Format: 1.8 Date: Mon, 13 Feb 2023 21:33:26 -0600 Source: lighttpd Binary: lighttpd lighttpd-mod-authn-gssapi lighttpd-mod-authn-pam lighttpd-mod-authn-sasl lighttpd-mod-deflate lighttpd-mod-geoip lighttpd-mod-maxminddb lighttpd-mod-mbedtls lighttpd-mod-nss lighttpd-mod-openssl lighttpd-mod-trigger-b4-dl lighttpd-mod-vhostdb-pgsql lighttpd-mod-webdav lighttpd-mod-wolfssl lighttpd-modules-dbi lighttpd-modules-ldap lighttpd-modules-lua lighttpd-modules-mysql Built-For-Profiles: noudeb Architecture: arm64 Version: 1.4.63-1ubuntu3.1 Distribution: jammy Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Jack Fewx Description: lighttpd - fast webserver with minimal memory footprint lighttpd-mod-authn-gssapi - GSSAPI authentication module for lighttpd lighttpd-mod-authn-pam - PAM authentication module for lighttpd lighttpd-mod-authn-sasl - SASL authentication module for lighttpd lighttpd-mod-deflate - HTTP response compression module for lighttpd lighttpd-mod-geoip - GeoIP info module for lighttpd lighttpd-mod-maxminddb - GeoIP2 info module for lighttpd lighttpd-mod-mbedtls - TLS support using mbedTLS module for lighttpd lighttpd-mod-nss - TLS support using NSS crypto module for lighttpd lighttpd-mod-openssl - TLS support using OpenSSL module for lighttpd lighttpd-mod-trigger-b4-dl - anti-deep-linking module for lighttpd lighttpd-mod-vhostdb-pgsql - PostgreSQL-based virtual host configuration module for lighttpd lighttpd-mod-webdav - WebDAV module for lighttpd lighttpd-mod-wolfssl - TLS support using wolfSSL module for lighttpd lighttpd-modules-dbi - DBI-based modules for lighttpd lighttpd-modules-ldap - LDAP-based modules for lighttpd lighttpd-modules-lua - LUA-based modules for lighttpd lighttpd-modules-mysql - MySQL-based modules for lighttpd Launchpad-Bugs-Fixed: 1994989 Changes: lighttpd (1.4.63-1ubuntu3.1) jammy-security; urgency=medium . * SECURITY UPDATE: Out-of-bounds Write - debian/patches/CVE-2022-22707.patch: mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow. (LP: #1994989) - CVE-2022-22707 * SECURITY UPDATE: Resource leak - debian/patches/CVE-2022-41556.patch: Resource leak in gw_backend.c. - CVE-2022-41556 Checksums-Sha1: 105b77f0b3041492d595a8a3ada410daeb3cf2a8 1022336 lighttpd-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 58a1c38282e55c11f3e1ccecdb75fd71cb7bdec4 27686 lighttpd-mod-authn-gssapi-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 55759f2dd70f9f98192a224841820092f333d61d 8222 lighttpd-mod-authn-gssapi_1.4.63-1ubuntu3.1_arm64.deb 988422759cf6f81e580e6fe8058d2f253fce12d0 14694 lighttpd-mod-authn-pam-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 9d8a36fe2ad589286c810fef3ac589fd0b70e7a8 3690 lighttpd-mod-authn-pam_1.4.63-1ubuntu3.1_arm64.deb a1faa85ad7ab284f9370b4d2a162138d2abcddff 16794 lighttpd-mod-authn-sasl-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 62edebfdea2821648a6e40cf474102f84841a70a 4496 lighttpd-mod-authn-sasl_1.4.63-1ubuntu3.1_arm64.deb a2664af700cb5f8c65f9794049da2ef6a13b3951 33356 lighttpd-mod-deflate-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 