Your message dated Wed, 27 Feb 2008 16:17:06 +0000 with message-id <[EMAIL PROTECTED]> and subject line Bug#466663: fixed in lighttpd 1.4.18-2 has caused the Debian Bug report #466663, regarding lighttpd: remote denial of service to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [EMAIL PROTECTED] immediately.) -- 466663: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466663 Debian Bug Tracking System Contact [EMAIL PROTECTED] with problems
--- Begin Message ---Package: lighttpd Version: 1.4.13-4etch4 Severity: important Hi, Lighttpd crashed with this strace: ioctl(982, FIONREAD, [0]) = 0 read(982, 0x8649ed0, 1471) = -1 EAGAIN (Resource temporarily unavailable) time(NULL) = 1203496074 poll([{fd=4, events=POLLIN}, {fd=6, events=POLLOUT}, {fd=7, events=POLLOUT}, {fd=8, events=POLLOUT}, {fd=9, events=POLLOUT}, {fd=10, events=POLLOUT}, {fd=16, events=POLLOUT}, {fd=18, events=POLLOUT}, {fd=20, events=POLLOUT}, {fd=22, events=POLLOUT}, {fd=24, events=POLLOUT}, {fd=26, events=POLLOUT}, {fd=28, events=POLLOUT}, {fd=30, events=POLLOUT}, {fd=32, events=POLLOUT}, {fd=34, events=POLLOUT}, {fd=36, events=POLLOUT}, {fd=38, events=POLLOUT}, {fd=40, events=POLLOUT}, {fd=41, events=POLLOUT}, {fd=44, events=POLLOUT}, {fd=46, events=POLLOUT}, {fd=48, events=POLLOUT}, {fd=50, events=POLLOUT}, {fd=52, events=POLLOUT}, {fd=190, events=POLLOUT}, {fd=56, events=POLLOUT}, {fd=124, events=POLLOUT}, {fd=58, events=POLLOUT}, {fd=60, events=POLLOUT}, {fd=62, events=POLLOUT}, {fd=64, events=POLLOUT}, ...], 530, 1000) = 1 write(2, "fdevent.c.171: aborted\n", 23) = 23 rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0 tgkill(19774, 19774, SIGABRT) = 0 --- SIGABRT (Aborted) @ 0 (0) --- Process 19774 detached It looks familiar, I think this has been fixed upstream. -- System Information: Debian Release: 4.0 APT prefers stable APT policy: (500, 'stable'), (1, 'testing') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-6-686 Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Versions of packages lighttpd depends on: ii libattr1 2.4.32-1 Extended attribute shared library ii libbz2-1.0 1.0.3-6 high-quality block-sorting file co ii libc6 2.3.6.ds1-13etch5 GNU C Library: Shared libraries ii libldap2 2.1.30-13.3 OpenLDAP libraries ii libpcre3 6.7+7.4-3 Perl 5 Compatible Regular Expressi ii libssl0.9.8 0.9.8c-4etch1 SSL shared libraries ii lsb-base 3.1-23.2etch1 Linux Standard Base 3.1 init scrip ii mime-support 3.39-1 MIME files 'mime.types' & 'mailcap ii zlib1g 1:1.2.3-13 compression library - runtime Versions of packages lighttpd recommends: ii php5-cgi 5.2.0-8+etch10 server-side, HTML-embedded scripti -- no debconf information
--- End Message ---
