Accepted lighttpd 1.4.11-3ubuntu3.5 (source)
Ubuntu Installer
archive at ubuntu.com
Tue Sep 11 18:55:15 BST 2007
Accepted:
OK: lighttpd_1.4.11.orig.tar.gz
OK: lighttpd_1.4.11-3ubuntu3.5.diff.gz
OK: lighttpd_1.4.11-3ubuntu3.5.dsc
-> Component: universe Section: web
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sat, 08 Sep 2007 17:09:41 -0400
Source: lighttpd
Binary: lighttpd-mod-mysql-vhost lighttpd-mod-cml lighttpd-doc lighttpd-mod-trigger-b4-dl lighttpd
Architecture: source
Version: 1.4.11-3ubuntu3.5
Distribution: dapper-security
Urgency: low
Maintainer: Debian lighttpd maintainers <pkg-lighttpd-maintainers at lists.alioth.debian.org>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description:
lighttpd - A fast webserver with minimal memory footprint
lighttpd-doc - Documentation for lighttpd
lighttpd-mod-cml - Cache meta language module for lighttpd
lighttpd-mod-mysql-vhost - MySQL-based virtual host configuration for lighttpd
lighttpd-mod-trigger-b4-dl - Anti-deep-linking module for lighttpd
Changes:
lighttpd (1.4.11-3ubuntu3.5) dapper-security; urgency=low
.
* SECURITY UPDATE: fix DoS crash from improper EOL handling in mod_cgi.c
(backported from upstream 1.4.17)
* SECURITY UPDATE: fix potential DoS crash in etag.c. This patch also fixes
possible dereferencing a NULL pointer in buffer.c (both backported from
upstream 1.4.17)
* SECURITY UPDATE: fix arbitrary code execution in mod_fastcgi.c due to
improper handling of content length in HTTP headers. Patch from upstream
* References
https://bugs.launchpad.net/ubuntu/+source/lighttpd/+bug/138309
https://bugs.launchpad.net/ubuntu/+source/lighttpd/+bug/138310
http://www.lighttpd.net/assets/2007/9/9/lighttpd_sa_2007_12.txt
CVE-2007-4727
Files:
2cfcad3875eed30807bb7d7f63e597ab 979 web optional lighttpd_1.4.11-3ubuntu3.5.dsc
bff69dbb42265b37a5d5bb998fae2996 23777 web optional lighttpd_1.4.11-3ubuntu3.5.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFG5rrrH/9LqRcGPm0RAoBfAJwNWpSYogO7lG0wSputiVCjL2rrYwCfQSqb
fUF1qd/KkxQvL8T2eL6BC/M=
=3qAG
-----END PGP SIGNATURE-----
More information about the dapper-changes
mailing list