Debian Package Tracker

general

source: lighttpd (main)
version: 1.4.55-1
maintainer: Debian lighttpd maintainers (DMD)
uploaders: Helmut Grohne [DMD] – Glenn Strauss [DMD] – Stefan Bühler [DMD]
arch: all any
std-ver: 4.5.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.4.35-4+deb8u1
o-o-sec: 1.4.35-4+deb8u1
oldstable: 1.4.45-1
stable: 1.4.53-4
stable-bpo: 1.4.55-1~bpo10+1
testing: 1.4.55-1
unstable: 1.4.55-1

versioned links

1.4.35-4+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.4.45-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.4.53-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.4.55-1~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.4.55-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

lighttpd (1 bugs: 0, 0, 1, 0)
lighttpd-doc (1 bugs: 0, 1, 0, 0)
lighttpd-mod-authn-gssapi
lighttpd-mod-authn-pam
lighttpd-mod-authn-sasl
lighttpd-mod-cml
lighttpd-mod-geoip
lighttpd-mod-magnet
lighttpd-mod-maxminddb
lighttpd-mod-trigger-b4-dl
lighttpd-mod-vhostdb-dbi
lighttpd-mod-vhostdb-pgsql
lighttpd-mod-webdav
lighttpd-modules-ldap
lighttpd-modules-mysql

action needed

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2020-06-28 Last update: 2020-08-15 13:31

Depends on packages which need a new maintainer normal

The packages that lighttpd depends on which need a new maintainer are:

fam (#966273)
- Build-Depends: libfam-dev
- Depends: libfam0

Created: 2020-07-25 Last update: 2020-08-15 12:07

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 1.4.55-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 57ba7777e6169e712d1db55aae693032ab40d5d1
Author: Glenn Strauss <gstrauss@gluelogic.com>
Date:   Tue May 19 02:12:01 2020 -0400

    change debian/watch to use version=4
    
    Gbp-Dch: Ignore

commit eb65f923cfa5dddaebbe7ab830b15a3faa1c46dd
Author: Helmut Grohne <helmut.grohne@intenta.de>
Date:   Tue May 19 17:11:35 2020 +0200

    update debian/changelog
    
    Run gbp dch and add back all the changelog entries that went missing due
    to the janitor merge also touching debian/changelog.

commit 83a3cc2fabb17028f31d9b29832906a387493075
Author: Helmut Grohne <helmut.grohne@intenta.de>
Date:   Tue May 19 17:05:52 2020 +0200

    salsa-ci: disable reprotest for now
    
    Gbp-Dch: Ignore

commit 744b38fd5c4c4c11123733d1a5f1239a5a9b5a0d
Author: bauen1 <j2468h@googlemail.com>
Date:   Tue May 19 17:02:58 2020 +0200

    remove usage of 'su' in crontab
    
    Signed-off-by: bauen1 <j2468h@googlemail.com>
    Signed-off-by: Helmut Grohne <helmut.grohne@intenta.de>
    Closes: #958520

commit 8934a68ea15c75489b49f5a998b496da6edf0fba
Author: Glenn Strauss <gstrauss@gluelogic.com>
Date:   Tue May 19 00:49:49 2020 -0400

    remove upstream source files from debian/clean
    
    Gbp-Dch: Ignore

commit b78b85665e8a12bb1815abc36c4fcff97e3e1487
Author: Glenn Strauss <gstrauss@gluelogic.com>
Date:   Tue May 19 00:46:48 2020 -0400

    Revert "remove generated files from source control"
    
    This reverts commit 7043c6ad0071e83cbec3690743d21422f9c5ed41.
    
    (upstream should not include generated files in upstream tarball)
    
    Gbp-Dch: Ignore

commit 090ccc76a98ba6deb29af202274829e7ef5f1440
Merge: 1cff13b 8ca0551
Author: Helmut Grohne <helmutg@debian.org>
Date:   Tue May 19 04:04:15 2020 +0000

    Merge branch 'lintian-fixes' into 'master'
    
    Wrap long lines in changelog entries: 1
    
    See merge request debian/lighttpd!16

commit 8ca055187bd73429abc9936f822cc67bef9062d9
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Tue Mar 31 17:11:36 2020 +0000

    Wrap long lines in changelog entries: 1.4.16-1, 1.4.15-1, 1.4.13-10, 1.4.10-2.
    
