Change log : lighttpd package : Ubuntu

1.4.73-1ubuntu1

Published in noble-proposed on 2023-11-24

lighttpd (1.4.73-1ubuntu1) noble; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.69-1ubuntu2 to 1.4.73-1ubuntu1 (247.5 KiB)

1.4.69-1ubuntu2

Published in noble-release on 2023-11-23

Deleted in noble-proposed (Reason: Moved to noble)

lighttpd (1.4.69-1ubuntu2) noble; urgency=medium

  * Rebuild against new libwolfssl41.

 -- Gianfranco Costamagna <email address hidden>  Wed, 22 Nov 2023 16:35:41 +0100

Available diffs

diff from 1.4.69-1ubuntu1 to 1.4.69-1ubuntu2 (347 bytes)

1.4.69-1ubuntu1

Superseded in noble-release on 2023-11-23

Published in mantic-release on 2023-05-11

Deleted in mantic-proposed (Reason: Moved to mantic)

lighttpd (1.4.69-1ubuntu1) mantic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.67-1ubuntu2 to 1.4.69-1ubuntu1 (211.5 KiB)

1.4.55-1ubuntu1.20.04.2

Published in focal-updates on 2023-02-27

Published in focal-security on 2023-02-27

lighttpd (1.4.55-1ubuntu1.20.04.2) focal-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds Write
    - debian/patches/CVE-2022-22707.patch: mod_extforward_Forwarded function
      of the mod_extforward plugin has a stack-based buffer overflow.
      (LP: #1994989)
    - CVE-2022-22707

 -- Jack Fewx <email address hidden>  Thu, 16 Feb 2023 20:09:14 -0600

Available diffs

1.4.65-2ubuntu1.1

Obsolete in kinetic-updates on 2023-11-13

Obsolete in kinetic-security on 2023-11-13

lighttpd (1.4.65-2ubuntu1.1) kinetic-security; urgency=medium

  * SECURITY UPDATE: Resource leak
    - debian/patches/CVE-2022-41556.patch: Resource leak in gw_backend.c.
      (LP: #1994989)
    - CVE-2022-41556

 -- Jack Fewx <email address hidden>  Thu, 16 Feb 2023 20:35:58 -0600

Available diffs

diff from 1.4.65-2ubuntu1 (in Ubuntu) to 1.4.65-2ubuntu1.1 (1.1 KiB)

1.4.63-1ubuntu3.1

Published in jammy-updates on 2023-02-27

Published in jammy-security on 2023-02-27

lighttpd (1.4.63-1ubuntu3.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds Write
    - debian/patches/CVE-2022-22707.patch: mod_extforward_Forwarded function
      of the mod_extforward plugin has a stack-based buffer overflow.
      (LP: #1994989)
    - CVE-2022-22707
  * SECURITY UPDATE: Resource leak
    - debian/patches/CVE-2022-41556.patch: Resource leak in gw_backend.c.
    - CVE-2022-41556

 -- Jack Fewx <email address hidden>  Mon, 13 Feb 2023 21:33:26 -0600

Available diffs

diff from 1.4.63-1ubuntu3 (in Ubuntu) to 1.4.63-1ubuntu3.1 (1.8 KiB)

1.4.67-1ubuntu2

Superseded in mantic-release on 2023-05-11

Published in lunar-release on 2023-01-09

Deleted in lunar-proposed (Reason: Moved to lunar)

lighttpd (1.4.67-1ubuntu2) lunar; urgency=medium

  * No-change rebuild against libldap-2

 -- Steve Langasek <email address hidden>  Thu, 15 Dec 2022 19:51:04 +0000

Available diffs

diff from 1.4.67-1ubuntu1 to 1.4.67-1ubuntu2 (328 bytes)

1.4.67-1ubuntu1

Superseded in lunar-release on 2023-01-09

Deleted in lunar-proposed on 2023-01-10 (Reason: Moved to lunar)

lighttpd (1.4.67-1ubuntu1) lunar; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.65-2ubuntu1 to 1.4.67-1ubuntu1 (81.5 KiB)

1.4.65-2ubuntu1

Superseded in lunar-release on 2022-12-04

Obsolete in kinetic-release on 2023-11-13

Deleted in kinetic-proposed (Reason: Moved to kinetic)

lighttpd (1.4.65-2ubuntu1) kinetic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.64-1ubuntu1 to 1.4.65-2ubuntu1 (263.8 KiB)

1.4.64-1ubuntu1

Superseded in kinetic-release on 2022-06-24

Deleted in kinetic-proposed on 2022-06-26 (Reason: Moved to kinetic)

lighttpd (1.4.64-1ubuntu1) kinetic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.63-1ubuntu3 to 1.4.64-1ubuntu1 (99.7 KiB)

1.4.63-1ubuntu3

Superseded in kinetic-release on 2022-05-18

Published in jammy-release on 2022-03-09

Deleted in jammy-proposed (Reason: Moved to jammy)

lighttpd (1.4.63-1ubuntu3) jammy; urgency=medium

  * No-change rebuild against libwolfssl32

 -- Steve Langasek <email address hidden>  Mon, 07 Mar 2022 18:38:16 +0000

Available diffs

diff from 1.4.63-1ubuntu2 to 1.4.63-1ubuntu3 (309 bytes)

1.4.63-1ubuntu2

Superseded in jammy-release on 2022-03-09

Deleted in jammy-proposed on 2022-03-10 (Reason: Moved to jammy)

lighttpd (1.4.63-1ubuntu2) jammy; urgency=medium

  * No-change rebuild against libmbedcrypto7

 -- Steve Langasek <email address hidden>  Fri, 18 Feb 2022 23:45:01 +0000

Available diffs

diff from 1.4.63-1ubuntu1 to 1.4.63-1ubuntu2 (339 bytes)

1.4.63-1ubuntu1

Superseded in jammy-release on 2022-02-20

Deleted in jammy-proposed on 2022-02-22 (Reason: Moved to jammy)

lighttpd (1.4.63-1ubuntu1) jammy; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate override on dh_install
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.
  * Drop lighttpd-dev which is completely unused in Ubuntu.
  * Revert change that comments out use-ipv6.pl.  All servers should
    bind to IPv6 by default, this change was introduced in Ubuntu in
    2010 and has not been revisited since; and upstream said on the
    original bug (LP #551211) that the Ubuntu delta could be reverted in
    2013.
  * Drop dh_installinit override, introduced in 2008 in Ubuntu and not
    relevant since Ubuntu adopted systemd.
  * Drop references to obsolete libgamin.