4f5300270fe0a79562f7fb0e8c38790f7d4fa880 11064 lighttpd-mod-deflate_1.4.63-1ubuntu3.1_arm64.deb 63830bcc80eb55c3dffe4c02fb55f7dede59790c 16134 lighttpd-mod-geoip-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 970959d82978e57b763f740a7424acdf0943a153 4502 lighttpd-mod-geoip_1.4.63-1ubuntu3.1_arm64.deb 0c43492d61d7b2f8f459bcd825128ff87444624f 18580 lighttpd-mod-maxminddb-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 293d88e05feb3f77ed741f4ebe9b42093074383d 5076 lighttpd-mod-maxminddb_1.4.63-1ubuntu3.1_arm64.deb 7fd404a17bf23ca077ebb2b924836f03daa709c7 60048 lighttpd-mod-mbedtls-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 542244d72d011fca825df78c6a87a6ad7ecdc5cd 21770 lighttpd-mod-mbedtls_1.4.63-1ubuntu3.1_arm64.deb aa1995e6bb1ca1dbc342e57451eb9e72be077f1d 63018 lighttpd-mod-nss-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 3e8b36d6898fd5e37c2a5383eba3b9953731625a 22834 lighttpd-mod-nss_1.4.63-1ubuntu3.1_arm64.deb cfa476427f12146aff81a56a688bf17212520833 51464 lighttpd-mod-openssl-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 762c53a4d45ffff65908ecb2795b99b99f7c8313 20490 lighttpd-mod-openssl_1.4.63-1ubuntu3.1_arm64.deb e25b97be13ad0c64e16ea6833a7fb78c3f17cafc 23082 lighttpd-mod-trigger-b4-dl-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 66981e1768efc72d5d6290d95c35bfca597b7264 6502 lighttpd-mod-trigger-b4-dl_1.4.63-1ubuntu3.1_arm64.deb 2aac30ab3084a310ffb8679ac43e2400f1974b4e 16068 lighttpd-mod-vhostdb-pgsql-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 5ee53752008754ebd5f6b1033164870318333af2 4360 lighttpd-mod-vhostdb-pgsql_1.4.63-1ubuntu3.1_arm64.deb 4986d7b453f57bab0237f778b7840381437e70a8 87028 lighttpd-mod-webdav-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb af643cac7243254bde58ba7ab8c84e03f7adbb79 27934 lighttpd-mod-webdav_1.4.63-1ubuntu3.1_arm64.deb 6c524ec07d019bbe3505fb852d375e41e0927789 66724 lighttpd-mod-wolfssl-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 65f4d2fcb07b2fc4f57fea2f5e2dab19436ad63e 21628 lighttpd-mod-wolfssl_1.4.63-1ubuntu3.1_arm64.deb 2076a69508d78e4af367d276c697d08304142db9 34658 lighttpd-modules-dbi-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 4c1810ea75df625852491213555e0ca7f5bcf845 8088 lighttpd-modules-dbi_1.4.63-1ubuntu3.1_arm64.deb b2532a65105dec8f42226244c0282510b336c24c 42664 lighttpd-modules-ldap-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb ddfdf22643c78a450b698bb842c30ff1972a5045 10740 lighttpd-modules-ldap_1.4.63-1ubuntu3.1_arm64.deb 385b096d505a8211b24988133ecdae4fda12599f 93000 lighttpd-modules-lua-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 9dc7ab7d039b0c60619b8b861f568dd4a97bc40f 27082 lighttpd-modules-lua_1.4.63-1ubuntu3.1_arm64.deb 4f5d38fcd9d94b13d0037952682561011847221a 48116 lighttpd-modules-mysql-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb de71142c785e9be7e52a15305d5716e9d58052b7 10536 lighttpd-modules-mysql_1.4.63-1ubuntu3.1_arm64.deb d44229bee751413238823576ac9abfbb739175b4 20686 lighttpd_1.4.63-1ubuntu3.1_arm64.buildinfo 2ea4fdb9f0ddfe8afe7ea128799afb0e38435f14 381334 lighttpd_1.4.63-1ubuntu3.1_arm64.deb