Format: 1.8 Date: Mon, 13 Feb 2023 21:33:26 -0600 Source: lighttpd Binary: lighttpd lighttpd-doc lighttpd-mod-authn-gssapi lighttpd-mod-authn-pam lighttpd-mod-authn-sasl lighttpd-mod-deflate lighttpd-mod-geoip lighttpd-mod-maxminddb lighttpd-mod-mbedtls lighttpd-mod-nss lighttpd-mod-openssl lighttpd-mod-trigger-b4-dl lighttpd-mod-vhostdb-pgsql lighttpd-mod-webdav lighttpd-mod-wolfssl lighttpd-modules-dbi lighttpd-modules-ldap lighttpd-modules-lua lighttpd-modules-mysql Built-For-Profiles: noudeb Architecture: amd64 all Version: 1.4.63-1ubuntu3.1 Distribution: jammy Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Jack Fewx Description: lighttpd - fast webserver with minimal memory footprint lighttpd-doc - documentation for lighttpd lighttpd-mod-authn-gssapi - GSSAPI authentication module for lighttpd lighttpd-mod-authn-pam - PAM authentication module for lighttpd lighttpd-mod-authn-sasl - SASL authentication module for lighttpd lighttpd-mod-deflate - HTTP response compression module for lighttpd lighttpd-mod-geoip - GeoIP info module for lighttpd lighttpd-mod-maxminddb - GeoIP2 info module for lighttpd lighttpd-mod-mbedtls - TLS support using mbedTLS module for lighttpd lighttpd-mod-nss - TLS support using NSS crypto module for lighttpd lighttpd-mod-openssl - TLS support using OpenSSL module for lighttpd lighttpd-mod-trigger-b4-dl - anti-deep-linking module for lighttpd lighttpd-mod-vhostdb-pgsql - PostgreSQL-based virtual host configuration module for lighttpd lighttpd-mod-webdav - WebDAV module for lighttpd lighttpd-mod-wolfssl - TLS support using wolfSSL module for lighttpd lighttpd-modules-dbi - DBI-based modules for lighttpd lighttpd-modules-ldap - LDAP-based modules for lighttpd lighttpd-modules-lua - LUA-based modules for lighttpd lighttpd-modules-mysql - MySQL-based modules for lighttpd Launchpad-Bugs-Fixed: 1994989 Changes: lighttpd (1.4.63-1ubuntu3.1) jammy-security; urgency=medium . * SECURITY UPDATE: Out-of-bounds Write - debian/patches/CVE-2022-22707.patch: mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow. (LP: #1994989) - CVE-2022-22707 * SECURITY UPDATE: Resource leak - debian/patches/CVE-2022-41556.patch: Resource leak in gw_backend.c. - CVE-2022-41556 Checksums-Sha1: f3cb3115839389cb39d81dbee3e51fdf74afc0bf 1048452 lighttpd-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb b4ce9a2e9c1119476998a2aa1d4a15af12eebef4 55492 lighttpd-doc_1.4.63-1ubuntu3.1_all.deb 3a7df4870691a4292d726139024fd5b53b9d0441 27760 lighttpd-mod-authn-gssapi-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb a321a6b25bd6ca59c2fac09201e7118b7f4f686b 8802 lighttpd-mod-authn-gssapi_1.4.63-1ubuntu3.1_amd64.deb f2070fe667d806709b0ab2c221d41579fdf96702 14574 lighttpd-mod-authn-pam-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb c4db72bf008cfc9a6ac4ce0e6e329e364c02c13d 3776 lighttpd-mod-authn-pam_1.4.63-1ubuntu3.1_amd64.deb 26f301373d03003df8ef66f0360256f5de8aa906 16630 lighttpd-mod-authn-sasl-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 708a59653b83438a60b66aeaa33e5387964ff23d 4652 lighttpd-mod-authn-sasl_1.4.63-1ubuntu3.1_amd64.deb 19b1b3667d17c64c71f3f832c80905a63ddacbd9 34396 lighttpd-mod-deflate-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb a70dbca0bfed4c002892e19f757140949eb182aa 11728 lighttpd-mod-deflate_1.4.63-1ubuntu3.1_amd64.deb fe5754e0532f6b955abe3448bdf3bf7423e1c153 16042 lighttpd-mod-geoip-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 891956342267d4cef0e914ddf8825ce0de75579d 4574 lighttpd-mod-geoip_1.4.63-1ubuntu3.1_amd64.deb 176f41ed2986f2bd024a6ab95fe555eaef1c9662 18638 lighttpd-mod-maxminddb-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 