lighttpd crashes in some cases and giving a remote DoS possibility

[Stephan Rügamer]

Binary package hint: lighttpd

At some highspeed situations lighttpd crashes with more FDs allocated then allowed by the system.

Upstream is aware of it in http://trac.lighttpd.net/trac/ticket/1562, debian knows this too...

No CVE filed so there is a security issue, but no CVE right now

[Stephan Rügamer (sruegamer)]

lighttpd (1.4.18-1ubuntu3) hardy; urgency=low

  * debian/patches/90_maxfds_crash_fix.dpatch:
    - added patch from upstream to fix the maxfds issue
    - See: http://trac.lighttpd.net/trac/ticket/1562

 -- Stephan Hermann <email address hidden> Mon, 25 Feb 2008 11:51:57 +0100

[Emanuele Gentili (emgent)]

+lighttpd (1.4.18-1ubuntu1.1) gutsy; urgency=low
+
+ * SECURITY UPDATE:
+ + debian/patches/90_maxfds_crash_fix.dpatch:
+ - added patch from upstream to fix the maxfds issue (LP: #195380)
+ * References
+ + http://trac.lighttpd.net/trac/ticket/1562
+
+ -- Emanuele Gentili <email address hidden> Mon, 25 Feb 2008 16:21:40 +0100

[Launchpad Janitor (janitor)]

This bug was fixed in the package lighttpd - 1.4.18-1ubuntu1.1

---------------
lighttpd (1.4.18-1ubuntu1.1) gutsy-security; urgency=low

  * SECURITY UPDATE:
    + debian/patches/90_maxfds_crash_fix.dpatch:
      - added patch from upstream to fix the maxfds issue (LP: #195380)
  * References
    + http://trac.lighttpd.net/trac/ticket/1562

 -- Emanuele Gentili <email address hidden> Mon, 25 Feb 2008 16:21:40 +0100

[Launchpad Janitor (janitor)]

This bug was fixed in the package lighttpd - 1.4.13-9ubuntu4.3

---------------
lighttpd (1.4.13-9ubuntu4.3) feisty-security; urgency=low

  * SECURITY UPDATE:
    + debian/patches/90_maxfds_crash_fix.dpatch:
      - added patch from upstream to fix the maxfds issue (LP: #195380)
  * References
    + http://trac.lighttpd.net/trac/ticket/1562

 -- Emanuele Gentili <email address hidden> Mon, 25 Feb 2008 16:35:30 +0100