Checksums-Sha256: 3d0ece86b91063d96d7dd6583da812a1e9965a36e37a7e2af7244b549a8bd092 1022336 lighttpd-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb bb1aba9f922641740edb4eb208cdedd37755c402be65b1e545938e09e32256c5 27686 lighttpd-mod-authn-gssapi-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 50b63ef8c5888fde64cd254ffc098baa03890c8b99af0f1f297d95ee914c1209 8222 lighttpd-mod-authn-gssapi_1.4.63-1ubuntu3.1_arm64.deb a053c385742a7617cececd48b1ec06d99e54407073bddade52360dfdbdcdd450 14694 lighttpd-mod-authn-pam-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 5a9d151c6343464a6e7492e54641dc23c074b64b76760bed71a5f013d7b6048e 3690 lighttpd-mod-authn-pam_1.4.63-1ubuntu3.1_arm64.deb 16409a2d68780c2e274a55c38d8a419fc1194dd2a5a5daa4d4ecf35e384645d0 16794 lighttpd-mod-authn-sasl-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 295d5ff6dea553efc16b697d1a2864dbf0ded05e1529768265b638eddc440b1b 4496 lighttpd-mod-authn-sasl_1.4.63-1ubuntu3.1_arm64.deb 92b23a7923883a8ba25a244bf26485b4718c6868f051f6e33e808914b87f767a 33356 lighttpd-mod-deflate-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 15871e710dfe745e6e599424b050aef3ead4a23f5a5e1bfc21c7a97224c4f0ef 11064 lighttpd-mod-deflate_1.4.63-1ubuntu3.1_arm64.deb d46d95582eed862dfd3debee55d065d9251cd93063539b0effc2824c02f8a647 16134 lighttpd-mod-geoip-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb d8c19d8ebe06fdad200462d1fb3e6c124a691d30b6a5feded044ab893a35c976 4502 lighttpd-mod-geoip_1.4.63-1ubuntu3.1_arm64.deb 70773d57dd017cf0f2c6b6eba5e27dbbd69675642619d052ece7f6b2eb6b177c 18580 lighttpd-mod-maxminddb-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb b28d5d8df615d24dd3d8f00a446ef3c77a17571c44e2f8d6900dd95e7d5b23b2 5076 lighttpd-mod-maxminddb_1.4.63-1ubuntu3.1_arm64.deb 6810c546aab4e4dd693e4e392c78ed0752293822681f09b27688173cd58ed0fa 60048 lighttpd-mod-mbedtls-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 378b26b35d513f5eeb06835a2a68ae02e74b9de780c643d161873a33646f607d 21770 lighttpd-mod-mbedtls_1.4.63-1ubuntu3.1_arm64.deb f4748cae1f0fc903b04904b3d18823bb4dfbd36318701be769b81d73a0e209e1 63018 lighttpd-mod-nss-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 6b007a2f06956e598b64303e119061a92095fc8e7a91782a83363980081f1511 22834 lighttpd-mod-nss_1.4.63-1ubuntu3.1_arm64.deb 3b5595e7ca3113fd48a38f2c9ade271eb07229d8551e0f236ee125e4542b9905 51464 lighttpd-mod-openssl-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb f05dda679634f13af12e1e8aa02da0af668329c92bc0317f09f6232c807fa8d0 20490 lighttpd-mod-openssl_1.4.63-1ubuntu3.1_arm64.deb 8c84da2c003cadc569a48a6ab65f304d0e082230d8bcd93b0ff128b0f02ec0da 23082 lighttpd-mod-trigger-b4-dl-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 8b816533c69b7109c4e2fd21eb26ced6186968edf0cc44eca667388a1edd0c31 6502 lighttpd-mod-trigger-b4-dl_1.4.63-1ubuntu3.1_arm64.deb 8515650d2c9375c92e1dba35be13741663a591f5d76d537880324593ce86f733 16068 lighttpd-mod-vhostdb-pgsql-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 21cdbe0b2da6f92518d19b93e29f7d6fb4369cfa2af333cf8af11938985002c4 4360 