Accepted lighttpd 1.4.11-3ubuntu3.5 (source)

Ubuntu Installer archive at ubuntu.com
Tue Sep 11 18:55:15 BST 2007


Accepted:
 OK: lighttpd_1.4.11.orig.tar.gz
 OK: lighttpd_1.4.11-3ubuntu3.5.diff.gz
 OK: lighttpd_1.4.11-3ubuntu3.5.dsc
     -> Component: universe Section: web

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sat, 08 Sep 2007 17:09:41 -0400
Source: lighttpd
Binary: lighttpd-mod-mysql-vhost lighttpd-mod-cml lighttpd-doc lighttpd-mod-trigger-b4-dl lighttpd
Architecture: source
Version: 1.4.11-3ubuntu3.5
Distribution: dapper-security
Urgency: low
Maintainer: Debian lighttpd maintainers <pkg-lighttpd-maintainers at lists.alioth.debian.org>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description: 
 lighttpd   - A fast webserver with minimal memory footprint
 lighttpd-doc - Documentation for lighttpd
 lighttpd-mod-cml - Cache meta language module for lighttpd
 lighttpd-mod-mysql-vhost - MySQL-based virtual host configuration for lighttpd
 lighttpd-mod-trigger-b4-dl - Anti-deep-linking module for lighttpd
Changes: 
 lighttpd (1.4.11-3ubuntu3.5) dapper-security; urgency=low
 .
   * SECURITY UPDATE: fix DoS crash from improper EOL handling in mod_cgi.c
     (backported from upstream 1.4.17)
   * SECURITY UPDATE: fix potential DoS crash in etag.c. This patch also fixes
     possible dereferencing a NULL pointer in buffer.c (both backported from
     upstream 1.4.17)
   * SECURITY UPDATE: fix arbitrary code execution in mod_fastcgi.c due to
     improper handling of content length in HTTP headers.  Patch from upstream
   * References
     https://bugs.launchpad.net/ubuntu/+source/lighttpd/+bug/138309
     https://bugs.launchpad.net/ubuntu/+source/lighttpd/+bug/138310
     http://www.lighttpd.net/assets/2007/9/9/lighttpd_sa_2007_12.txt
     CVE-2007-4727
Files: 
 2cfcad3875eed30807bb7d7f63e597ab 979 web optional lighttpd_1.4.11-3ubuntu3.5.dsc
 bff69dbb42265b37a5d5bb998fae2996 23777 web optional lighttpd_1.4.11-3ubuntu3.5.diff.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFG5rrrH/9LqRcGPm0RAoBfAJwNWpSYogO7lG0wSputiVCjL2rrYwCfQSqb
fUF1qd/KkxQvL8T2eL6BC/M=
=3qAG
-----END PGP SIGNATURE-----





More information about the dapper-changes mailing list