Accepted: lighttpd 1.4.18-1ubuntu5 (source)
Stephan Hermann
sh at sourcecode.de
Wed Mar 5 13:15:21 GMT 2008
Accepted:
OK: lighttpd_1.4.18.orig.tar.gz
OK: lighttpd_1.4.18-1ubuntu5.diff.gz
OK: lighttpd_1.4.18-1ubuntu5.dsc
-> Component: universe Section: web
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 05 Mar 2008 14:04:43 +0100
Source: lighttpd
Binary: lighttpd lighttpd-doc lighttpd-mod-mysql-vhost lighttpd-mod-trigger-b4-dl lighttpd-mod-cml lighttpd-mod-magnet lighttpd-mod-webdav
Architecture: source
Version: 1.4.18-1ubuntu5
Distribution: hardy
Urgency: low
Maintainer: Ubuntu MOTU Developers <ubuntu-motu at lists.ubuntu.com>
Changed-By: Stephan Hermann <sh at sourcecode.de>
Description:
lighttpd - A fast webserver with minimal memory footprint
lighttpd-doc - Documentation for lighttpd
lighttpd-mod-cml - Cache meta language module for lighttpd
lighttpd-mod-magnet - Control the request handling module for lighttpd
lighttpd-mod-mysql-vhost - MySQL-based virtual host configuration for lighttpd
lighttpd-mod-trigger-b4-dl - Anti-deep-linking module for lighttpd
lighttpd-mod-webdav - WebDAV module for lighttpd
Changes:
lighttpd (1.4.18-1ubuntu5) hardy; urgency=low
.
* debian/patches/90-CVE-2008-1111.dpatch:
- Fixes CVE-2008-1111
"mod_cgi in lighttpd 1.4.18, when a fork failure occurs, sends the source
code of CGI scripts instead of a 500 error, which might allow remote attackers
to obtain sensitive information."
Upstream Patch: http://trac.lighttpd.net/trac/changeset/2107
Files:
9591709cdeaf9d7b0401b821d8e6a7f7 1463 web optional lighttpd_1.4.18-1ubuntu5.dsc
4454c7121578f5d2fed6dfd92f2b075a 21963 web optional lighttpd_1.4.18-1ubuntu5.diff.gz
Original-Maintainer: Debian lighttpd maintainers <pkg-lighttpd-maintainers at lists.alioth.debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iQCVAwUBR86a293f7CNdEra6AQID/gP5AcrjiZhGxE2tq1gGj/fVOKoMrY6DRFs6
7CmTF1jQNR53iVpg1vl9o2iLGWpGK4zoTvo363hGBB6EKi4i6vmf6QkhZrEpCL3C
rw45AJ3pxCDSODX+7/BelK4oEwAlJ1fSOMKL4B+y+Q5FuQHVQDg1/51AmAkyJJjO
fp+vmWIunO4=
=p1xE
-----END PGP SIGNATURE-----
More information about the Hardy-changes
mailing list