Available diffs

diff from 1.4.59-1ubuntu3 to 1.4.63-1ubuntu1 (567.8 KiB)

1.4.59-1ubuntu3

Superseded in jammy-release on 2021-12-30

Deleted in jammy-proposed on 2022-01-09 (Reason: Moved to jammy)

lighttpd (1.4.59-1ubuntu3) jammy; urgency=medium

  * No-change rebuild against libssl3

 -- Steve Langasek <email address hidden>  Wed, 08 Dec 2021 23:38:09 +0000

Available diffs

diff from 1.4.59-1ubuntu2 to 1.4.59-1ubuntu3 (599 bytes)

1.4.59-1ubuntu2

Superseded in jammy-release on 2021-12-16

Obsolete in impish-release on 2022-07-23

Deleted in impish-proposed (Reason: Moved to impish)

lighttpd (1.4.59-1ubuntu2) impish; urgency=medium

  * No-change rebuild due to OpenLDAP soname bump.

 -- Sergio Durigan Junior <email address hidden>  Mon, 21 Jun 2021 17:53:35 -0400

Available diffs

diff from 1.4.59-1ubuntu1 to 1.4.59-1ubuntu2 (355 bytes)

1.4.55-1ubuntu1.20.04.1

Superseded in focal-updates on 2023-02-27

Deleted in focal-proposed on 2023-03-01 (Reason: moved to -updates)

lighttpd (1.4.55-1ubuntu1.20.04.1) focal; urgency=medium

  * d/control: Depend on libgamin to fix missing symbol errors (LP: #1453463)
  * d/test/control: introduce regression test for libgamin/libfam
  * d/test/libfam-libgamin-conflict-regression: check for libgamin/libfam
    conflict regressions

 -- Athos Ribeiro <email address hidden>  Mon, 14 Jun 2021 18:34:03 -0300

Available diffs

diff from 1.4.55-1ubuntu1 to 1.4.55-1ubuntu1.20.04.1 (1.3 KiB)

1.4.45-1ubuntu3.18.04.1

Published in bionic-updates on 2021-07-01

Deleted in bionic-proposed (Reason: moved to -updates)

lighttpd (1.4.45-1ubuntu3.18.04.1) bionic; urgency=medium

  * d/control: Depend on libgamin to fix missing symbol errors (LP: #1453463)
  * d/test/control: introduce regression test for libgamin/libfam
  * d/test/libfam-libgamin-conflict-regression: check for libgamin/libfam
    conflict regressions

 -- Athos Ribeiro <email address hidden>  Tue, 15 Jun 2021 11:44:25 -0300

Available diffs

diff from 1.4.45-1ubuntu3.18.04 (in ~ci-train-ppa-service/ubuntu/3742-deletedppa) to 1.4.45-1ubuntu3.18.04.1 (1.0 KiB)

1.4.59-1ubuntu1

Superseded in impish-release on 2021-07-16

Obsolete in hirsute-release on 2022-07-23

Deleted in hirsute-proposed on 2022-07-24 (Reason: moved to Release)

lighttpd (1.4.59-1ubuntu1) hirsute; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate override on dh_install
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.
    - Depend on libgamin to fix missing symbol errors

Available diffs

diff from 1.4.58-2ubuntu1 to 1.4.59-1ubuntu1 (72.7 KiB)

1.4.58-2ubuntu1

Superseded in hirsute-release on 2021-02-20

Deleted in hirsute-proposed on 2021-02-21 (Reason: moved to Release)

lighttpd (1.4.58-2ubuntu1) hirsute; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate override on dh_install
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.
    - Depend on libgamin to fix missing symbol errors

 -- Gianfranco Costamagna <email address hidden>  Sun, 17 Jan 2021 12:28:32 +0100

Available diffs

diff from 1.4.55-1ubuntu2 to 1.4.58-2ubuntu1 (914.0 KiB)

1.4.55-1ubuntu2

Superseded in hirsute-release on 2021-01-19

Obsolete in groovy-release on 2021-12-22

Deleted in groovy-proposed on 2022-07-23 (Reason: moved to Release)

lighttpd (1.4.55-1ubuntu2) groovy; urgency=medium

  * Depend on libgamin to fix missing symbol errors (LP: #1453463)

 -- Rafael David Tinoco <email address hidden>  Fri, 07 Aug 2020 00:47:56 +0000

Available diffs

diff from 1.4.55-1ubuntu1 to 1.4.55-1ubuntu2 (799 bytes)

1.4.55-1ubuntu1

Superseded in groovy-release on 2020-08-09

Published in focal-release on 2020-02-27

Deleted in focal-proposed (Reason: moved to Release)

lighttpd (1.4.55-1ubuntu1) focal; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate override on dh_install
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.54-2ubuntu1 to 1.4.55-1ubuntu1 (38.0 KiB)

1.4.54-2ubuntu1

Superseded in focal-release on 2020-02-27

Deleted in focal-proposed on 2020-02-29 (Reason: moved to Release)

lighttpd (1.4.54-2ubuntu1) focal; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate override on dh_install
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.53-4ubuntu2 to 1.4.54-2ubuntu1 (185.5 KiB)

1.4.53-4ubuntu2

Superseded in focal-release on 2020-02-20

Obsolete in eoan-release on 2020-12-29

Deleted in eoan-proposed on 2020-12-29 (Reason: moved to release)

lighttpd (1.4.53-4ubuntu2) eoan; urgency=medium

  * No change rebuild for libmysqlclient21.

