-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sun, 31 Jan 2010 14:55:12 +0000 Source: lighttpd Binary: lighttpd-mod-mysql-vhost lighttpd-mod-cml lighttpd-doc lighttpd-mod-trigger-b4-dl lighttpd lighttpd-mod-webdav lighttpd-mod-magnet Architecture: source amd64 all Version: 1.4.13-4etch12 Distribution: oldstable-security Urgency: high Maintainer: Debian lighttpd maintainers <pkg-lighttpd-maintainers@lists.alioth.debian.org> Changed-By: Nico Golde <nion@debian.org> Description: lighttpd - A fast webserver with minimal memory footprint lighttpd-doc - Documentation for lighttpd lighttpd-mod-cml - Cache meta language module for lighttpd lighttpd-mod-magnet - Control the request handling module for lighttpd lighttpd-mod-mysql-vhost - MySQL-based virtual host configuration for lighttpd lighttpd-mod-trigger-b4-dl - Anti-deep-linking module for lighttpd lighttpd-mod-webdav - WebDAV module for lighttpd Changes: lighttpd (1.4.13-4etch12) oldstable-security; urgency=high . * Non-maintainer upload by the security team * Fix denial of service through slow short requests leading to memory exhaustion due to bad memory handling (CVE-2010-0295). Files: a2be7a82e20970071251e5ca71fc660c 1108 web optional lighttpd_1.4.13-4etch12.dsc 9f05aa3a52053d707be87c0f35912ec3 39820 web optional lighttpd_1.4.13-4etch12.diff.gz 6c7d7bfa494d88c38e9d53d44afcf49e 101098 doc optional lighttpd-doc_1.4.13-4etch12_all.deb 08a9b33d69d1c7bb56d4b69a24205026 299794 web optional lighttpd_1.4.13-4etch12_amd64.deb d72fad101197b9177348b3fdfe59020d 59926 web optional lighttpd-mod-mysql-vhost_1.4.13-4etch12_amd64.deb 918877b620983d832971d5d3845f3c86 61636 web optional lighttpd-mod-trigger-b4-dl_1.4.13-4etch12_amd64.deb f604cc138b5a8de2b52f468efb3f0031 64836 web optional lighttpd-mod-cml_1.4.13-4etch12_amd64.deb 086df21a5fda61077c12b320407ccb26 64500 web optional lighttpd-mod-magnet_1.4.13-4etch12_amd64.deb bf00a3cd05e54d5aaa2cd91a9f79a5ac 71032 web optional lighttpd-mod-webdav_1.4.13-4etch12_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAktlpfMACgkQHYflSXNkfP+LxgCgifRuosytyGaVz7JevC+QQME2 fcQAoIKn5qQWC5yyVt1UsmL40uzfD2Bl =uijk -----END PGP SIGNATURE----- Accepted: lighttpd-doc_1.4.13-4etch12_all.deb to main/l/lighttpd/lighttpd-doc_1.4.13-4etch12_all.deb lighttpd-mod-cml_1.4.13-4etch12_amd64.deb to main/l/lighttpd/lighttpd-mod-cml_1.4.13-4etch12_amd64.deb lighttpd-mod-magnet_1.4.13-4etch12_amd64.deb to main/l/lighttpd/lighttpd-mod-magnet_1.4.13-4etch12_amd64.deb lighttpd-mod-mysql-vhost_1.4.13-4etch12_amd64.deb to main/l/lighttpd/lighttpd-mod-mysql-vhost_1.4.13-4etch12_amd64.deb lighttpd-mod-trigger-b4-dl_1.4.13-4etch12_amd64.deb to main/l/lighttpd/lighttpd-mod-trigger-b4-dl_1.4.13-4etch12_amd64.deb lighttpd-mod-webdav_1.4.13-4etch12_amd64.deb to main/l/lighttpd/lighttpd-mod-webdav_1.4.13-4etch12_amd64.deb lighttpd_1.4.13-4etch12.diff.gz to main/l/lighttpd/lighttpd_1.4.13-4etch12.diff.gz lighttpd_1.4.13-4etch12.dsc to main/l/lighttpd/lighttpd_1.4.13-4etch12.dsc lighttpd_1.4.13-4etch12_amd64.deb to main/l/lighttpd/lighttpd_1.4.13-4etch12_amd64.deb