Accepted: lighttpd, lighttpd, lighttpd, lighttpd, lighttpd, lighttpd, lighttpd 1.4.11-3ubuntu3.8 (source, amd64, hppa, i386, ia64, powerpc, sparc)
Ubuntu Installer
archive at ubuntu.com
Tue Mar 11 19:55:17 GMT 2008
- Previous message: Accepted: python2.4, python2.4, python2.4, python2.4, python2.4, python2.4, python2.4 2.4.3-0ubuntu6.1 (source, amd64, hppa, i386, ia64, powerpc, sparc)
- Next message: Accepted: mysql-dfsg-5.0 5.0.22-0ubuntu6.06.7 (source)
- Messages sorted by:
[ date ]
[ thread ]
[ subject ]
[ author ]
Accepted:
OK: lighttpd_1.4.11.orig.tar.gz
OK: lighttpd_1.4.11-3ubuntu3.8.diff.gz
OK: lighttpd_1.4.11-3ubuntu3.8.dsc
-> Component: universe Section: web
OK: lighttpd_1.4.11-3ubuntu3.8_amd64.deb
OK: lighttpd-mod-cml_1.4.11-3ubuntu3.8_amd64.deb
OK: lighttpd-mod-mysql-vhost_1.4.11-3ubuntu3.8_amd64.deb
OK: lighttpd-mod-trigger-b4-dl_1.4.11-3ubuntu3.8_amd64.deb
OK: lighttpd_1.4.11-3ubuntu3.8_hppa.deb
OK: lighttpd-mod-cml_1.4.11-3ubuntu3.8_hppa.deb
OK: lighttpd-mod-mysql-vhost_1.4.11-3ubuntu3.8_hppa.deb
OK: lighttpd-mod-trigger-b4-dl_1.4.11-3ubuntu3.8_hppa.deb
OK: lighttpd_1.4.11-3ubuntu3.8_i386.deb
OK: lighttpd-doc_1.4.11-3ubuntu3.8_all.deb
OK: lighttpd-mod-cml_1.4.11-3ubuntu3.8_i386.deb
OK: lighttpd-mod-mysql-vhost_1.4.11-3ubuntu3.8_i386.deb
OK: lighttpd-mod-trigger-b4-dl_1.4.11-3ubuntu3.8_i386.deb
OK: lighttpd_1.4.11-3ubuntu3.8_ia64.deb
OK: lighttpd-mod-cml_1.4.11-3ubuntu3.8_ia64.deb
OK: lighttpd-mod-mysql-vhost_1.4.11-3ubuntu3.8_ia64.deb
OK: lighttpd-mod-trigger-b4-dl_1.4.11-3ubuntu3.8_ia64.deb
OK: lighttpd_1.4.11-3ubuntu3.8_powerpc.deb
OK: lighttpd-mod-cml_1.4.11-3ubuntu3.8_powerpc.deb
OK: lighttpd-mod-mysql-vhost_1.4.11-3ubuntu3.8_powerpc.deb
OK: lighttpd-mod-trigger-b4-dl_1.4.11-3ubuntu3.8_powerpc.deb
OK: lighttpd_1.4.11-3ubuntu3.8_sparc.deb
OK: lighttpd-mod-cml_1.4.11-3ubuntu3.8_sparc.deb
OK: lighttpd-mod-mysql-vhost_1.4.11-3ubuntu3.8_sparc.deb
OK: lighttpd-mod-trigger-b4-dl_1.4.11-3ubuntu3.8_sparc.deb
Format: 1.7
Date: Tue, 11 Mar 2008 15:03:17 +0100
Source: lighttpd
Binary: lighttpd lighttpd-doc lighttpd-mod-cml lighttpd-mod-mysql-vhost lighttpd-mod-trigger-b4-dl
Architecture: amd64 hppa i386 all ia64 powerpc source sparc
Version: 1.4.11-3ubuntu3.8
Distribution: dapper-security
Urgency: low
Maintainer: Debian lighttpd maintainers <pkg-lighttpd-maintainers at lists.alioth.debian.org>
Changed-By: Emanuele Gentili <emgent at emanuele-gentili.com>
Description:
lighttpd - A fast webserver with minimal memory footprint
lighttpd-mod-cml - Cache meta language module for lighttpd
lighttpd-mod-mysql-vhost - MySQL-based virtual host configuration for lighttpd
lighttpd-mod-trigger-b4-dl - Anti-deep-linking module for lighttpd
lighttpd-doc - Documentation for lighttpd
Changes:
lighttpd (1.4.11-3ubuntu3.8) dapper-security; urgency=low
.
* SECURITY UPDATE: (LP: #200987)
+ debian/patches/91_CVE-2008-1270.dpatch
- mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set,
uses a default of $HOME, which might allow remote attackers to read arbitrary
files, as demonstrated by accessing the ~nobody directory.
