Accepted lighttpd 1.4.31-4+deb7u3 (source amd64 all)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 13 Mar 2014 02:03:42 +0000
Source: lighttpd
Binary: lighttpd lighttpd-doc lighttpd-mod-mysql-vhost lighttpd-mod-trigger-b4-dl lighttpd-mod-cml lighttpd-mod-magnet lighttpd-mod-webdav
Architecture: source amd64 all
Version: 1.4.31-4+deb7u3
Distribution: stable-security
Urgency: high
Maintainer: Debian lighttpd maintainers <pkg-lighttpd-maintainers@lists.alioth.debian.org>
Changed-By: Michael Gilbert <mgilbert@debian.org>
Description:
lighttpd - fast webserver with minimal memory footprint
lighttpd-doc - documentation for lighttpd
lighttpd-mod-cml - cache meta language module for lighttpd
lighttpd-mod-magnet - control the request handling module for lighttpd
lighttpd-mod-mysql-vhost - MySQL-based virtual host configuration for lighttpd
lighttpd-mod-trigger-b4-dl - anti-deep-linking module for lighttpd
lighttpd-mod-webdav - WebDAV module for lighttpd
Changes:
lighttpd (1.4.31-4+deb7u3) stable-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Fix cve-2014-2323: mod_mysql_vhost SQL injection.
* Fix cve-2014-2324: traversal through paths involving "[...]".
Checksums-Sha1:
fe12f9fe294fe40970efc4213b505d220fcab05d 3365 lighttpd_1.4.31-4+deb7u3.dsc
5a69704d112b1b0a17aa27054a5ed319ac50bd5c 33680 lighttpd_1.4.31-4+deb7u3.debian.tar.gz
e60634a7725cf3fd24e7a215137925505f4b2434 305216 lighttpd_1.4.31-4+deb7u3_amd64.deb
7ecffe931a0d2c5231b8964ed71c4278d89b3df4 64044 lighttpd-doc_1.4.31-4+deb7u3_all.deb
7bf04c10f417e8ca62651dfe6c3d5cc31694685e 20452 lighttpd-mod-mysql-vhost_1.4.31-4+deb7u3_amd64.deb
30022894e2547f2599184f6522ebecba06393431 21898 lighttpd-mod-trigger-b4-dl_1.4.31-4+deb7u3_amd64.deb
d0e5be82b989de86bafe2dd86d913dd5e5956395 25172 lighttpd-mod-cml_1.4.31-4+deb7u3_amd64.deb
6a47cd9834b5a345375acb9154863017229ce214 26362 lighttpd-mod-magnet_1.4.31-4+deb7u3_amd64.deb
cd306f550da014aa73bf18676a36b31c7a62b114 32688 lighttpd-mod-webdav_1.4.31-4+deb7u3_amd64.deb
Checksums-Sha256:
42754dd5acf0c9bc0d9dfc02db628802603bd3cc429dc1861a7da1cd3b478fd4 3365 lighttpd_1.4.31-4+deb7u3.dsc
4fdce2ce8fc6626080563dcc1ab1c4f3281743bf011e4d71ee5e0a5b3445fbf4 33680 lighttpd_1.4.31-4+deb7u3.debian.tar.gz
f184fa68f0a329d22d6638c8cc666f6b1037ba4c12eeb1e51f0ccc18d693e0b9 305216 lighttpd_1.4.31-4+deb7u3_amd64.deb
1f225e3334e37a7fad06826e7b1e9a59159ab3fa9ad89fec580f63e7c3e1fac5 64044 lighttpd-doc_1.4.31-4+deb7u3_all.deb
d0d840698a3173b9d8335b3efeef2ad9439569027e6794dc42cbaf87e999759a 20452 lighttpd-mod-mysql-vhost_1.4.31-4+deb7u3_amd64.deb
568f76806640f4a5aa45c88be47f9515dac28d7aa63782606335bc77677dd130 21898 lighttpd-mod-trigger-b4-dl_1.4.31-4+deb7u3_amd64.deb