 -- Robie Basak <email address hidden>  Wed, 21 Aug 2019 15:46:18 +0000

Available diffs

diff from 1.4.53-4ubuntu1 to 1.4.53-4ubuntu2 (332 bytes)

1.4.45-1ubuntu3.18.10

Obsolete in cosmic-updates on 2020-07-13

Deleted in cosmic-proposed on 2020-07-13 (Reason: moved to -updates)

lighttpd (1.4.45-1ubuntu3.18.10) cosmic; urgency=medium

  * Cherrypick and rebase upstream patch to disable client renegotiation
    with TLSv1.3 connections. LP: #1832295

 -- Dimitri John Ledkov <email address hidden>  Mon, 24 Jun 2019 23:58:56 +0100

Available diffs

diff from 1.4.45-1ubuntu3 to 1.4.45-1ubuntu3.18.10 (1.4 KiB)

1.4.45-1ubuntu3.18.04

Superseded in bionic-updates on 2021-07-01

Deleted in bionic-proposed on 2021-07-02 (Reason: moved to -updates)

lighttpd (1.4.45-1ubuntu3.18.04) bionic; urgency=medium

  * Cherrypick and rebase upstream patch to disable client renegotiation
    with TLSv1.3 connections. LP: #1832295

 -- Dimitri John Ledkov <email address hidden>  Mon, 24 Jun 2019 23:58:56 +0100

Available diffs

diff from 1.4.45-1ubuntu3 (in Ubuntu) to 1.4.45-1ubuntu3.18.04 (1.4 KiB)

1.4.53-4ubuntu1

Superseded in eoan-release on 2019-08-22

Deleted in eoan-proposed on 2019-08-24 (Reason: moved to release)

lighttpd (1.4.53-4ubuntu1) eoan; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate override on dh_install
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.53-3ubuntu1 to 1.4.53-4ubuntu1 (3.8 KiB)

1.4.53-3ubuntu1

Superseded in eoan-release on 2019-04-22

Obsolete in disco-release on 2020-07-14

Deleted in disco-proposed on 2020-07-14 (Reason: moved to release)

lighttpd (1.4.53-3ubuntu1) disco; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate override on dh_install
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.53-1ubuntu1 to 1.4.53-3ubuntu1 (2.6 KiB)
diff from 1.4.53-2ubuntu1 to 1.4.53-3ubuntu1 (1.2 KiB)

1.4.53-2ubuntu1

Superseded in disco-proposed on 2019-02-25

lighttpd (1.4.53-2ubuntu1) disco; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate override on dh_install
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.53-1ubuntu2 to 1.4.53-2ubuntu1 (2.2 KiB)

1.4.53-1ubuntu2

Deleted in disco-proposed on 2019-02-06 (Reason: Defer the mysql-8.0 transition, not ready to happen yet f...)

lighttpd (1.4.53-1ubuntu2) disco; urgency=medium

  * No-change rebuild against libmysqlclient21

 -- Steve Langasek <email address hidden>  Fri, 01 Feb 2019 18:07:18 +0000

Available diffs

diff from 1.4.53-1ubuntu1 to 1.4.53-1ubuntu2 (535 bytes)

1.4.35-4ubuntu2.1

Published in xenial-updates on 2019-01-31

Published in xenial-security on 2019-01-31

lighttpd (1.4.35-4ubuntu2.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Fix vulnerability in HTTPoxy.
    - debian/patches/CVE-2016-1000212.patch: Mitigation for HTTPoxy
      vulnerability.
    - CVE-2016-1000212

 -- Paulo Flabiano Smorigo <email address hidden>  Thu, 31 Jan 2019 14:20:05 -0200

Available diffs

diff from 1.4.35-4ubuntu2 (in Ubuntu) to 1.4.35-4ubuntu2.1 (1.8 KiB)

1.4.33-1+nmu2ubuntu2.1

Published in trusty-updates on 2019-01-31

Published in trusty-security on 2019-01-31

lighttpd (1.4.33-1+nmu2ubuntu2.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Fix vulnerabilities in mod_sql and HTTPoxy.
    - debian/patches/CVE-2014-2323-CVE-2014-2324.patch: Fix SQL injection
      vulnerability in mod_mysql_vhost.c.
    - debian/patches/CVE-2016-1000212.patch: Mitigation for HTTPoxy
      vulnerability.
    - CVE-2014-2323
    - CVE-2014-2324
    - CVE-2016-1000212

 -- Paulo Flabiano Smorigo <email address hidden>  Fri, 25 Jan 2019 10:08:11 -0200

Available diffs

diff from 1.4.33-1+nmu2ubuntu2 (in Ubuntu) to 1.4.33-1+nmu2ubuntu2.1 (2.6 KiB)

1.4.53-1ubuntu1

Superseded in disco-release on 2019-02-25

Deleted in disco-proposed on 2019-02-26 (Reason: moved to release)

lighttpd (1.4.53-1ubuntu1) disco; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate override on dh_install
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.52-5ubuntu2 to 1.4.53-1ubuntu1 (37.4 KiB)

1.4.52-5ubuntu2

Superseded in disco-release on 2019-01-29

Deleted in disco-proposed on 2019-01-30 (Reason: moved to release)

lighttpd (1.4.52-5ubuntu2) disco; urgency=medium

  * Do not use unwind on s390x

 -- Gianfranco Costamagna <email address hidden>  Sun, 27 Jan 2019 22:58:51 +0100

Available diffs

diff from 1.4.52-3ubuntu1 to 1.4.52-5ubuntu2 (30.1 KiB)
diff from 1.4.52-5ubuntu1 to 1.4.52-5ubuntu2 (739 bytes)

1.4.52-5ubuntu1

Superseded in disco-proposed on 2019-01-27

lighttpd (1.4.52-5ubuntu1) disco; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate override on dh_install
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.52-3ubuntu1 to 1.4.52-5ubuntu1 (30.0 KiB)

1.4.52-3ubuntu1

Superseded in disco-release on 2019-01-28

Deleted in disco-proposed on 2019-01-29 (Reason: moved to release)

lighttpd (1.4.52-3ubuntu1) disco; urgency=medium

  * Merge from Debian unstable.  Remaining changes:
    - debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate override on dh_install
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.52-1ubuntu1 to 1.4.52-3ubuntu1 (pending)
diff from 1.4.52-2ubuntu1 to 1.4.52-3ubuntu1 (4.6 KiB)

1.4.52-2ubuntu1

Superseded in disco-proposed on 2019-01-10

lighttpd (1.4.52-2ubuntu1) disco; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate override on dh_install
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.52-1ubuntu1 to 1.4.52-2ubuntu1 (4.2 KiB)

