Bug#422254: [pkg-lighttpd] Bug#422254: lighttpd: Security vulnerabilities in Etch version

2007-06-14 Thread Krzysztof Krzyżaniak
Mind Booster Noori wrote: Package: lighttpd Followup-For: Bug #422254 As a matter of fact, these two lighttpd 1.4.13 bugs were fixed in 1.4.14, but that patches added one bug, that was fixed in lighttpd 1.4.15. Since 1.4.15 is already in testing, that release closes this bug. This bug should be

Bug#422254: lighttpd: Security vulnerabilities in Etch version

2007-06-13 Thread Mind Booster Noori
Package: lighttpd Followup-For: Bug #422254 As a matter of fact, these two lighttpd 1.4.13 bugs were fixed in 1.4.14, but that patches added one bug, that was fixed in lighttpd 1.4.15. Since 1.4.15 is already in testing, that release closes this bug. This bug should be closed as a duplicate of bu

Bug#422254: lighttpd: Security vulnerabilities in Etch version

2007-05-04 Thread Jon Vaughan
Package: lighttpd Version: 1.4.13-4 Severity: critical Tags: security patch Justification: root security hole 1.4.13-4 in etch has two security flaws: CVE-2007-1870 CVE-2007-1869 I include a patch against the debian source of 1.4.13-4 with http://www.lighttpd.net/assets/2007/4/13/lighttpd-1.4.x_