Ubuntu
lighttpd package

lighttpd 1.4.11-3ubuntu3.5 source package in Ubuntu

Changelog

lighttpd (1.4.11-3ubuntu3.5) dapper-security; urgency=low

  * SECURITY UPDATE: fix DoS crash from improper EOL handling in mod_cgi.c
    (backported from upstream 1.4.17)
  * SECURITY UPDATE: fix potential DoS crash in etag.c. This patch also fixes
    possible dereferencing a NULL pointer in buffer.c (both backported from
    upstream 1.4.17)
  * SECURITY UPDATE: fix arbitrary code execution in mod_fastcgi.c due to
    improper handling of content length in HTTP headers.  Patch from upstream
  * References
    https://bugs.launchpad.net/ubuntu/+source/lighttpd/+bug/138309
    https://bugs.launchpad.net/ubuntu/+source/lighttpd/+bug/138310
    http://www.lighttpd.net/assets/2007/9/9/lighttpd_sa_2007_12.txt
    CVE-2007-4727

 -- Jamie Strandboge <email address hidden>   Sat, 08 Sep 2007 17:09:41 -0400

Upload details

Uploaded by:
Jamie Strandboge
Uploaded to:
Dapper
Original maintainer:
Debian lighttpd maintainers
Architectures:
any
Section:
web
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
lighttpd_1.4.11.orig.tar.gz 758.9 KiB 53661dcaa2e9570be1dbb0017fa9bd59bf2c3b55b3771d6024da4df30585a826
lighttpd_1.4.11-3ubuntu3.5.diff.gz 23.2 KiB a541e7dded455c8d5ad02fd59378deeaf01b460db4ab5c613a3cda35706ece26
lighttpd_1.4.11-3ubuntu3.5.dsc 979 bytes 96e6438adaad156f84083077fb2c51d7e7631694526680a63b784dff39b3741a

View changes file

Binary packages built by this source

lighttpd: No summary available for lighttpd in ubuntu dapper.

No description available for lighttpd in ubuntu dapper.

lighttpd-doc: No summary available for lighttpd-doc in ubuntu dapper.

No description available for lighttpd-doc in ubuntu dapper.

lighttpd-mod-cml: No summary available for lighttpd-mod-cml in ubuntu dapper.

No description available for lighttpd-mod-cml in ubuntu dapper.

lighttpd-mod-mysql-vhost: No summary available for lighttpd-mod-mysql-vhost in ubuntu dapper.

No description available for lighttpd-mod-mysql-vhost in ubuntu dapper.

lighttpd-mod-trigger-b4-dl: No summary available for lighttpd-mod-trigger-b4-dl in ubuntu dapper.

No description available for lighttpd-mod-trigger-b4-dl in ubuntu dapper.