1.4.52-1ubuntu1

Superseded in disco-release on 2019-01-11

Deleted in disco-proposed on 2019-01-12 (Reason: moved to release)

lighttpd (1.4.52-1ubuntu1) disco; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate override on dh_install
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.49-2ubuntu1 to 1.4.52-1ubuntu1 (215.2 KiB)

1.4.49-2ubuntu1

Superseded in disco-release on 2018-12-11

Deleted in disco-proposed on 2018-12-12 (Reason: moved to release)

lighttpd (1.4.49-2ubuntu1) disco; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate override on dh_install
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.49-1.1ubuntu1 to 1.4.49-2ubuntu1 (1.8 KiB)

1.4.49-1.1ubuntu1

Superseded in disco-release on 2018-12-08

Deleted in disco-proposed on 2018-12-10 (Reason: moved to release)

lighttpd (1.4.49-1.1ubuntu1) disco; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Remove duplicate override on dh_install
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.45-1ubuntu3 to 1.4.49-1.1ubuntu1 (761.5 KiB)

1.4.45-1ubuntu3

Superseded in disco-release on 2018-11-08

Obsolete in cosmic-release on 2020-07-13

Published in bionic-release on 2018-02-09

Deleted in bionic-proposed (Reason: moved to release)

lighttpd (1.4.45-1ubuntu3) bionic; urgency=high

  * No change rebuild against openssl1.1.

 -- Dimitri John Ledkov <email address hidden>  Tue, 06 Feb 2018 12:41:51 +0000

Available diffs

diff from 1.4.45-1ubuntu1 to 1.4.45-1ubuntu3 (411 bytes)
diff from 1.4.45-1ubuntu2 to 1.4.45-1ubuntu3 (317 bytes)

1.4.45-1ubuntu2

Superseded in bionic-proposed on 2018-02-06

lighttpd (1.4.45-1ubuntu2) bionic; urgency=medium

  * Rebuild against new libgdbm5.

 -- Gianfranco Costamagna <email address hidden>  Fri, 02 Feb 2018 15:25:24 +0100

Available diffs

diff from 1.4.45-1ubuntu1 to 1.4.45-1ubuntu2 (341 bytes)

1.4.45-1ubuntu1

Superseded in bionic-release on 2018-02-09

Obsolete in artful-release on 2020-07-10

Deleted in artful-proposed on 2020-07-10 (Reason: moved to release)

lighttpd (1.4.45-1ubuntu1) artful; urgency=medium

  * Merge from Debian unstable.  Remaining changes:
    - debian/patches/add-lighttpd.pc-configure.patch:
      + Add lighttpd.pc to ac_config_files to fix FTBFS: make[3]:
        *** No rule to make target `lighttpd.pc', needed by `all-am'.
    - debian/patches/build-dev-package.patch,
      debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
    + Make the application build sanely:
      - Refresh and tweak build-dev-package.patch to apply sanely
      - Remove duplicate override on dh_install
      - Remove duplicate outdated NEWS file
      - Install updated upstream NEWS file and fix
        cp: cannot stat /debian/tmp/changelog thingy to
        fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.44-1ubuntu1 to 1.4.45-1ubuntu1 (424.9 KiB)

1.4.44-1ubuntu1

Superseded in artful-release on 2017-06-09

Obsolete in zesty-release on 2018-06-22

Deleted in zesty-proposed on 2018-06-22 (Reason: moved to release)

lighttpd (1.4.44-1ubuntu1) zesty; urgency=medium

  * Merge from Debian unstable.  Remaining changes:
    - debian/patches/add-lighttpd.pc-configure.patch:
      + Add lighttpd.pc to ac_config_files to fix FTBFS: make[3]:
        *** No rule to make target `lighttpd.pc', needed by `all-am'.
    - debian/patches/build-dev-package.patch,
      debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
  * Make the application build sanely:
    + Refresh and tweak build-dev-package.patch to apply sanely
    + Remove duplicate override on dh_install
    + Remove duplicate outdated NEWS file
    + Install updated upstream NEWS file and fix
      cp: cannot stat /debian/tmp/changelog thingy to
      fix FTBFS when built twice in a row.

Available diffs

diff from 1.4.39-1ubuntu1 to 1.4.44-1ubuntu1 (531.9 KiB)

1.4.39-1ubuntu1

Superseded in zesty-release on 2017-01-14

Obsolete in yakkety-release on 2018-01-23

Deleted in yakkety-proposed on 2018-01-23 (Reason: moved to release)

lighttpd (1.4.39-1ubuntu1) yakkety; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/patches/add-lighttpd.pc-configure.patch:
      + Add lighttpd.pc to ac_config_files to fix FTBFS: make[3]:
        *** No rule to make target `lighttpd.pc', needed by `all-am'.
    - debian/patches/build-dev-package.patch,
      debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.

 -- Artur Rona <email address hidden>  Sun, 24 Jul 2016 16:35:50 +0200

Available diffs

diff from 1.4.35-4ubuntu2 to 1.4.39-1ubuntu1 (212.6 KiB)

1.4.35-4ubuntu2

Superseded in yakkety-release on 2016-07-24

Published in xenial-release on 2016-04-18

Deleted in xenial-proposed (Reason: moved to release)

lighttpd (1.4.35-4ubuntu2) xenial; urgency=medium

  * Rebuild for libmysqlclient20.
  * Add build dependency on libcgi-pm-perl to fix FTBFS. Taken from
    Debian with thanks to gregor herrmann.

