Ubuntu
lighttpd package

  1. Bug #1994989
  2. Comment #7

Comment 7 for bug 1994989

Revision history for this message
Jack Fewx (cseengineer) wrote (last edit ):

I was scanning my system for CVEs and found this one along with CVE-2022-41556. Both Ubuntu trackers https://ubuntu.com/security/CVE-2022-22707 and https://ubuntu.com/security/CVE-2022-41556 show a patch is needed. I attached my first ever debdiff. Feedback on format updates and next steps please.

I'm running my changes, and so far so good.
$ sudo apt list light\* --installed
Listing... Done
lighttpd-mod-deflate/now 1.4.63-1ubuntu4 amd64 [installed,local]
lighttpd-mod-openssl/now 1.4.63-1ubuntu4 amd64 [installed,local]
lighttpd/now 1.4.63-1ubuntu4 amd64 [installed,local]