-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 29 Jul 2016 18:16:19 +0200 Source: lighttpd Binary: lighttpd lighttpd-doc lighttpd-mod-mysql-vhost lighttpd-mod-trigger-b4-dl lighttpd-mod-cml lighttpd-mod-magnet lighttpd-mod-webdav Architecture: source amd64 all Version: 1.4.31-4+deb7u5 Distribution: wheezy-security Urgency: high Maintainer: Debian lighttpd maintainers <pkg-lighttpd-maintainers@lists.alioth.debian.org> Changed-By: Santiago R.R. <santiagorr@riseup.net> Description: lighttpd - fast webserver with minimal memory footprint lighttpd-doc - documentation for lighttpd lighttpd-mod-cml - cache meta language module for lighttpd lighttpd-mod-magnet - control the request handling module for lighttpd lighttpd-mod-mysql-vhost - MySQL-based virtual host configuration for lighttpd lighttpd-mod-trigger-b4-dl - anti-deep-linking module for lighttpd lighttpd-mod-webdav - WebDAV module for lighttpd Changes: lighttpd (1.4.31-4+deb7u5) wheezy-security; urgency=high . * Non-maintainer upload by the Debian LTS Team. * Fix CVE-2016-1000212: Mitigate HTTPoxy vulnerability. * Add buffer_is_equal_caseless_string.patch * Add mitigate-httpoxy-779c133c16f9af168b004dce7a2a64f16c1cb3a4.patch Checksums-Sha1: c7f41a0499cdd794d19e138161e948841aa0efb9 2653 lighttpd_1.4.31-4+deb7u5.dsc fe1c134ed60d9fc2872f7f798f4dc89ec569f258 36492 lighttpd_1.4.31-4+deb7u5.debian.tar.gz 7a7b3007e298e9efe52a7432f56fdafc35148ce1 306680 lighttpd_1.4.31-4+deb7u5_amd64.deb 99a4cc841a6a6cd6e8639d1fc7c858104bdd1c24 64458 lighttpd-doc_1.4.31-4+deb7u5_all.deb 11487f746aadd6ec61dfce3f32f311dcce39af8a 20752 lighttpd-mod-mysql-vhost_1.4.31-4+deb7u5_amd64.deb 5c66a67ea368845de1dda5cc7374e60ad23f58ca 22254 lighttpd-mod-trigger-b4-dl_1.4.31-4+deb7u5_amd64.deb 50674052bc03e4e22ca1e18def51bc3725da948d 25516 lighttpd-mod-cml_1.4.31-4+deb7u5_amd64.deb bf8bc0e2acc553daad334025f33cb174d3913475 26618 lighttpd-mod-magnet_1.4.31-4+deb7u5_amd64.deb 0decb99382810ce7ebc622654b863269d5aa4ca2 32732 lighttpd-mod-webdav_1.4.31-4+deb7u5_amd64.deb Checksums-Sha256: b789ce37e0505357afc5bbb5e27eaa14e0dc2c8284bae3c07b49f80012592dca 2653 lighttpd_1.4.31-4+deb7u5.dsc 203265cda123176ec1bfceaf6bc39488f2060b320593e581733747c6976c6d21 36492 lighttpd_1.4.31-4+deb7u5.debian.tar.gz d1049c0e42f565f434d6fdc53ace62c0a778e359e6403b2e9951b17b8ef461df 306680 lighttpd_1.4.31-4+deb7u5_amd64.deb 