 -- Robie Basak <email address hidden>  Mon, 18 Apr 2016 15:26:03 +0000

Available diffs

diff from 1.4.35-4ubuntu1 to 1.4.35-4ubuntu2 (545 bytes)

1.4.35-4ubuntu1

Superseded in xenial-release on 2016-04-18

Obsolete in wily-release on 2018-01-22

Obsolete in vivid-release on 2018-01-18

Deleted in vivid-proposed on 2018-01-22 (Reason: moved to release)

lighttpd (1.4.35-4ubuntu1) vivid; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/patches/add-lighttpd.pc-configure.patch:
      + Add lighttpd.pc to ac_config_files to fix FTBFS: make[3]:
        *** No rule to make target `lighttpd.pc', needed by `all-am'.
    - debian/patches/build-dev-package.patch,
      debian/control, debian/lighttpd-dev.install:
      + Add lighttpd-dev package.
    - debian/index.html:
      + Corrected BTS Ubuntu link and branding on the default page.
    - debian/lighttpd.conf:
      + Comment 'use-ipv6.pl' by default, which causes failure
        to bind port in ipv4.
    - debian/control:
      + Build-Depends on libgamin-dev rather than libfam-dev
        to fix startup warning.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not
        start before apache2 but in the same runlevel with
        the same priority.
    - debian/lighttpd.dirs, debian/control, debian/rules,
      debian/lighttpd.ufw.profile:
      + Add the UFW profile.
 -- Artur Rona <email address hidden>   Mon, 26 Jan 2015 02:36:43 +0100

Available diffs

diff from 1.4.33-1+nmu2ubuntu2 to 1.4.35-4ubuntu1 (40.2 KiB)

1.4.33-1+nmu2ubuntu2

Superseded in vivid-release on 2015-01-26

Obsolete in utopic-release on 2016-11-03

Published in trusty-release on 2014-01-28

Deleted in trusty-proposed (Reason: moved to release)

lighttpd (1.4.33-1+nmu2ubuntu2) trusty; urgency=medium

  * Use dh-autoreconf to regenerate autotools files, fixes FTBFS with
    automake 1.14.1 (Closes: #726934)
  * Add lighttpd.pc to ac_config_files to fix FTBFS:
    make[3]: *** No rule to make target `lighttpd.pc', needed by `all-am'.
 -- Andreas Moog <email address hidden>   Tue, 28 Jan 2014 18:08:02 +0100

Available diffs

diff from 1.4.33-1+nmu2ubuntu1 to 1.4.33-1+nmu2ubuntu2 (1.2 KiB)

1.4.33-1+nmu2ubuntu1

Superseded in trusty-release on 2014-01-28

Deleted in trusty-proposed on 2014-01-29 (Reason: moved to release)

lighttpd (1.4.33-1+nmu2ubuntu1) trusty; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/index.html: corrected BTS Ubuntu link for lighttpd.
    - debian/index.html: s/Debian/Ubuntu/g branding on the default page.
    - debian/lighttpd.conf: Comment 'use-ipv6.pl' by default, which causes
      failure to bind port in ipv4.
    - Add lighttpd-dev package:
      + debian/control: Added lighttpd-dev package; Build-depends on
        automake (>=1.14), libtool.
      + debian/lighttpd-dev.install: Added.
    - debian/control: libgamin-dev rather than libfam-dev to fix startup warning.
    - debian/rules: Add override_dh_installinit to set "defaults 91 09" to not
      start before apache2 but in the same runlevel with the same priority.
    - Added a UFW profile set:
      + debian/lighttpd.dirs: added etc/ufw/applications.d
      + debian/rules: install the ufw profile.
      + debian/control: Suggests on ufw.

Available diffs

diff from 1.4.33-1ubuntu1 to 1.4.33-1+nmu2ubuntu1 (5.2 KiB)

1.4.33-1ubuntu1

Superseded in trusty-release on 2013-12-18

Deleted in trusty-proposed on 2013-12-19 (Reason: moved to release)

lighttpd (1.4.33-1ubuntu1) trusty; urgency=low

  * Merge from Debian unstable (LP: #1246886).  Remaining changes:
    - debian/index.html: corrected BTS Ubuntu link for lighttpd.
    - debian/index.html: s/Debian/Ubuntu/g branding on the default page.
    - debian/lighttpd.conf: Comment 'use-ipv6.pl' by default, which causes
      failure to bind port in ipv4.
    - Add lighttpd-dev package:
      + debian/control: Added lighttpd-dev package; Build-depends on
        automake (>=1.14), libtool.
      + debian/lighttpd-dev.install: Added.
    - debian/control: libgamin-dev rather than libfam-dev to fix startup warning.
    - debian/rules: Add override_dh_installinit to set "defaults 91 09" to not
      start before apache2 but in the same runlevel with the same priority.
    - Added a UFW profile set:
      + debian/lighttpd.dirs: added etc/ufw/applications.d
      + debian/rules: install the ufw profile.
      + debian/control: Suggests on ufw.
    - debian/patches/build-dev-package.patch: Updated to reflect 1.4.33 changes.

Available diffs

diff from 1.4.31-3ubuntu3 to 1.4.33-1ubuntu1 (115.4 KiB)

1.4.31-3ubuntu3

Superseded in trusty-release on 2013-11-07

Obsolete in saucy-release on 2015-04-24

Deleted in saucy-proposed on 2015-04-28 (Reason: moved to release)

lighttpd (1.4.31-3ubuntu3) saucy; urgency=low

  * Use the autotools-dev dh addon to update config.guess/config.sub for
    arm64.
 -- Colin Watson <email address hidden>   Tue, 15 Oct 2013 11:01:00 +0100

Available diffs

diff from 1.4.31-3ubuntu2 to 1.4.31-3ubuntu3 (741 bytes)

1.4.31-3ubuntu2

Superseded in saucy-release on 2013-10-15

Obsolete in raring-release on 2015-04-24

Deleted in raring-proposed on 2015-04-27 (Reason: moved to release)

lighttpd (1.4.31-3ubuntu2) raring; urgency=low

  * Import change from debian version 1.4.31-4:
    - CVE-2013-1427: Switch the socket path for PHP when using FASTCGI. /tmp
      is world-writable which may cause security implications if an attacker
      manages to control /tmp/php.socket before the web server (re-)starts.
 -- Lorenzo De Liso <email address hidden>   Mon, 25 Mar 2013 11:55:53 +0100

Available diffs

diff from 1.4.31-3ubuntu1 to 1.4.31-3ubuntu2 (675 bytes)