555ea03385479442cb0e8083ef2cf40eec4295d1 5180 lighttpd-mod-maxminddb_1.4.63-1ubuntu3.1_amd64.deb 4866fb2502a7385ca81a5dca549365e6afa7b7a6 61804 lighttpd-mod-mbedtls-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 1192461dca1041685ee8d3e958577711ad67c09f 22316 lighttpd-mod-mbedtls_1.4.63-1ubuntu3.1_amd64.deb 924c983b507a72c3aab2bceb3a743d5800725690 64566 lighttpd-mod-nss-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 8cc4f306ee3caf3a9ec1bd766d94582f38ef38f2 23050 lighttpd-mod-nss_1.4.63-1ubuntu3.1_amd64.deb bb2bf82ef95e98965e2c8133924318def739fbb1 52946 lighttpd-mod-openssl-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 2f67fcc9b3bae3deecff1c618b2ac7fded21d6ca 21526 lighttpd-mod-openssl_1.4.63-1ubuntu3.1_amd64.deb 85548d8291bedb03f5738e395ae482e3d23b6c6d 23170 lighttpd-mod-trigger-b4-dl-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 38a2f6a52abfb394511b1b557e161a96b6adcd6c 6776 lighttpd-mod-trigger-b4-dl_1.4.63-1ubuntu3.1_amd64.deb e192b14bc720cc40e064c7d59e89510b70117de7 16032 lighttpd-mod-vhostdb-pgsql-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 47f910edf54332bebfc8921899bd48e15964eb8c 4452 lighttpd-mod-vhostdb-pgsql_1.4.63-1ubuntu3.1_amd64.deb babc0c00eacd5052ea53c19d4f55f214b802bc78 88728 lighttpd-mod-webdav-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 4f817e93700970d1355cea8357a9ac08fcff0fad 28224 lighttpd-mod-webdav_1.4.63-1ubuntu3.1_amd64.deb 32b90b0cff184ae57a97028b0889d86af172c176 67968 lighttpd-mod-wolfssl-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb c6c834bfa99a1dc3b3d3f2a9702bc9c77c92964d 22676 lighttpd-mod-wolfssl_1.4.63-1ubuntu3.1_amd64.deb 895a308e8b04e1dc6fe886fe553f6b95fe1d1ed0 34548 lighttpd-modules-dbi-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 17bed9602fdb3227ff4f8e53503c031624f7e909 8320 lighttpd-modules-dbi_1.4.63-1ubuntu3.1_amd64.deb deee14fac1239cb2e8cf33bd2edcf8166d9c5136 43606 lighttpd-modules-ldap-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 4e75e1be1fb9e75736f7769816bc6c468e5529c1 11288 lighttpd-modules-ldap_1.4.63-1ubuntu3.1_amd64.deb 1d111c5b9cb0c12f43b8632345d234545496fac7 94906 lighttpd-modules-lua-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 5839c7e080931364c4f52279c23e1d2f1f5b6a4e 28234 lighttpd-modules-lua_1.4.63-1ubuntu3.1_amd64.deb eeb87244fb01c8c6ef0072a7a3fee036b68ed86d 48072 lighttpd-modules-mysql-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb c64480248b26b13ade599a0a927aad1e39dc7128 10838 lighttpd-modules-mysql_1.4.63-1ubuntu3.1_amd64.deb 67565adb4c7ebeca3dd57b47a831ce812d7ce2dc 20981 lighttpd_1.4.63-1ubuntu3.1_amd64.buildinfo a1782ef4ef429719d4fc76b22557ec821c25c6ff 389260 lighttpd_1.4.63-1ubuntu3.1_amd64.deb Checksums-Sha256: f214dc840f5c093c02a408026d0c24ca0ae25a2cc5ff6dadf7968ed071992d96 1048452 lighttpd-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 8dbaffb030439f1dd0c42df33df2085f4728e3b9173161a14448a2f373b6e1cf 55492 lighttpd-doc_1.4.63-1ubuntu3.1_all.deb a31651d351c913bcb1d987aef9d73e867f1a8a66a7aa6423ee6e1c88401a821f 27760 lighttpd-mod-authn-gssapi-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 836a4602bf5a3a2cd98c0c84b160e65712bfbe34d4b39976cb044267a293b030 8802 lighttpd-mod-authn-gssapi_1.4.63-1ubuntu3.1_amd64.deb 57f253ac5c975299d765b5bf0efbae7feea70e5b9aafe5532ba8012a112de0fe 14574 lighttpd-mod-authn-pam-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 3196af90fd7d1f0607a3112d8fc71b20f743f96ce8ab77f43b8f7462d16ab89c 3776 lighttpd-mod-authn-pam_1.4.63-1ubuntu3.1_amd64.deb 5b854984101577297afb2a01018bd019426fd8deda24183e466b0f1503540309 16630 lighttpd-mod-authn-sasl-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb afc486ef99584053adab452c1eb312426688af63236af698a851dbe123883608 