793cf1695ed563fa2f7db9fa23aba798f2cc0abe152507163cfcf0d910507238 25172 lighttpd-mod-cml_1.4.31-4+deb7u3_amd64.deb
87ab1f52431de581816a10a22c8c24b8dc1e0194f1d0a8e16276a25110133b1f 26362 lighttpd-mod-magnet_1.4.31-4+deb7u3_amd64.deb
7bd3cbd19d2e30a64624ab82fa6e257a11e4176213efc6d5e10f5242bcff2710 32688 lighttpd-mod-webdav_1.4.31-4+deb7u3_amd64.deb
Files:
7c491f94e5207ffa5f6178b1906c0e21 3365 httpd optional lighttpd_1.4.31-4+deb7u3.dsc
04253d05a7d0aa6738687aa34743c3bd 33680 httpd optional lighttpd_1.4.31-4+deb7u3.debian.tar.gz
ceac4baee81d403656e68a3f09879cca 305216 httpd optional lighttpd_1.4.31-4+deb7u3_amd64.deb
ebdde45bf1e636288dea5ffe7d2fc404 64044 doc optional lighttpd-doc_1.4.31-4+deb7u3_all.deb
7608f90a7e4a6db666978e6d6dce26d1 20452 httpd optional lighttpd-mod-mysql-vhost_1.4.31-4+deb7u3_amd64.deb
cfa5a247e14f890af90805e7554a1264 21898 httpd optional lighttpd-mod-trigger-b4-dl_1.4.31-4+deb7u3_amd64.deb
ce62215d8a4846a49ab5a7267021504b 25172 httpd optional lighttpd-mod-cml_1.4.31-4+deb7u3_amd64.deb
632b2f85a6a0b0f18634e79485b799a8 26362 httpd optional lighttpd-mod-magnet_1.4.31-4+deb7u3_amd64.deb
eec3df13a886ae0e890c179ffe68de3c 32688 httpd optional lighttpd-mod-webdav_1.4.31-4+deb7u3_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQQcBAEBCgAGBQJTIRWSAAoJELjWss0C1vRzCQIf/0CN/iabXx24dCSZIk/b3DN3
JCr7TS5RJWI0mW+/e+HnVb1GJ70E3FY553GRog3daTnqnyBD7bu83QtPf3O0lqbP
dgKD0h6AmHYY+J9HV74oS9+w//BZn61Fv+DKMlLfDTgqcXlrfMvSOkw1b7dW1v3G
f/vVRz2pJ2OxIa+t+c4IHV7Xj07hej5RYe+AZJseF8A6rbp8MO45mgd+WuYeE5xH
qXGtioWMj2BhDVqs1oFQxGpvRWvolkKCMOSULL/7P0+qz8tBLPXbkvWiwzlbZNvF
zj3TIc0n+WAqJtKP2MZnu/gFs9PMOGaUIPdSl1EE4X+VdKe0fd/u+jzJn2f4qTCw
gulVq/FNn34DFNErdue2IW7zM7RimWGtBXeQzVT+ZsYGo0vPZLT35uMvEznZNq17
h9KwRdD5tdFviS8dQ4pTe9chW1ZHMn85+NifmvDK2sxGw+2hzHkA006dKjmu1pgk
aLZuuq8c+SwO+u0wz6Suzb2g2Rprmzv+w1mziI5+xB82mCAz8mNXqYHgK91Na/v+
iwtdTDiPxT1HOLbZa6SS040RfIb6GG5w6XAaIfsEzFURFXnXYLDwL9Qb578AHJkb
O2sxAeNjdlyLWJmn3dtgQWmi1BtBFb/cOBR7ephby6wD5UISks2pEIJXDuNfY3s/
SmyVpca6dGA3dOIkHP1EhQ5Us316uwM5BUOvvX87SJTuExoP0DAh2b0p/kB7j6j3
tiF9Kp2bRlYDgX+/DcAjg3xefzyEwmisKo9BN4K4Euzh4rYr18BoKw2c3RzZqlri
71z1TWdWXDvVXI2btvpmVZVdcgvQ/LYs3QWEjdfEzpbgj6dqD3duJHm7YaKPnCto
Hltzl573KQhKEtNYjsGd8NYDYmKrwuC9zzHihsv3NyuK+aeMK9ZepTKg5thIoxkq
IMUxEQM4WmqCYpOQvDNMG6m/blN6nAgqlWQgHkdX7nP0igBo4yQFSc34XqG9PCt6
Uy/AQnHz6484WG6qqSyogBkk60HeQY7Lkh6ptMq9vN0GsKQIdE/GfykFE91WPWZ0
5mFfQnhV3Jh5EDdj/VHcQbSQLm44m7APD//gm3pXLOM16ftxLzTFfHu+9rPybfVn
c8WSEI+JTAYnQGBJs1XjNDxTz9nXB2YCs2OpaH0xciOw/GcN+qKI0jnXJEeHKfci
WZlNGc5uoOLRLrB7cqjYyaJMrK55bpMUflhJA4w/JgKqq7QZ1YLKTql6Blc+2q5C
VnTwt1LKweEh/S1faphbS5OGymJMLsy0lYa6XK/qPBFaAg2bsmYGlxoaANoPqfAq
BddnBDSJdH3vBLt5/xexMDbqWwTkYR/64xvaRYBtKrrI5rDg5amJY4L/nLVlFNQ=
=BQo3
-----END PGP SIGNATURE-----