Ubuntu
lighttpd package

lighttpd 1.4.55-1ubuntu1.20.04.2 source package in Ubuntu

Changelog

lighttpd (1.4.55-1ubuntu1.20.04.2) focal-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds Write
    - debian/patches/CVE-2022-22707.patch: mod_extforward_Forwarded function
      of the mod_extforward plugin has a stack-based buffer overflow.
      (LP: #1994989)
    - CVE-2022-22707

 -- Jack Fewx <email address hidden>  Thu, 16 Feb 2023 20:09:14 -0600

Upload details

Uploaded by:
Jack Fewx
Sponsored by:
Paulo Flabiano Smorigo
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
httpd
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates universe web
Focal security universe web

Downloads

File Size SHA-256 Checksum
lighttpd_1.4.55.orig.tar.xz 747.7 KiB 6a0b50e9c9d5cc3d9e48592315c25a2d645858f863e1ccd120507a30ce21e927
lighttpd_1.4.55-1ubuntu1.20.04.2.debian.tar.xz 47.8 KiB 533fbd365429de1e1fa6199faa638f3a83e276690514a5b1f6d1de3c9d8e2ffc
lighttpd_1.4.55-1ubuntu1.20.04.2.dsc 3.7 KiB 6e6c22e47024c32292a803b8a9592878539ff657a46138a01bddc5e5cc57bce5

View changes file

Binary packages built by this source

lighttpd: fast webserver with minimal memory footprint

 lighttpd is a small webserver and fast webserver developed with
 security in mind and a lot of features.
 It has support for
   * CGI, FastCGI and SSI
   * virtual hosts
   * URL rewriting
   * authentication (plain files, htpasswd, LDAP)
   * transparent content compression
   * conditional configuration
   * HTTP proxying
 and configuration is straight-forward and easy.

lighttpd-dbgsym: debug symbols for lighttpd
lighttpd-dev: Development files for lighttpd

 This package contains the development header-files for lighttpd.

lighttpd-doc: documentation for lighttpd

 lighttpd is a small webserver and fast webserver developed with
 security in mind and a lot of features.
 .
 This package contains documentation for lighttpd.

lighttpd-mod-authn-gssapi: GSSAPI authentication for lighttpd

 This package contains the authn_gssapi module for lighttpd. With
 this module, it is possible to perform GSSAPI authentication.

lighttpd-mod-authn-gssapi-dbgsym: debug symbols for lighttpd-mod-authn-gssapi
lighttpd-mod-authn-pam: PAM authentication for lighttpd

 This package contains the authn_pam module for lighttpd. With this module, it
 is possible to perform authentication using PAM.

lighttpd-mod-authn-pam-dbgsym: debug symbols for lighttpd-mod-authn-pam
lighttpd-mod-authn-sasl: SASL authentication for lighttpd

 This package contains the authn_sasl module for lighttpd. With this module, it
 is possible to perform authentication using SASL.

lighttpd-mod-authn-sasl-dbgsym: debug symbols for lighttpd-mod-authn-sasl
lighttpd-mod-cml: cache meta language module for lighttpd

 With the cache meta language, it is possible to describe to the
 dependencies of a cached file to its source files/scripts. For the
 cache files, the scripting language Lua is used.
 .
 THIS MODULE IS OBSOLETED, USE mod_magnet INSTEAD.

lighttpd-mod-cml-dbgsym: debug symbols for lighttpd-mod-cml
lighttpd-mod-geoip: GeoIP restrictions for lighttpd

 This package contains the geoip module for lighttpd. With
 this module, it is possible to distinguish users based on the location
 using a GeoIP database.

lighttpd-mod-geoip-dbgsym: debug symbols for lighttpd-mod-geoip
lighttpd-mod-magnet: control the request handling module for lighttpd

 mod_magnet can attract a request in several stages in the request-handling.
 either at the same level as mod_rewrite, before any parsing of the URL is done
 or at a later stage, when the doc-root is known and the physical-path is
 already setup

lighttpd-mod-magnet-dbgsym: debug symbols for lighttpd-mod-magnet
lighttpd-mod-maxminddb: GeoIP2 restrictions for lighttpd

 This package contains the maxminddb module for lighttpd. With
 this module, it is possible to distinguish users based on the location
 using a GeoIP2 database.

lighttpd-mod-maxminddb-dbgsym: debug symbols for lighttpd-mod-maxminddb
lighttpd-mod-trigger-b4-dl: anti-deep-linking module for lighttpd

 The trigger-b4-dl module for lighttpd can prevent deep linking
 from other sites by requiring users to visit a trigger URL to
 be able to download certain files.

lighttpd-mod-trigger-b4-dl-dbgsym: debug symbols for lighttpd-mod-trigger-b4-dl
lighttpd-mod-vhostdb-dbi: DBI-based virtual host configuration for lighttpd

 This package contains the vhostdb_dbi module for lighttpd. With this module,
 it is possible to write the configuration for virtual hosts into a database
 table instead of including it in the lighttpd configuration file.

lighttpd-mod-vhostdb-dbi-dbgsym: debug symbols for lighttpd-mod-vhostdb-dbi
lighttpd-mod-vhostdb-pgsql: PostgreSQL-based virtual host configuration for lighttpd

 This package contains the vhostdb_pgsql module for lighttpd. With this module,
 it is possible to write the configuration for virtual hosts into a PostgreSQL
 table instead of including it in the lighttpd configuration file.

lighttpd-mod-vhostdb-pgsql-dbgsym: debug symbols for lighttpd-mod-vhostdb-pgsql
lighttpd-mod-webdav: WebDAV module for lighttpd

 The WebDAV module is a very minimalistic implementation of RFC 2518.
 Minimalistic means that not all operations are implemented yet.
 .
 Currently supports:
  GET
  POST
  HEAD
  PROPFIND
  OPTIONS
  MKCOL
  DELETE
  PUT

lighttpd-mod-webdav-dbgsym: debug symbols for lighttpd-mod-webdav
lighttpd-modules-ldap: LDAP-based modules for lighttpd

 This package contains the following modules:
  * mod_authn_ldap: With this module, it is possible to perform
    authentication against an LDAP server.
  * mod_vhostdb_ldap: Database backend module for using LDAP as
    a source for virtual host configuration using mod_vhostdb.
 .
 Do not depend on this package. Depend on the provided lighttpd-mod-*
 packages instead.

lighttpd-modules-ldap-dbgsym: debug symbols for lighttpd-modules-ldap
lighttpd-modules-mysql: MySQL-based modules for lighttpd

 This package contains the following modules:
  * mod_authn_mysql: With this module, it is possible to perform
    authentication using a MySQL table.
  * mod_mysql_vhost: With this module, it is possible to write the
    configuration for virtual hosts into a MySQL table instead of
    including it in the lighttpd configuration file. Deprecated.
  * mod_vhostdb_mysql: Database backend module for using MySQL as
    a source for virtual host configuration using mod_vhostdb.
 .
 Do not depend on this package. Depend on the provided lighttpd-mod-*
 packages instead.

lighttpd-modules-mysql-dbgsym: debug symbols for lighttpd-modules-mysql