[Bug 1246886] [NEW] Please merge lighttpd (1.4.33-1) from Debian testing

Launchpad Bug Tracker 1246886 at bugs.launchpad.net
Mon Nov 4 21:26:46 UTC 2013


You have been subscribed to a public bug by Mattia Rizzolo (mapreri):

Debian changelog since last merge:

lighttpd (1.4.33-1) unstable; urgency=low

  * Drop the connection-dos.patch - merged upstream.
  * Fix "mod_extforward missing configuration file": ship requested
    configuration file (Closes: #697304)
  * Remove access.conf, an obsolete conffiles as we should have done since
    2010 (Closes: #703215)
  * Push debhelper's compat mode to 9, the use of maintscript helper requires
    8.1 so we had to push the debhelper b-d anyway.
  * Fix "config.guess/config.sub out of date for arm64" by adding the patch
    provided by Colin Watson. Thanks (Closes: #726394).
  * Fix "[PATCH] use dh-systemd for proper systemd-related maintscripts" to
    add systemd support. Thanks to Michael Stapelberg (Closes: #713859)

 -- Arno Töll <arno at debian.org>  Tue, 15 Oct 2013 21:24:49 +0200

lighttpd (1.4.31-4) unstable; urgency=high

  * CVE-2013-1427: Switch the socket path for PHP when using FastCGI. /tmp is
    world-writable which may cause security implications if an attacker
    manages to control /tmp/php.socket before the web server (re-)starts.
  * Switch VCS to git
  * Push standards version (no changes)

 -- Arno Töll <arno at debian.org>  Thu, 14 Mar 2013 02:20:07 +0100

** Affects: lighttpd (Ubuntu)
     Importance: Undecided
         Status: In Progress

-- 
Please merge lighttpd (1.4.33-1) from Debian testing
https://bugs.launchpad.net/bugs/1246886
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.



More information about the Ubuntu-sponsors mailing list