lighttpd-mod-vhostdb-pgsql_1.4.63-1ubuntu3.1_arm64.deb ac4fd348c005b9209a23d9247ffd5b05e08d94eb17bc5107a59bb0a674f5acc2 87028 lighttpd-mod-webdav-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb c9110b7a2b1e6d90d503eafc743edcd565e201cae222a63e498af241a14493f7 27934 lighttpd-mod-webdav_1.4.63-1ubuntu3.1_arm64.deb 1f33c5109bb73da6131b75089dabc7ed8ef14be06a65dd2a8df1d7022553278b 66724 lighttpd-mod-wolfssl-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 378a741e704d61bd2dbc22a0943bcc95a1f76156dba2324d830416a2bd4bb8f0 21628 lighttpd-mod-wolfssl_1.4.63-1ubuntu3.1_arm64.deb ab85208fb15198cec6e1000030e38f14828103e763f538c16b9c6beb08cf13e0 34658 lighttpd-modules-dbi-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 023eb4310b3c6871d679965708875b0defa7c41248a7ebd013ab11268587db62 8088 lighttpd-modules-dbi_1.4.63-1ubuntu3.1_arm64.deb 793a964ec26fd6f48815e632e5e826d73dc7ef4b69ea095d568c85f7082697f9 42664 lighttpd-modules-ldap-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb b27654daf1b636e82fbe9e878aac812e3fad5d0735c95a23e72d2ac2cec4ff67 10740 lighttpd-modules-ldap_1.4.63-1ubuntu3.1_arm64.deb ddc3ffdd116b473d947577b7ed696ac057ee87edc20c18c4baf5a2de3c117dfa 93000 lighttpd-modules-lua-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb da4796125cbe2acdb82f3ba5e848c8b4bcf6f2d2b619347e37b38527946fef33 27082 lighttpd-modules-lua_1.4.63-1ubuntu3.1_arm64.deb 9e57dfc90c8273a0dbc899417633c35e54c8e133753e853854fb0bf25d7c89d3 48116 lighttpd-modules-mysql-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 29bab6acb724497e09a7cffa6538ac3e6d9a6a5aa59b161a92b3e3b0af4d46f2 10536 lighttpd-modules-mysql_1.4.63-1ubuntu3.1_arm64.deb 739568d1565f1fc733b7fc2340a6441fd5f896b854fa2ddd94f27a2e0692c2cc 20686 lighttpd_1.4.63-1ubuntu3.1_arm64.buildinfo 1d9f29330716d54089add850956723126ada72f4d3fe0585919f1cfd756fbef8 381334 lighttpd_1.4.63-1ubuntu3.1_arm64.deb Files: d14f1473629a6d18c69ad89caab0f25c 1022336 debug optional lighttpd-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 9c0add41dcab069fb19452241ba81da8 27686 debug optional lighttpd-mod-authn-gssapi-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb e1ac0bff2d03d534f1ee3854971c5a3e 8222 httpd optional lighttpd-mod-authn-gssapi_1.4.63-1ubuntu3.1_arm64.deb 0795988223996d94f881787958d06beb 14694 debug optional lighttpd-mod-authn-pam-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 24eafc5342cbb7f12fc5285301828b4b 3690 httpd optional lighttpd-mod-authn-pam_1.4.63-1ubuntu3.1_arm64.deb 8f5959a63e56f6febc3a73c7c3ac1a91 16794 debug optional lighttpd-mod-authn-sasl-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 8cbf471d8e9cdfde5fe109894376842f 4496 httpd optional lighttpd-mod-authn-sasl_1.4.63-1ubuntu3.1_arm64.deb a81046e721debd079666754cdd861bc8 33356 debug optional lighttpd-mod-deflate-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb a5789cd2b2fe2ec5e02655de10ae929b 11064 httpd optional lighttpd-mod-deflate_1.4.63-1ubuntu3.1_arm64.deb 614d2daa1e5e588665efa6781659e3ed 16134 debug optional lighttpd-mod-geoip-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb aa3f8f41c65ef3fec3eb58559a8076d8 