* References
+ http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1270
+ http://trac.lighttpd.net/trac/ticket/1587
+ http://trac.lighttpd.net/trac/changeset/2120
Files:
c3a1e8595dc88a78d2bb45ccd8a5299e 304426 web optional lighttpd_1.4.11-3ubuntu3.8_amd64.deb
b3f4362fee7147933ab1e22dae93549d 58882 web optional lighttpd-mod-mysql-vhost_1.4.11-3ubuntu3.8_amd64.deb
5bd1a6803499a9e26435f7f401d94818 59790 web optional lighttpd-mod-trigger-b4-dl_1.4.11-3ubuntu3.8_amd64.deb
5f0be8e00c89e87699da464bb6540e3e 62996 web optional lighttpd-mod-cml_1.4.11-3ubuntu3.8_amd64.deb
c943cfad29879664a6abb06f2d382734 328682 web optional lighttpd_1.4.11-3ubuntu3.8_hppa.deb
f1623853f691e45e8af99f0446afa335 59472 web optional lighttpd-mod-mysql-vhost_1.4.11-3ubuntu3.8_hppa.deb
f16571f3a78476bd74e1110dd3814d57 60620 web optional lighttpd-mod-trigger-b4-dl_1.4.11-3ubuntu3.8_hppa.deb
9ce3179fd9329ba945a923fda38942de 63884 web optional lighttpd-mod-cml_1.4.11-3ubuntu3.8_hppa.deb
62e7a8d8cb48e63d077034aaf6ec0540 95208 doc optional lighttpd-doc_1.4.11-3ubuntu3.8_all.deb
22d5de06b38feb380fc1bc953306c27c 282270 web optional lighttpd_1.4.11-3ubuntu3.8_i386.deb
1246ade357b5b90f0433004e7ca40931 58560 web optional lighttpd-mod-mysql-vhost_1.4.11-3ubuntu3.8_i386.deb
d64fa538a5ec8a4af8f1c4168483e1bc 59496 web optional lighttpd-mod-trigger-b4-dl_1.4.11-3ubuntu3.8_i386.deb
7431a70faed78d99e7a0fe0ae562111a 62108 web optional lighttpd-mod-cml_1.4.11-3ubuntu3.8_i386.deb
17aeb4d7738ce151cc0596b2921bc4b4 418778 web optional lighttpd_1.4.11-3ubuntu3.8_ia64.deb
29c3312d478f6eb21f8f8808ad2cccf9 60920 web optional lighttpd-mod-mysql-vhost_1.4.11-3ubuntu3.8_ia64.deb
31e67179750556ebd497ed88636f7cf3 61954 web optional lighttpd-mod-trigger-b4-dl_1.4.11-3ubuntu3.8_ia64.deb
6a94ad6a3f65c0caa9caffe441ac671a 66174 web optional lighttpd-mod-cml_1.4.11-3ubuntu3.8_ia64.deb
1ee7a2dc46cd6620177dbb6b479b15fb 327884 web optional lighttpd_1.4.11-3ubuntu3.8_powerpc.deb
2c96da8426f8ef683863efbf3c681c22 60206 web optional lighttpd-mod-mysql-vhost_1.4.11-3ubuntu3.8_powerpc.deb
5cb1b1271bb897dcbed69fa71ed087eb 61380 web optional lighttpd-mod-trigger-b4-dl_1.4.11-3ubuntu3.8_powerpc.deb
2b7d6368e65e06d960de0a2ebb022957 64000 web optional lighttpd-mod-cml_1.4.11-3ubuntu3.8_powerpc.deb
fe135ff14b94511ea8a0745672f3d1fc 979 web optional lighttpd_1.4.11-3ubuntu3.8.dsc
cd56ab322f788223a87202c432a6c6df 24850 web optional lighttpd_1.4.11-3ubuntu3.8.diff.gz
616e916932ac31814637bf7f9f88d315 289470 web optional lighttpd_1.4.11-3ubuntu3.8_sparc.deb
6bc35c9cf0ef9e18d44a8de41b0d17c3 58464 web optional lighttpd-mod-mysql-vhost_1.4.11-3ubuntu3.8_sparc.deb
870798a892d6ce011191f692c1781083 59472 web optional lighttpd-mod-trigger-b4-dl_1.4.11-3ubuntu3.8_sparc.deb
70462772c3704a4c5112750937f79673 62158 web optional lighttpd-mod-cml_1.4.11-3ubuntu3.8_sparc.deb
- Previous message: Accepted: python2.4, python2.4, python2.4, python2.4, python2.4, python2.4, python2.4 2.4.3-0ubuntu6.1 (source, amd64, hppa, i386, ia64, powerpc, sparc)
- Next message: Accepted: mysql-dfsg-5.0 5.0.22-0ubuntu6.06.7 (source)
- Messages sorted by:
[ date ]
[ thread ]
[ subject ]
[ author ]
More information about the dapper-changes
mailing list