1.4.31-3ubuntu1

Superseded in raring-release on 2013-03-25

Deleted in raring-proposed on 2013-03-26 (Reason: moved to release)

lighttpd (1.4.31-3ubuntu1) raring; urgency=low

  * Merge from debian unstable, remaining changes:
    - debian/control: libgamin-dev rather than libfam-dev to fix startup warning.
    - debian/index.html: s/Debian/Ubuntu/g branding on the default page.
    - Added a UFW profile set:
      + debian/lighttpd.dirs: added etc/ufw/applications.d
      + debian/rules: install the ufw profile.
      + debian/control: Suggests on ufw.
    - Add lighttpd-dev package:
      + debian/control: Added lighttpd-dev package; Build-depends on
        automake, libtool
      + debian/lighttpd-dev.install: Added.
    - debian/rules: Add override_dh_installinit to set "defaults 91 09" to not
      start before apache2 but in the same runlevel with the same priority.
    - debian/patches/build-dev-package.patch: Updated
    - debian/lighttpd.conf: Comment 'use-ipv6.pl' by default, which causes
      failure to bind port in ipv4
  * debian/index.html: corrected BTS Ubuntu link for lighttpd

Available diffs

diff from 1.4.28-2ubuntu4 to 1.4.31-3ubuntu1 (295.1 KiB)

1.4.26-1.1ubuntu3.1

Obsolete in lucid-updates on 2016-10-26

Obsolete in lucid-security on 2016-10-26

lighttpd (1.4.26-1.1ubuntu3.1) lucid-security; urgency=low

  * SECURITY UPDATE: Fix DoS because of incorrect code in src/http_auth.c:67
    (LP: #906792)
    - debian/patches/CVE-2011-4362.patch: patch derived from upstream
    - CVE-2011-4362
 -- Mahyuddin Susanto <email address hidden>   Tue, 20 Dec 2011 17:34:44 +0700

Available diffs

diff from 1.4.26-1.1ubuntu3 (in Ubuntu) to 1.4.26-1.1ubuntu3.1 (818 bytes)

1.4.26-3ubuntu2.1

Obsolete in maverick-updates on 2013-03-05

Obsolete in maverick-security on 2013-03-05

lighttpd (1.4.26-3ubuntu2.1) maverick-security; urgency=low

  * SECURITY UPDATE: Fix DoS because of incorrect code in src/http_auth.c:67
    (LP: #906792)
    - debian/patches/CVE-2011-4362.patch: patch derived from upstream
    - CVE-2011-4362
 -- Mahyuddin Susanto <email address hidden>   Tue, 20 Dec 2011 17:35:38 +0700

Available diffs

diff from 1.4.26-3ubuntu2 (in Ubuntu) to 1.4.26-3ubuntu2.1 (905 bytes)

1.4.28-2ubuntu1.1

Obsolete in natty-updates on 2013-06-04

Obsolete in natty-security on 2013-06-04

lighttpd (1.4.28-2ubuntu1.1) natty-security; urgency=low

  * SECURITY UPDATE: Fix DoS because of incorrect code in src/http_auth.c:67
    (LP: #906792)
    - debian/patches/CVE-2011-4362.patch: patch derived from upstream
    - CVE-2011-4362
 -- Mahyuddin Susanto <email address hidden>   Tue, 20 Dec 2011 17:36:09 +0700

Available diffs

diff from 1.4.28-2ubuntu1 (in Ubuntu) to 1.4.28-2ubuntu1.1 (891 bytes)

1.4.28-2ubuntu2.1

Obsolete in oneiric-updates on 2015-04-24

Obsolete in oneiric-security on 2015-04-24

lighttpd (1.4.28-2ubuntu2.1) oneiric-security; urgency=low

  * SECURITY UPDATE: Fix DoS because of incorrect code in src/http_auth.c:67
    (LP: #906792)
    - debian/patches/CVE-2011-4362.patch: patch derived from upstream
    - CVE-2011-4362
 -- Mahyuddin Susanto <email address hidden>   Tue, 20 Dec 2011 17:36:39 +0700

Available diffs

diff from 1.4.28-2ubuntu2 (in Ubuntu) to 1.4.28-2ubuntu2.1 (907 bytes)

1.4.28-2ubuntu4

Superseded in raring-release on 2012-12-06

Obsolete in quantal-release on 2015-04-24

Published in precise-release on 2011-12-20

lighttpd (1.4.28-2ubuntu4) precise; urgency=low

  * debian/patches/CVE-2011-4362.patch: Fix DoS because of incorrect code in
    src/http_auth.c:67 (LP: #906792)
    - CVE-2011-4362
 -- Mahyuddin Susanto <email address hidden>   Tue, 20 Dec 2011 17:32:22 +0700

Available diffs

diff from 1.4.28-2ubuntu3 to 1.4.28-2ubuntu4 (852 bytes)

1.4.28-2ubuntu3

Superseded in precise-release on 2011-12-20

lighttpd (1.4.28-2ubuntu3) precise; urgency=low

  * Rebuild for libmysqlclient transition
 -- Clint Byrum <email address hidden>   Wed, 23 Nov 2011 23:54:14 -0800

Available diffs

diff from 1.4.28-2ubuntu2 to 1.4.28-2ubuntu3 (350 bytes)

1.4.28-2ubuntu2

Superseded in precise-release on 2011-11-24

Obsolete in oneiric-release on 2015-04-24

lighttpd (1.4.28-2ubuntu2) oneiric; urgency=low

  * No-change rebuild for openssl0.9.8 -> openssl1.0.0 transition.
 -- Ilya Barygin <email address hidden>   Sun, 21 Aug 2011 00:26:14 +0400

Available diffs

diff from 1.4.28-2ubuntu1 to 1.4.28-2ubuntu2 (363 bytes)

1.4.28-2ubuntu1

Superseded in oneiric-release on 2011-08-20

Obsolete in natty-release on 2013-06-04

lighttpd (1.4.28-2ubuntu1) natty; urgency=low

  * Merge from debian unstable. Remaining changes:
    - debian/control:
      + libgamin-dev rather than libfam-dev to fix startup warning.
      + debhelper Build-depends bumped to (>= 7.0.50) for
        overrides in rules file.
    - debian/index.html: s/Debian/Ubuntu/g branding on the default page.
    - Added a UFW profile set:
      + debian/lighttpd.dirs: added etc/ufw/applications.d
      + debian/rules: install the ufw profile.
      + debian/control: Suggests on ufw.
    - Add lighttpd-dev package:
      + debian/control: Added lighttpd-dev package; Build-depends on
        automake, libtool
      + debian/lighttpd-dev.install: Added.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not start
        before apache2 but in the same runlevel with the same priority.
    - debian/patches/build-dev-package.patch: Updated
    - debian/lighttpd.conf: Comment 'use-ipv6.pl' by default, which causes
      failure to bind port in ipv4 (LP: #551211)