82310cb90a8a7ad1dc72371438ae5e3505995b67995f71b1c2baf2a91c1a0162 64458 lighttpd-doc_1.4.31-4+deb7u5_all.deb 8e7aaca3864c85ff85c6eb4ba7ca1053341ba6f8366e03037430a5001582f334 20752 lighttpd-mod-mysql-vhost_1.4.31-4+deb7u5_amd64.deb d067a4daf6ff792f0ef0a5935dfd735cb91db6340e25d00f20b9336f198b832e 22254 lighttpd-mod-trigger-b4-dl_1.4.31-4+deb7u5_amd64.deb 77bebe508ed3a908a52f66c7d0f4e5eaae8015345b889b06fe12292f795c2800 25516 lighttpd-mod-cml_1.4.31-4+deb7u5_amd64.deb f75f95a5eac11bca7f145ade58fd78fa93859db53cab8802a52901d1c43bde05 26618 lighttpd-mod-magnet_1.4.31-4+deb7u5_amd64.deb e6151c33c40af067763f3d817bedd3bee6d26be48ebffe7464ce351e62bbcb44 32732 lighttpd-mod-webdav_1.4.31-4+deb7u5_amd64.deb Files: d958fe2ca75500af31f94c743f02ac11 2653 httpd optional lighttpd_1.4.31-4+deb7u5.dsc cefaf4c7456edd76ad29bb9b189811f5 36492 httpd optional lighttpd_1.4.31-4+deb7u5.debian.tar.gz bfd5be01fe9385d7b4d58e4773a0126a 306680 httpd optional lighttpd_1.4.31-4+deb7u5_amd64.deb 86ab55e82239239af06640f5bc088442 64458 doc optional lighttpd-doc_1.4.31-4+deb7u5_all.deb b78c66f3307bf8945e69ba85d8cbc66c 20752 httpd optional lighttpd-mod-mysql-vhost_1.4.31-4+deb7u5_amd64.deb aa27ae5b486f3d96e75e3a05a44dfa5f 22254 httpd optional lighttpd-mod-trigger-b4-dl_1.4.31-4+deb7u5_amd64.deb ab3a1da3a6bc5b0acbef0a1ae55fcf39 25516 httpd optional lighttpd-mod-cml_1.4.31-4+deb7u5_amd64.deb c17d5176fbfaab2eb9123a00be5b96ab 26618 httpd optional lighttpd-mod-magnet_1.4.31-4+deb7u5_amd64.deb 4dade3c3f570db52cbf2be464cbf1cef 32732 httpd optional lighttpd-mod-webdav_1.4.31-4+deb7u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJXoNkTAAoJEN5v/bjI1ki9DuIP+gPXvleoSai1e/9EyHz4d4rf q4PtzuBfqQlpsItxItOqUyYuvH1WL8L8ritrdtv1xX1K6oA9r98mX7LDCnhCZ3dD Ir7T+AbmDsbfJEQBBws2JhpGa+n2lFp1X8jeNyOD8ZnvrLJSBxacEyofWayUbgzM EacuO7xiUgEqGQGTRSwFBrKgy2T8l4q7uNcIvjgYKvT2fyCb5RP1F64LFej5HdkC 4bWlPLkqw13+cT60Gmi3VTTLJEmrwrRvzT9LUfmlbAgryRzu0CuPUAlMi+udTCb+ mas7XcL8YQjPeMA5WDGRfkuVuYdtGA2qIlsm2t2qAouFWAzivNJHzNaulBKpWqKH mLvLdH4CtDk/HLWrmp0PiYM/bMUEpy3zZLS2vA20aISuFnD6lbkurEhqYBnTE7vG GgS9WHx5kLJ17fdM7rIxYhFThPbn/gt65jVZnis+V6sXIGSQyiqrXAeqmIRg7Szk bnq2jrn1g6qNB41h1GAD9QOOL8siq5mGDdfzHeDtivXNeSNRoqqdGQ4zx49njnFz bN4F0x1L3pHxdKme/eA7ZVUYzwdrifPPDflrrZUO8KuOAuTxY43F3efH/Iot89aY At/xPP/5dzoJatO+KLxrkWA8gLS+zVh46nyBT/9szeos8S2p87SYetDL6TSgGCzv HbRivXJrNN0hQ+NeHfkE =ixz0 -----END PGP SIGNATURE-----