4502 httpd optional lighttpd-mod-geoip_1.4.63-1ubuntu3.1_arm64.deb e11bab29d9c273543b29ab9bf4e14462 18580 debug optional lighttpd-mod-maxminddb-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb e4ac7112b29535ad8754fb87dcf3124a 5076 httpd optional lighttpd-mod-maxminddb_1.4.63-1ubuntu3.1_arm64.deb bdf6038f00e6a10eb6a8d1e79dc41d97 60048 debug optional lighttpd-mod-mbedtls-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 2abd5ec0aecb2833c7c5ef1d7a6e137b 21770 httpd optional lighttpd-mod-mbedtls_1.4.63-1ubuntu3.1_arm64.deb b1eabc877c045b834c9800e1eb39299a 63018 debug optional lighttpd-mod-nss-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 5dd931dfb479e8555ce6e87fb17486df 22834 httpd optional lighttpd-mod-nss_1.4.63-1ubuntu3.1_arm64.deb 9102f02148724ca4bfbf9591a2b5c03a 51464 debug optional lighttpd-mod-openssl-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb cc4626a4e8735ca926f82e5d7ed68850 20490 httpd optional lighttpd-mod-openssl_1.4.63-1ubuntu3.1_arm64.deb 0c97dadb643eb4ca0fc239b46c2c78df 23082 debug optional lighttpd-mod-trigger-b4-dl-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 7b0467bf18e6b9f8d0da15f8542b21b9 6502 httpd optional lighttpd-mod-trigger-b4-dl_1.4.63-1ubuntu3.1_arm64.deb 1b9954fa539f894e73ddfb3faadbdd84 16068 debug optional lighttpd-mod-vhostdb-pgsql-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 322b477266fb4c7f751d2a8c8d5535bb 4360 httpd optional lighttpd-mod-vhostdb-pgsql_1.4.63-1ubuntu3.1_arm64.deb 87fc731f3b8d6b8d2444004b36dec2b3 87028 debug optional lighttpd-mod-webdav-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 3a213cee189aad8d1b062c3779464d1b 27934 httpd optional lighttpd-mod-webdav_1.4.63-1ubuntu3.1_arm64.deb 7fd7af6f9882f0fa574430d41db65a61 66724 debug optional lighttpd-mod-wolfssl-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 8d1a956c9de78c6d550a4f480483f7c3 21628 httpd optional lighttpd-mod-wolfssl_1.4.63-1ubuntu3.1_arm64.deb 1b2476249dfc8124df932b7396a5dc93 34658 debug optional lighttpd-modules-dbi-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 692b761f8e201d580429882272bb8391 8088 httpd optional lighttpd-modules-dbi_1.4.63-1ubuntu3.1_arm64.deb 1a8b2e678eb6743e31e3abe902791619 42664 debug optional lighttpd-modules-ldap-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb bf5fc2adec13054e06bbfb5ec8f16f1d 10740 httpd optional lighttpd-modules-ldap_1.4.63-1ubuntu3.1_arm64.deb 62ef26a42c57dca635b01e4543e00d22 93000 debug optional lighttpd-modules-lua-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 8e999affaea136b70212028d5080db51 27082 httpd optional lighttpd-modules-lua_1.4.63-1ubuntu3.1_arm64.deb d4ef9573f3a440a1365902559fdb04d7 48116 debug optional lighttpd-modules-mysql-dbgsym_1.4.63-1ubuntu3.1_arm64.ddeb 9c91ff9064de1f30622547d14337dadc 10536 httpd optional lighttpd-modules-mysql_1.4.63-1ubuntu3.1_arm64.deb bb70e3d135ab915bc520cd4feab7b65b 20686 httpd optional lighttpd_1.4.63-1ubuntu3.1_arm64.buildinfo 816ffd0cc08f4bbf4332a07d442b32ac 381334 httpd optional lighttpd_1.4.63-1ubuntu3.1_arm64.deb Original-Maintainer: Debian lighttpd maintainers