2.101
- Version 1.2.99
- Version 1.2.98
- Version 1.2.2
Nightly releases
- Nightly from branch master (stable)
- Nightly from branch dev (development)
Install Cherokee
Ubuntu
Open a terminal and enter:
sudo add-apt-repository ppa:cherokee-webserver/ppa
After that, you should tell your system to pull down the latest list of software from each archive it knows about, including the PPA you just added:
sudo apt-get update
Now you’re ready to install Cherokee from the PPA:
sudo apt-get install cherokee cherokee-admin
Debian
Install Cherokee from the apt repository
apt-get install cherokee cherokee-admin
Please, check the documentation for further details.
Red Hat Enterprise Linux (RHEL)/CentOS
Install Cherokee from the EPEL (Extra Packages for Enterprise Linux) repository
yum install cherokee
Check the EPEL documentation for details on making EPEL repositories available on your system.
Fedora
Install Cherokee from Fedora’s Yum repository
yum install cherokee
See Fedora’s package information for later versions than what’s included with the latest distribution.
macOS
Install Cherokee using Homebrew
brew install cherokee
For version information using brew, just type the following in your terminal
brew info cherokee
Option 1: Automatic installation
Open a terminal and enter:
wget https://raw.github.com/cherokee/installer/master/install.py && python install.py
or
curl -LO https://raw.github.com/cherokee/installer/master/install.py && python install.py
This will download and install Cherokee under /opt/cherokee
Option 2: Compile it by hand
Download latest source code package, and install it by hand doing the ./configure, make, make install dance:
configure --prefix=/usr --localstatedir=/var --sysconfdir=/etc
make && sudo make install
Older releases are also available at our Downloads archive.