Available diffs

diff from 1.4.28-1ubuntu1 to 1.4.28-2ubuntu1 (9.9 KiB)

1.4.28-1ubuntu1

Superseded in natty-release on 2010-11-21

lighttpd (1.4.28-1ubuntu1) natty; urgency=low

  * Merge from debian unstable, remaining changes:
    - debian/control:
      + libgamin-dev rather than libfam-dev to fix startup warning.
      + debhelper Build-depends bumped to (>= 7.0.50) for
        overrides in rules file.
    - debian/index.html: s/Debian/Ubuntu/g branding on the default page.
    - Added a UFW profile set:
      + debian/lighttpd.dirs: added etc/ufw/applications.d
      + debian/rules: install the ufw profile.
      + debian/control: Suggests on ufw.
    - Add lighttpd-dev package:
      + debian/control: Added lighttpd-dev package; Build-depends on
        automake, libtool
      + debian/lighttpd-dev.install: Added.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not start
        before apache2 but in the same runlevel with the same priority.
    - debian/patches/build-dev-package.patch: Updated
    - debian/lighttpd.conf: Comment 'use-ipv6.pl' by default, which causes
      failure to bind port in ipv4 (LP: #551211)
  * debian/patches/build-dev-package.patch: updated
  * Dropped changes:
    - debian/lighttpd.init: clean environment; Check syntax during start/reload:
      this change has been applied in the debian package
    - syntax_check function defined in init script. (LP: #600767): this change
      has been applied in the debian package
    - debian/patches/build-dev-package.patch: Updated: patch updated newly

Available diffs

diff from 1.4.26-3ubuntu2 to 1.4.28-1ubuntu1 (89.5 KiB)

1.4.26-3ubuntu2

Superseded in natty-release on 2010-10-16

Obsolete in maverick-release on 2013-03-05

lighttpd (1.4.26-3ubuntu2) maverick; urgency=low

  * syntax_check function defined in init script. (LP: #600767)
 -- David Sugar <email address hidden>   Thu, 15 Jul 2010 17:50:35 +0000

Available diffs

diff from 1.4.26-3ubuntu1 to 1.4.26-3ubuntu2 (500 bytes)

1.4.26-3ubuntu1

Superseded in maverick-release on 2010-07-15

lighttpd (1.4.26-3ubuntu1) maverick; urgency=low

  * Merge from debian unstable (LP: #599010), remaining changes:
    - debian/control:
      + libgamin-dev rather than libfam-dev to fix startup warning.
      + debhelper Build-depends bumped to (>= 7.0.50) for
        overrides in rules file.
    - debian/lighttpd.init: clean environment; Check syntax during start/reload
      restart/force-reload.
    - debian/index.html: s/Debian/Ubuntu/g branding on the default page.
    - Added a UFW profile set:
      + debian/lighttpd.dirs: added etc/ufw/applications.d
      + debian/rules: install the ufw profile.
      + debian/control: Suggests on ufw.
    - Add lighttpd-dev package:
      + debian/control: Added lighttpd-dev package; Build-depends on
        automake, libtool
      + debian/lighttpd-dev.install: Added.
    - debian/rules:
      + Add override_dh_installinit to set "defaults 91 09" to not start
        before apache2 but in the same runlevel with the same priority.
    - debian/patches/build-dev-package.patch: Updated
    - debian/lighttpd.conf: Comment 'use-ipv6.pl' by default, which causes
      failure to bind port in ipv4 (LP: #551211)

Available diffs

diff from 1.4.26-1.1ubuntu3 to 1.4.26-3ubuntu1 (11.2 KiB)

1.4.26-1.1ubuntu3

Superseded in maverick-release on 2010-06-27

Obsolete in lucid-release on 2016-10-26

lighttpd (1.4.26-1.1ubuntu3) lucid; urgency=low

  * debian/control: Rebuild for libmysqlclient transition.
 -- Chuck Short <email address hidden>   Tue, 06 Apr 2010 06:12:07 -0400

Available diffs

diff from 1.4.26-1.1ubuntu2 to 1.4.26-1.1ubuntu3 (574 bytes)

1.4.26-1.1ubuntu2

Superseded in lucid-release on 2010-04-06

lighttpd (1.4.26-1.1ubuntu2) lucid; urgency=low

  * debian/lighttpd.conf: Comment 'use-ipv6.pl' by default, which causes
    failure to bind port in ipv4 (LP: #551211)
 -- Andres Rodriguez <email address hidden>   Sat, 03 Apr 2010 15:37:37 -0400

Available diffs

diff from 1.4.26-1.1ubuntu1 to 1.4.26-1.1ubuntu2 (553 bytes)

1.4.26-1.1ubuntu1

Superseded in lucid-release on 2010-04-03

lighttpd (1.4.26-1.1ubuntu1) lucid; urgency=low

  * Merge from debian unstable (LP: #407722).  Remaining changes:
    - debian/control: libgamin-dev rather than libfam-dev to fix startup
      warning.
    - debian/init.d: clean environment; Check syntax during start/reload
      restart/force-reload.
    - debian/index.html: s/Debian/Ubuntu/g branding on the default page.
    - Added a UFW profile set:
      + debian/lighttpd.dirs: added etc/ufw/applications.d
      + debian/rules: install the ufw profile.
      + debian/control: Suggests on ufw.
    - Add lighttpd-dev package:
      + debian/control: Added lighttpd-dev package; Build-depends on
        automake, libtool
      + debian/lighttpd-dev.install: Added.
  * debian/control: debhelper Build-depends bumped to (>= 7.0.50) for
    overrides in rules file.
  * debian/rules:
    - Add override_dh_installinit to set "defaults 91 09" to not start
      before apache2 but in the same runlevel with the same priority.
  * debian/patches/build-dev-package.patch: Updated
  * Also closes: (LP: #521659, LP: #523682)

Available diffs

diff from 1.4.22-1ubuntu4 to 1.4.26-1.1ubuntu1 (655.9 KiB)

