-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Jan 2022 08:38:09 +0100 Source: lighttpd Architecture: source Version: 1.4.59-1+deb11u1 Distribution: bullseye-security Urgency: medium Maintainer: Debian lighttpd maintainers <team+lighttpd@tracker.debian.org> Changed-By: Helmut Grohne <helmut.grohne@intenta.de> Changes: lighttpd (1.4.59-1+deb11u1) bullseye-security; urgency=medium . [ Glenn Strauss ] * Fix CVE-2022-22707 32-bit lighttpd mod_extforward crash. Checksums-Sha1: 3dcd6db2d77d69b67df205cd5acc183a91e9235c 4392 lighttpd_1.4.59-1+deb11u1.dsc f954a4a2513c97e55e4f39a7648f23c7b28a15d9 968352 lighttpd_1.4.59.orig.tar.xz 745cb1156bb6a6d3996d53fe367b46739b7dc0f9 833 lighttpd_1.4.59.orig.tar.xz.asc 940ab15d0c7087724868ebb2924dd33e81a9ab55 49620 lighttpd_1.4.59-1+deb11u1.debian.tar.xz a4ae8c3dac2b2916433cb1712cc6efe65ba6f00b 21365 lighttpd_1.4.59-1+deb11u1_amd64.buildinfo Checksums-Sha256: fd5416378ee62fdfde99be8adb48d9e265dec162efa50c122b5390fe9f40a29a 4392 lighttpd_1.4.59-1+deb11u1.dsc fb953db273daef08edb6e202556cae8a3d07eed6081c96bd9903db957d1084d5 968352 lighttpd_1.4.59.orig.tar.xz a50c647fb414433131fb24b85848a9d9d972933e897e1b8f6deeb65eae8fc971 833 lighttpd_1.4.59.orig.tar.xz.asc ec07e4e1ea21e8234e613e76c8633e1edaa0c2686d97cf952897670c12353e79 49620 lighttpd_1.4.59-1+deb11u1.debian.tar.xz dcce2e48f654ec21597f7ca9fcdcaf586e611a62f5f89b58214626b5077df079 21365 lighttpd_1.4.59-1+deb11u1_amd64.buildinfo Files: 66d0b4a11cffba2df9636d19302f93da 4392 httpd optional lighttpd_1.4.59-1+deb11u1.dsc a8838dac90fcddbcc05c0d1877bd8cdf 968352 httpd optional lighttpd_1.4.59.orig.tar.xz fe6eb2cb99c0110cbbaf823fef16c634 833 httpd optional lighttpd_1.4.59.orig.tar.xz.asc 57185b9cf476aa9abba397814d7bbbbb 49620 httpd optional lighttpd_1.4.59-1+deb11u1.debian.tar.xz 55afa9c6fbe0e740ba6dae139981c0c7 21365 httpd optional lighttpd_1.4.59-1+deb11u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETMLS2QqNFlTb+HOqLRqqzyREREIFAmHdSyMACgkQLRqqzyRE REJwRA/7Bsz5QRW+P/87JcOCugZLLkgIYY+Y8xUvKW1sTxaS58K5rBhkyRaFu0Li XsFvfIcKUAtBCmlHN/Lx8dwYTg7ZJ8psw3gceclHbouRoSvGUmjE3phfqXWYssAL VpA+WmYcNcpXeq7ajMiP7RxZqF+Rx1gig8ON5xyLbwlf/vUfRgexhU3a3V8LvAOM bsUKqPg/teLHHzzlroV3EF3Yu8QpAHgQlI2xVsvMQCmumScm+Z6Kl5P5zy87pF7f qmO1h6YLEkwcHLgiODcV/Sh/2fgzOt0gnYT9mlGDBdem+GH44BQ9Fk74bkq5Z5Bk YISb8if6dPjWQo3nkmfPbKGIVive5lVJ8/CFzyYRgzWfMTV2hcQpxq13JquQzUtV f+5Qzdo/7mugOUfBVaZkzhy2xgIKCslr65uDd5wlRI4vWWoO1t0bzyF3h/PSvrA9 fcFLn5KqbFghGH/fABvpLTEpE0TrXbI0OIAiSJ/6RCt3YvM+i4PxjiS9ubgast4B wwM0NzIEHNmJHPpveweHTJbLWwRVvi8l3u8sB65TQzGr+hpczjs/eNXlxgXCyO1A rS/OpiwEhEsqEeyeioOZCKZP/NV+8s8EeLjNeRey/+J4kMm2/4rCBnHo9FqMO+ay fDYxfTuZdEQiV2dP2O38Z3RU1p2uivmVKTyKQ1KqWruv5q5umE0= =qENn -----END PGP SIGNATURE-----