    Fixes: lintian: debian-changelog-line-too-long
    See-also: https://lintian.debian.org/tags/debian-changelog-line-too-long.html

commit 1cff13bcb987cff82b168b767b9c5c668dc32742
Author: Glenn Strauss <gstrauss@gluelogic.com>
Date:   Sun Mar 22 01:24:13 2020 -0400

    use lua 5.3 going forwards (update from lua 5.1)

commit 1d713250b1f16bb562f030f5b005b64114b577bf
Author: Glenn Strauss <gstrauss@gluelogic.com>
Date:   Sat Mar 21 22:26:18 2020 -0400

    05-auth.conf comment available algorithm SHA-256

commit 3487cb5dbf39a588af2134822c64fdcae197a523
Author: Glenn Strauss <gstrauss@gluelogic.com>
Date:   Sat Mar 21 21:19:56 2020 -0400

    10-ssl.conf listens on IPv4, and IPv6 when avail
    
    Closes: #952541

commit 7043c6ad0071e83cbec3690743d21422f9c5ed41
Author: Glenn Strauss <gstrauss@gluelogic.com>
Date:   Sat Mar 21 17:50:49 2020 -0400

    remove generated files from source control
    
    remove configparser.c mod_ssi_exprparser.c from source control

Created: 2020-03-21 Last update: 2020-08-09 01:36

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2018-19052: An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing '/' character, but the alias target filesystem path does have a trailing '/' character.

Please fix it.

Created: 2018-11-07 Last update: 2020-08-07 06:08

testing migrations

This package will soon be part of the auto-openssl transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2020-03-06] Accepted lighttpd 1.4.55-1~bpo10+1 (source) into buster-backports (Helmut Grohne)
[2020-02-27] lighttpd 1.4.55-1 MIGRATED to testing (Debian testing watch)
[2020-02-24] Accepted lighttpd 1.4.55-1 (source) into unstable (Helmut Grohne)
[2020-01-27] Accepted lighttpd 1.4.54-2~bpo10+1 (source amd64 all) into buster-backports, buster-backports (Helmut Grohne)
[2019-10-26] lighttpd 1.4.54-2 MIGRATED to testing (Debian testing watch)
[2019-10-23] Accepted lighttpd 1.4.54-2 (source) into unstable (Boyuan Yang)
[2019-10-12] Accepted lighttpd 1.4.54-1 (all amd64 source) into unstable, unstable (Helmut Grohne)
[2019-04-20] lighttpd 1.4.53-4 MIGRATED to testing (Debian testing watch)
[2019-04-17] Accepted lighttpd 1.4.53-4 (source) into unstable (Glenn Strauss) (signed by: Helmut Grohne)
[2019-03-05] lighttpd 1.4.53-3 MIGRATED to testing (Debian testing watch)
[2019-02-23] Accepted lighttpd 1.4.53-3 (source) into unstable (Helmut Grohne)
[2019-02-13] Accepted lighttpd 1.4.53-2 (source) into unstable (Helmut Grohne)
[2019-01-30] lighttpd 1.4.53-1 MIGRATED to testing (Debian testing watch)
[2019-01-28] Accepted lighttpd 1.4.53-1 (source) into unstable (Helmut Grohne)
[2019-01-25] Accepted lighttpd 1.4.52-5 (source) into unstable (Helmut Grohne)
[2019-01-24] Accepted lighttpd 1.4.52-4 (source) into unstable (Helmut Grohne)
[2019-01-09] lighttpd 1.4.52-3 MIGRATED to testing (Debian testing watch)
[2019-01-07] Accepted lighttpd 1.4.52-3 (source) into unstable (Helmut Grohne)
[2019-01-05] Accepted lighttpd 1.4.52-2+exp2 (source amd64 all) into experimental, experimental (Helmut Grohne)
[2018-12-19] lighttpd 1.4.52-2 MIGRATED to testing (Debian testing watch)
[2018-12-17] lighttpd 1.4.52-1 MIGRATED to testing (Debian testing watch)
[2018-12-16] Accepted lighttpd 1.4.52-2 (source) into unstable (Helmut Grohne)
[2018-12-06] Accepted lighttpd 1.4.52-1 (source) into unstable (Helmut Grohne)
[2018-12-03] Accepted lighttpd 1.4.49-2 (source) into unstable (Ximin Luo)
[2018-04-05] lighttpd 1.4.49-1.1 MIGRATED to testing (Debian testing watch)
[2018-03-31] Accepted lighttpd 1.4.49-1.1 (source) into unstable (Ximin Luo)
[2018-03-27] lighttpd 1.4.49-1 MIGRATED to testing (Debian testing watch)
[2018-03-21] Accepted lighttpd 1.4.49-1 (source) into unstable (Clint Adams)
[2017-01-29] lighttpd 1.4.45-1 MIGRATED to testing (Debian testing watch)
[2017-01-19] Accepted lighttpd 1.4.45-1 (source) into unstable (Michael Gilbert)

bugs [bug history graph]

all: 5
RC: 0
I&N: 1
M&W: 2
F&P: 2
patch: 1

links

homepage
lintian
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.4.55-1ubuntu2
40 bugs (3 patches)
patches for 1.4.55-1ubuntu2