[Bug 209627] Re: lighttpd (security) ssl fix

Launchpad Bug Tracker 209627 at bugs.launchpad.net
Sun Apr 6 01:35:06 BST 2008

This bug was fixed in the package lighttpd - 1.4.19-0ubuntu3

lighttpd (1.4.19-0ubuntu3) hardy; urgency=low

  * SECURITY UPDATE: (LP: #209627)
   + debian/patches/92_CVE-2008-1531.dpatch
    - lighttpd 1.4.19 and earlier allows remote attackers to cause a denial
      of service (active SSL connection loss) by triggering an SSL error,
      such as disconnecting before a download has finished, which causes
      all active SSL connections to be lost.
  * References
   + http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1531
   + http://trac.lighttpd.net/trac/changeset/2136
   + http://trac.lighttpd.net/trac/changeset/2139

 -- Emanuele Gentili <emgent at emanuele-gentili.com>   Sun, 06 Apr 2008
00:09:12 +0200

** Changed in: lighttpd (Ubuntu Hardy)
       Status: In Progress => Fix Released

lighttpd (security) ssl fix
You received this bug notification because you are a member of Ubuntu
Sponsors for universe, which is a direct subscriber.

More information about the Ubuntu-universe-sponsors mailing list