Ubuntu
lighttpd package

lighttpd 1.4.18-1ubuntu1.3 source package in Ubuntu

Changelog

lighttpd (1.4.18-1ubuntu1.3) gutsy-security; urgency=low

  * SECURITY UPDATE: (LP: #200987)
   + debian/patches/91_CVE-2008-1270.dpatch
    - mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set,
      uses a default of $HOME, which might allow remote attackers to read arbitrary
      files, as demonstrated by accessing the ~nobody directory.
  * References
   + http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1270
   + http://trac.lighttpd.net/trac/ticket/1587
   + http://trac.lighttpd.net/trac/changeset/2120

 -- Emanuele Gentili <email address hidden>   Tue, 11 Mar 2008 14:37:58 +0100

Upload details

Uploaded by:
Emanuele Gentili
Uploaded to:
Gutsy
Original maintainer:
MOTU
Architectures:
any
Section:
web
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
lighttpd_1.4.18.orig.tar.gz 784.5 KiB 97d0ac5957745eeaf311ec38ebbbf3b30a5316b01c320a759af47129c994c20c
lighttpd_1.4.18-1ubuntu1.3.diff.gz 21.6 KiB 03543d79179ca9654737c8cb688fb8d856c77dfca4e70f49d6f1c03b17f58eaf
lighttpd_1.4.18-1ubuntu1.3.dsc 1.3 KiB a54877b23403bb6e3706e1d51b091e0b14ce0b7d16147f30f878f48240ee2791

View changes file

Binary packages built by this source

lighttpd: No summary available for lighttpd in ubuntu gutsy.

No description available for lighttpd in ubuntu gutsy.

lighttpd-doc: No summary available for lighttpd-doc in ubuntu gutsy.

No description available for lighttpd-doc in ubuntu gutsy.

lighttpd-mod-cml: No summary available for lighttpd-mod-cml in ubuntu gutsy.

No description available for lighttpd-mod-cml in ubuntu gutsy.

lighttpd-mod-magnet: No summary available for lighttpd-mod-magnet in ubuntu gutsy.

No description available for lighttpd-mod-magnet in ubuntu gutsy.

lighttpd-mod-mysql-vhost: No summary available for lighttpd-mod-mysql-vhost in ubuntu gutsy.

No description available for lighttpd-mod-mysql-vhost in ubuntu gutsy.

lighttpd-mod-trigger-b4-dl: No summary available for lighttpd-mod-trigger-b4-dl in ubuntu gutsy.

No description available for lighttpd-mod-trigger-b4-dl in ubuntu gutsy.

lighttpd-mod-webdav: No summary available for lighttpd-mod-webdav in ubuntu gutsy.

No description available for lighttpd-mod-webdav in ubuntu gutsy.