lighttpd?

jlist dlist at ubuntuforums.org
Sun Sep 18 11:52:22 CDT 2005


Lorenzo Villani Wrote: 
> 

> Hm.. these are debs for the 1.3.16 version, I've packaged the 1.4.3

> version (latest) which includes some improvements and is more secure

> than lighttpd 1.3.16 (you can see a dangerous bug here:

> http://lighttpd.net/news/ -- "In lighttpd 1.3.7 and below it is
> possible

> to fetch the source files which should be handled by CGI or FastCGI

> applications." -- so the packaged version maybe affected by this

> security bug, if not patched)

> Hi Lorenzo, can you please advise how to use your lighttpd 1.4.3
package? I can also build from source of course. Will using the readily
built package lose anything? In other words, would running configure and
make provide more flexbility than using the deb file? Thanks.


-- 
jlist



More information about the ubuntu-devel mailing list