-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Jan 2022 08:54:24 +0100 Source: lighttpd Architecture: source Version: 1.4.53-4+deb10u2 Distribution: buster-security Urgency: medium Maintainer: Debian QA Group <packages@qa.debian.org> Changed-By: Helmut Grohne <helmut.grohne@intenta.de> Changes: lighttpd (1.4.53-4+deb10u2) buster-security; urgency=medium . [ Glenn Strauss ] * Fix CVE-2022-22707 32-bit lighttpd mod_extforward crash. Checksums-Sha1: 030f4bbe0fced9435bf6d13c5c3135227518e201 3911 lighttpd_1.4.53-4+deb10u2.dsc 3e3fef1742b3fe5a7ff5f0428620c76d37c075a4 732160 lighttpd_1.4.53.orig.tar.xz 3f521af67f627e4895ffd12eaad9a850db0cf5c1 801 lighttpd_1.4.53.orig.tar.xz.asc 1f4a953d5f890f7a35e073bcd4e91158e9a890d4 58068 lighttpd_1.4.53-4+deb10u2.debian.tar.xz ecb0a8841206d6670f4aa59d9f2e1476bfd757e9 18021 lighttpd_1.4.53-4+deb10u2_amd64.buildinfo Checksums-Sha256: 989e9e9afd467673e842a77c6b3a56ce632925d9939f8662166c7d4b1b5732eb 3911 lighttpd_1.4.53-4+deb10u2.dsc 3bdfce1cf3e9650a556a8c26fb15342c5717c63f530c54693db632b0371dcb78 732160 lighttpd_1.4.53.orig.tar.xz 0b3b8998cbba750fe86a61637b48c157a69de14d4d5aca810a77f941ef5b2f3e 801 lighttpd_1.4.53.orig.tar.xz.asc a1b71d64ce1048d9c7e0ac909fb6bdcdd4fd10c37dfc1896f870ba9570718141 58068 lighttpd_1.4.53-4+deb10u2.debian.tar.xz 5fd6f269ecb8f51939d93544058f2719b1a2403326cbc3a303bf03ba3ac2ad47 18021 lighttpd_1.4.53-4+deb10u2_amd64.buildinfo Files: 17c7faf2e3d73f89f54fa8129655c63b 3911 httpd optional lighttpd_1.4.53-4+deb10u2.dsc f93436d8d400b2b0e26ee4bcc60b9ac7 732160 httpd optional lighttpd_1.4.53.orig.tar.xz 75d05711658c1cf91bdabed39b4496ca 801 httpd optional lighttpd_1.4.53.orig.tar.xz.asc 2e328ce288ee430220aa135dc40959d2 58068 httpd optional lighttpd_1.4.53-4+deb10u2.debian.tar.xz e7e5885021e7c7f98f95ab984d7f2530 18021 httpd optional lighttpd_1.4.53-4+deb10u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETMLS2QqNFlTb+HOqLRqqzyREREIFAmHdTGgACgkQLRqqzyRE REIJcg/+MDQ2qgrVWRhhSE/9SGp5YN5Tp/ZH2yDDHEn7ImkjmoN+ZmPOsS3ur/4E gaQzS7kHRSA7vqQJ28UikWNSp9kSkGxRt7GauAMSfsJ7LQXIwbTCtvhorZMtksfA cHbzpBxm3lS403XaTqE3wOztxRx9aUbRo4S58oI+HiKchyuuurm+CeNkXPfTnP1k 0PwDrsTg7LaPVl8WOYdm/PrFmyRlfHo/3NvMiv8kbzAEKOg6Jly9bUQEBBTjhgao mIOyrs18gB8sCpQ6yqt2ys5PCkP6podlC+fVPjgWPEytP8i5iIgbS2SIygFfvN7H qsjm9uzZbv4mhF9cxSmcMZ4ElT2oWPn3Uhz/o/LgFYC0DPY8/GwZFOgcq49kNypn KppbLeGyHSvkOxH6jK1NQX+dyVjPOhA0JlObIhlZfadumSefWoc45SiJhaZ2SbzW VEszCrqtwB8CmCseTjp3/ifinVFozSLZEkE8GggHRkwsQh+jbITBsvMeaNX7sT4K p4zZV45XMMkBst1MYpRen7UVg6H0Ijh+eQvvxRRLgTZxAnRIXbtQzuyqf0VFnfkF R6mkKU4K3eX9TSRkj7HMHGyM/tWpOEkDCFVQtLNLCNLz6UzdGCnffWIdEBEDAi+2 0gGLtEsH3s9CY3I/lBIsrn60KhJudkeVCnbkqnQkeFBPEIPTSMQ= =/Mnb -----END PGP SIGNATURE-----