1.4.22-1ubuntu4

Superseded in lucid-release on 2010-03-27

Obsolete in karmic-release on 2013-03-04

lighttpd (1.4.22-1ubuntu4) karmic; urgency=low

  * Fix FTBFS, replaced automake with automake1.10 on Build-Depends
    (LP #447672)

 -- Joao Pinto <email address hidden>   Sat, 10 Oct 2009 00:08:19 +0000

Available diffs

diff from 1.4.22-1ubuntu3 to 1.4.22-1ubuntu4 (539 bytes)

1.4.22-1ubuntu3

Superseded in karmic-release on 2009-10-10

lighttpd (1.4.22-1ubuntu3) karmic; urgency=low

  * debian/lighttpd.logrotate: check if lighttpd is running, before
    calling reload, which would start the daemon if it is not running
    currently (LP: #393792)

 -- Daniel Hahler <email address hidden>   Fri, 03 Jul 2009 01:05:29 +0200

Available diffs

diff from 1.4.22-1ubuntu2 to 1.4.22-1ubuntu3 (544 bytes)

1.4.22-1ubuntu2

Superseded in karmic-release on 2009-07-03

lighttpd (1.4.22-1ubuntu2) karmic; urgency=low

  * Introduce patches to introduce a -dev package for lighttpd. Closes
    (LP: #326899). Should merge seamlessly in the future.

  [ Andreas Moog ]
  * debian/control
    - add lighttpd-dev package
  * debian/patches
    - add build-dev-package.patch to include pkg-config files for lighttpd
  * debian/
    - add lighttpd-dev.install

  [ Morten Kjeldgaard ]
  * debian/rules: add DEB_AUTO_UPDATE_* variables to ensure autotool
    files get updated with our patches.
  * Minor cleanups and update Andreas' patches to version 1.4.22.

 -- Morten Kjeldgaard <email address hidden>   Thu, 18 Jun 2009 14:57:10 +0200

Available diffs

diff from 1.4.22-1ubuntu1 to 1.4.22-1ubuntu2 (1.7 KiB)

1.4.22-1ubuntu1

Superseded in karmic-release on 2009-06-18

lighttpd (1.4.22-1ubuntu1) karmic; urgency=low

  * Merge from debian unstable (LP: #384367), remaining changes:
    - debian/control: Depend on lsb (>= 3.2-14), which has the status_of_proc()
      function; libgamin-dev rather than libfam-dev to fix startup warning.
    - debian/init.d: Add the 'status' action, clean environment; Check syntax
      during start/reload/restart/force-reload.
    - debian/rules: set DEB_UPDATE_RCD_PARAMS to "defaults 91 09" to not start
      lighty before apache2 but in the same runlevel with the same priority;
      Make sure that upgrades succeed, even if we can't restart lighttpd.
    - debian/index.html: s/Debian/Ubuntu/g branding on the default page.
    - Added a UFW profile set:
      + debian/lighttpd.dirs: added etc/ufw/applications.d
      + debian/rules: install the ufw profile.
      + debian/control: Suggests on ufw.
  * debian/patches/fix-conf-doc.patch: Update headers to match package version

Available diffs

diff from 1.4.19-5ubuntu7 to 1.4.22-1ubuntu1 (156.2 KiB)

1.4.19-0ubuntu3.1

Obsolete in hardy-updates on 2015-04-24

Obsolete in hardy-security on 2015-04-24

lighttpd (1.4.19-0ubuntu3.1) hardy-security; urgency=low

  * SECURITY UPDATE: (LP: #279490)
   + debian/patches/93_CVE-2008-4298.dpatch
    - Fix memory leak in request header handling
   + debian/patches/95_CVE-2008-4360.dpatch
    - Fix mod_userdir information disclosure
  * References
   + https://bugs.launchpad.net/bugs/cve/2008-4298
   + https://bugs.launchpad.net/bugs/cve/2008-4360

 -- Marcin Gibula <email address hidden>   Wed, 04 Mar 2009 13:42:05 +0100

Available diffs

diff from 1.4.19-0ubuntu3 (in Ubuntu) to 1.4.19-0ubuntu3.1 (1.5 KiB)

1.4.19-5ubuntu7

Superseded in karmic-release on 2009-06-09

Obsolete in jaunty-release on 2013-02-28

lighttpd (1.4.19-5ubuntu7) jaunty; urgency=low

  * debian/index.html: do not point to edge.launchpad.net
    (LP: #302845)
  * Fix documentation reference to virtual hosting by referring
    to mod_simple_vhost (LP: #247271)
    - debian/patches/fix-conf-doc.patch

 -- Daniel Hahler <email address hidden>   Tue, 17 Mar 2009 22:36:05 +0100

Available diffs

diff from 1.4.19-5ubuntu6 to 1.4.19-5ubuntu7 (980 bytes)

1.4.19-5ubuntu6

Superseded in jaunty-release on 2009-03-17

lighttpd (1.4.19-5ubuntu6) jaunty; urgency=low

  * Finally provide what ~ubuntu3 should have been already, fixing
    another shell script error (LP: #329595)

 -- Daniel Hahler <email address hidden>   Mon, 16 Feb 2009 20:37:19 +0100

Available diffs

diff from 1.4.19-5ubuntu5 to 1.4.19-5ubuntu6 (444 bytes)

1.4.19-5ubuntu5

Superseded in jaunty-release on 2009-02-16

lighttpd (1.4.19-5ubuntu5) jaunty; urgency=low

  * Fix bashism in init.d (LP: #329595)

 -- Daniel Hahler <email address hidden>   Sun, 15 Feb 2009 23:53:19 +0100

Available diffs

diff from 1.4.19-5ubuntu4 to 1.4.19-5ubuntu5 (430 bytes)

1.4.19-5ubuntu4

Superseded in jaunty-release on 2009-02-15

lighttpd (1.4.19-5ubuntu4) jaunty; urgency=low

  * Remove check-syntax-on-startup from debian/patches/series because there is
    not a patch with this name (changes in the last revision were all inside
    the debian dir)

 -- Scott Kitterman <email address hidden>   Sat, 14 Feb 2009 19:07:20 -0500

Available diffs

diff from 1.4.19-5ubuntu3 to 1.4.19-5ubuntu4 (467 bytes)

Ubuntulighttpd package

Change log for lighttpd package in Ubuntu

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Ubuntu
lighttpd package