4652 lighttpd-mod-authn-sasl_1.4.63-1ubuntu3.1_amd64.deb 4358f67f83b2de318819fdb5122b432a9a485f065385099c0bbc1bf646174642 34396 lighttpd-mod-deflate-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 4f6562906ee5634bc638a3fe5eeba141d0ed2b566c09bb46991ca6794e2ace48 11728 lighttpd-mod-deflate_1.4.63-1ubuntu3.1_amd64.deb d49d7f53717698c29f0804dbe9125fbbcfc064b5d802076644adf2c053716580 16042 lighttpd-mod-geoip-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 52a93e20232dc87d40890f33eee9cc9baef71c0c737999f931047fca032195c0 4574 lighttpd-mod-geoip_1.4.63-1ubuntu3.1_amd64.deb 767e74512e34626d08631db4559cb9a236e0de4343c32dad17497b4c0c580415 18638 lighttpd-mod-maxminddb-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb e0bb01a87f17c3a2533262ad6b5ed8a612e45a1ff6d10e01bf82563107489c13 5180 lighttpd-mod-maxminddb_1.4.63-1ubuntu3.1_amd64.deb dca5a22efbdcc1bea8f8deeb41bbda218a28464c8449ca90147677dc7cd511b0 61804 lighttpd-mod-mbedtls-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb ab42e48318d5976a8bc725a63f180de7ca0bbbb744cc26a2d7f88219c2780649 22316 lighttpd-mod-mbedtls_1.4.63-1ubuntu3.1_amd64.deb c20609b34643a14d56a724aef4cbfeade31a7612a011b1b537d5a00ff52b53b7 64566 lighttpd-mod-nss-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb c3813489f7ed03cce9c9a334ce3ad4b6fd25f703431a13011152cb4709b01f88 23050 lighttpd-mod-nss_1.4.63-1ubuntu3.1_amd64.deb c08a573516f348b675ffc1b0f15fef4ccb10bed39a4963193c6bb6ee3c34a414 52946 lighttpd-mod-openssl-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb bafbcc46f07ca24f98ade0577c9316f0a9549bb14a2ccfd1f1400fe8b3b8dadd 21526 lighttpd-mod-openssl_1.4.63-1ubuntu3.1_amd64.deb 4f9b7b5e5e46608d760d0ce91e797ce1cc64b30fc4229f206376e4a3a50494b7 23170 lighttpd-mod-trigger-b4-dl-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 9101d146f33c908ea2d62b5f54aba52f6218d68ad6716a23d567498640c9d10e 6776 lighttpd-mod-trigger-b4-dl_1.4.63-1ubuntu3.1_amd64.deb 3093419b4eb34aeaf082d6b54efa0fa46326df9bea6d1659c3be3c4554983d54 16032 lighttpd-mod-vhostdb-pgsql-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 0e5b20a9c79052fab209f9199f597686beb360a3fcee3c1cfbab1f0158cef36a 4452 lighttpd-mod-vhostdb-pgsql_1.4.63-1ubuntu3.1_amd64.deb c3a977b639c83495fb542ee7c051808d33ba0e06260ac586f295d09eada27581 88728 lighttpd-mod-webdav-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 671b680a2aff47d57e54a035e0de29d8a5830b44212be27396e1465f22c6c897 28224 lighttpd-mod-webdav_1.4.63-1ubuntu3.1_amd64.deb f347508f8c7360a106d6b4679e8eb51198edc673fdc3d665d1db083c6bde95c1 67968 lighttpd-mod-wolfssl-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 9877dd79932af3821b5620eebece0ffac494f1ee366ca50a63d5f797e104fe6e 22676 lighttpd-mod-wolfssl_1.4.63-1ubuntu3.1_amd64.deb 58544830affbacfe5a4edf526b252e662f663f9678dae24e7a5b97017770fbe5 34548 lighttpd-modules-dbi-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 6345786812de994bd05d731815b7686dde6a07c9a691e5661b59b13834c30f73 8320 lighttpd-modules-dbi_1.4.63-1ubuntu3.1_amd64.deb c285e25cdf183bf799b9ef75ed847150055c5ddae2941ca95df4f29d13deb002 43606 lighttpd-modules-ldap-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 28cc1bc93a1d754999dcc2115525264cca4a7514e411fcad99f0500177d55f6b 11288 lighttpd-modules-ldap_1.4.63-1ubuntu3.1_amd64.deb bbb84cbf62999a2c29a9ce2f05b848d14bc4b0085a66f4aafb80f18c68e41b33 94906 lighttpd-modules-lua-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 36b559899634cb522f52f284d70a2c29d320cc366f96303d3845b13b30b160d6 28234 lighttpd-modules-lua_1.4.63-1ubuntu3.1_amd64.deb 95d2e23677b58402b83c3758e21cb4937c59c83d4903b9f7888785aea345b646 48072 lighttpd-modules-mysql-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb