-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 29 May 2024 14:09:13 +0200 Source: lighttpd Built-For-Profiles: noudeb Architecture: source Version: 1.4.76-1 Distribution: unstable Urgency: medium Maintainer: Debian lighttpd maintainers <team+lighttpd@tracker.debian.org> Changed-By: Glenn Strauss <gstrauss@gluelogic.com> Changes: lighttpd (1.4.76-1) unstable; urgency=medium . * New upstream version 1.4.76 * Detect VU#421644 HTTP/2 CONTINUATION Flood * Avoid CVE-2024-3094 xz supply chain attack * Patch to fix graceful shutdown timeout * Fix FTBFS Linux on SPARC * Declare compliance with policy 4.7.0 - no changes needed. Checksums-Sha1: b3f9a27dc8caf8c46a09e9c99786c2a214fa8d3d 4055 lighttpd_1.4.76-1.dsc 12355ea48ae9c5fa7fe7c12d026df75744933021 847132 lighttpd_1.4.76.orig.tar.xz 29071a44ff79d5e8f63d6dc227c678d39c852405 833 lighttpd_1.4.76.orig.tar.xz.asc 42dbea0bbbd216081f54679af7c4ee0703ce11a4 46972 lighttpd_1.4.76-1.debian.tar.xz 56cf2a7f8290c5dc6e14a8057c5db7c7883601a6 9874 lighttpd_1.4.76-1_source.buildinfo Checksums-Sha256: 734dc47574c82f8624090d3be72522eba7792a90daa0f0fff4a5be5cd0ba6c24 4055 lighttpd_1.4.76-1.dsc 8cbf4296e373cfd0cedfe9d978760b5b05c58fdc4048b4e2bcaf0a61ac8f5011 847132 lighttpd_1.4.76.orig.tar.xz df94919524b9c47e7349cc66bb401fbcba4f6a7a5377b5fba93885e717e9e429 833 lighttpd_1.4.76.orig.tar.xz.asc 61ca839d44b2940f5e4d2b727a30220e6112c22dfcca53e467e783c9e509e72a 46972 lighttpd_1.4.76-1.debian.tar.xz 3840d2810d8c49c0c2152d7d1495a75437035b3ea477c1bd1bfa961c2d2d13d2 9874 lighttpd_1.4.76-1_source.buildinfo Files: 91b775ff3c6898c8d239c3a013e9c485 4055 httpd optional lighttpd_1.4.76-1.dsc f9018cda389b1aa6dae4c5f962c20825 847132 httpd optional lighttpd_1.4.76.orig.tar.xz 7d7c3fc697e5e0704745db7120af9a68 833 httpd optional lighttpd_1.4.76.orig.tar.xz.asc c00db82a726993f548b58b19706eb2be 46972 httpd optional lighttpd_1.4.76-1.debian.tar.xz 0e92313563934d82d81b2951ecc503bd 9874 httpd optional lighttpd_1.4.76-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEkpeKbhleSSGCX3/w808JdE6fXdkFAmZXHGIACgkQ808JdE6f XdlCzQ/+KWDP2uuz4WrkJHhaU1r6OMjzVN3i3mxBkB/lid7k/l4NsKbaR0HoRpic 2fSO8IC+HYdNh4Lm+oO3u99cuwQQoLPUgPmaDDnnDNZQ8OxrPCGXHsC0b9uE0r94 NnVT4uvxesvsLvI7m6xYtcf2qdKDSsp4cwAoeCZGz8zXJlvyVyXrRNeTAi7cSlC+ YzZBbjGHqgCOC5ihXV+yTAmyXwVygs/axT42C7BqSbuQfj+gAIUjh/5im/5bwJ+8 GPly6nGuoXVS1qI0LOWxrdSGa3SHZsecOtEaBX5z2gtqd8bQKuIuxF5et8J91RJg nGaOChjTMLaXziCo/24n/J5hrCcDdFhmo/cLGbccPhS3YxiClYTzlcCT4sGfKnEP eZZ434JUCd64WxU5KQRfdj77MuX/PfXRMyyhvYS2byi8eVKQss6JdTIFbT1hydSK 7KYKYv1xkNk5NDBVoPRanSdmWjk1Wk0FdZ3SUXP/0+5ZKziO9j9R9Cn7WPyhXCiS uLmfs6cepmE9HCewf9VCrVgG4m7e7kOlPsQ4eDKtBpvv4g7/ej9HtQExFGu355mr x4P0OVLYUKo/Zu+63mzbsQ0bvkg0maCZ8DFJHrUeGAnyjJL5RlLWmeLAjeh90hvX b13jviW7xLN0AqRo1igE1oaSQOPRwANabnusHtWQS5UlXVxl2R4= =KFTA -----END PGP SIGNATURE-----