--- Begin Message ---Source: lighttpd Source-Version: 1.4.18-2 We believe that the bug you reported is fixed in the latest version of lighttpd, which is due to be installed in the Debian FTP archive: lighttpd-doc_1.4.18-2_all.deb to pool/main/l/lighttpd/lighttpd-doc_1.4.18-2_all.deb lighttpd-mod-cml_1.4.18-2_amd64.deb to pool/main/l/lighttpd/lighttpd-mod-cml_1.4.18-2_amd64.deb lighttpd-mod-magnet_1.4.18-2_amd64.deb to pool/main/l/lighttpd/lighttpd-mod-magnet_1.4.18-2_amd64.deb lighttpd-mod-mysql-vhost_1.4.18-2_amd64.deb to pool/main/l/lighttpd/lighttpd-mod-mysql-vhost_1.4.18-2_amd64.deb lighttpd-mod-trigger-b4-dl_1.4.18-2_amd64.deb to pool/main/l/lighttpd/lighttpd-mod-trigger-b4-dl_1.4.18-2_amd64.deb lighttpd-mod-webdav_1.4.18-2_amd64.deb to pool/main/l/lighttpd/lighttpd-mod-webdav_1.4.18-2_amd64.deb lighttpd_1.4.18-2.dsc to pool/main/l/lighttpd/lighttpd_1.4.18-2.dsc lighttpd_1.4.18-2.tar.gz to pool/main/l/lighttpd/lighttpd_1.4.18-2.tar.gz lighttpd_1.4.18-2_amd64.deb to pool/main/l/lighttpd/lighttpd_1.4.18-2_amd64.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Pierre Habouzit <[EMAIL PROTECTED]> (supplier of updated lighttpd package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [EMAIL PROTECTED]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Wed, 27 Feb 2008 16:56:16 +0100 Source: lighttpd Binary: lighttpd lighttpd-doc lighttpd-mod-mysql-vhost lighttpd-mod-trigger-b4-dl lighttpd-mod-cml lighttpd-mod-magnet lighttpd-mod-webdav Architecture: source all amd64 Version: 1.4.18-2 Distribution: unstable Urgency: high Maintainer: Debian lighttpd maintainers <[EMAIL PROTECTED]> Changed-By: Pierre Habouzit <[EMAIL PROTECTED]> Description: lighttpd - A fast webserver with minimal memory footprint lighttpd-doc - Documentation for lighttpd lighttpd-mod-cml - Cache meta language module for lighttpd lighttpd-mod-magnet - Control the request handling module for lighttpd lighttpd-mod-mysql-vhost - MySQL-based virtual host configuration for lighttpd lighttpd-mod-trigger-b4-dl - Anti-deep-linking module for lighttpd lighttpd-mod-webdav - WebDAV module for lighttpd Closes: 466663 Changes: lighttpd (1.4.18-2) unstable; urgency=high . * Move the aliases on /doc/ and /images/ mandated by policy at the end to circumvent #445459. * Add patches/05_fdevent_fix.dpatch to fix possible remote DoS (Closes: 466663). * bump urgency for security fix. Files: 160e5cde7277dbb395f1f76bc72f71ce 1185 web optional lighttpd_1.4.18-2.dsc 0641fe0ccf609a7caa56845de3f9b923 845192 web optional lighttpd_1.4.18-2.tar.gz a641cc9c7f970ca7e20ad051d52ae3fb 101896 doc optional lighttpd-doc_1.4.18-2_all.deb 6893182edf8484c2be680b67c44ad472 314838 web optional lighttpd_1.4.18-2_amd64.deb 9a34e099a3f2724eb664554b0830256a 62916 web optional lighttpd-mod-mysql-vhost_1.4.18-2_amd64.deb caead3bfc9562a7216fb22b1a3413a59 64604 web optional lighttpd-mod-trigger-b4-dl_1.4.18-2_amd64.deb 685763ddd5d565da306be2dcabca3f93 68070 web optional lighttpd-mod-cml_1.4.18-2_amd64.deb be2e09b0d00b9008cecadac4cd0915e6 67730 web optional lighttpd-mod-magnet_1.4.18-2_amd64.deb 20119e48af0703a893543e2ee946ec1b 74806 web optional lighttpd-mod-webdav_1.4.18-2_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFHxYjtvGr7W6HudhwRAmcPAJ4guEYlUwMWPsn1a1EsYk9kS2HNqgCePcZ0 uk1ZIPxU9x/z73rZU3BGISk= =Wz6x -----END PGP SIGNATURE-----
--- End Message ---