c77f3f8ade73f8d26eeb3806359aeb5f60337087086fa23411f8926391a6565e 10838 lighttpd-modules-mysql_1.4.63-1ubuntu3.1_amd64.deb a87ea106df5d9e9a9f01c2ca797a92e136bed0fa790df9c41adf991b8bb66962 20981 lighttpd_1.4.63-1ubuntu3.1_amd64.buildinfo 786644b488b356e11a5a4746bfaa75c70b85bf10f71d6d7e57bafac2d8c93f06 389260 lighttpd_1.4.63-1ubuntu3.1_amd64.deb Files: 18963e656f7f210c62265796b40bc739 1048452 debug optional lighttpd-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb bba37ab0c0c8c61f200be552108278a6 55492 doc optional lighttpd-doc_1.4.63-1ubuntu3.1_all.deb dc51a365d13886a08e58210579405640 27760 debug optional lighttpd-mod-authn-gssapi-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb c001af90e1c81c7dfc1886aecea38180 8802 httpd optional lighttpd-mod-authn-gssapi_1.4.63-1ubuntu3.1_amd64.deb 8843984f7979052eee4030f9b36d7fb0 14574 debug optional lighttpd-mod-authn-pam-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 6ede97ac3e6da45084db9c26f7f4f1f0 3776 httpd optional lighttpd-mod-authn-pam_1.4.63-1ubuntu3.1_amd64.deb 0224d72f4553d368e2aa9f9c808ff581 16630 debug optional lighttpd-mod-authn-sasl-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 17edf25a485677d604fd9a7b767170ae 4652 httpd optional lighttpd-mod-authn-sasl_1.4.63-1ubuntu3.1_amd64.deb 2c648d424506d92588c359be72cd3456 34396 debug optional lighttpd-mod-deflate-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 71bdc8c13c8f3699015892b409de7cd6 11728 httpd optional lighttpd-mod-deflate_1.4.63-1ubuntu3.1_amd64.deb 31eff89d01f62d4dd2fa01167e75ec8d 16042 debug optional lighttpd-mod-geoip-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 6fc62f6e44e3d3607e1e9b9c3fe0b2e7 4574 httpd optional lighttpd-mod-geoip_1.4.63-1ubuntu3.1_amd64.deb 9a5b86ddf086724e1e18c61d101ff635 18638 debug optional lighttpd-mod-maxminddb-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 6bbaddbf7bc1c2618ffbf0015d66ab5a 5180 httpd optional lighttpd-mod-maxminddb_1.4.63-1ubuntu3.1_amd64.deb 7b395902b5381990ff84343f80dee31e 61804 debug optional lighttpd-mod-mbedtls-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb fc0ccea38b2f7f5327a2ab1fa10b83c0 22316 httpd optional lighttpd-mod-mbedtls_1.4.63-1ubuntu3.1_amd64.deb f23bacec8ec290701579b6ffd0f85f7c 64566 debug optional lighttpd-mod-nss-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb f4037a9e7529f0b51c3f15c2b554018e 23050 httpd optional lighttpd-mod-nss_1.4.63-1ubuntu3.1_amd64.deb 929a3e7111e7cf51d91af5cf89404850 52946 debug optional lighttpd-mod-openssl-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb f297c14670276e2024bb604753497222 21526 httpd optional lighttpd-mod-openssl_1.4.63-1ubuntu3.1_amd64.deb e10ce8e2fe3eedf899b5a6033ee47ec2 23170 debug optional lighttpd-mod-trigger-b4-dl-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb a82dc1d39e7b56544e8bf9fa3e7def5f 6776 httpd optional lighttpd-mod-trigger-b4-dl_1.4.63-1ubuntu3.1_amd64.deb d35742d00cf018e9e11b2a193bc1a38e 16032 debug optional lighttpd-mod-vhostdb-pgsql-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 58342872d16f9e0739cb0ed54655c830 4452 httpd optional lighttpd-mod-vhostdb-pgsql_1.4.63-1ubuntu3.1_amd64.deb 7ee0361923d5d091e1a89fd4ff5aa0e3 88728 debug optional lighttpd-mod-webdav-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 839c316d3eacb5f7510ddfbe956c112e 28224 httpd optional lighttpd-mod-webdav_1.4.63-1ubuntu3.1_amd64.deb a402c9ed214343ecc2e7288eb6621313 67968 debug optional lighttpd-mod-wolfssl-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 76ed53e082ccc3389878a8d3389b9ba6 22676 httpd optional lighttpd-mod-wolfssl_1.4.63-1ubuntu3.1_amd64.deb e858b8efd8cf8ed785560bf990410e20 34548 debug optional lighttpd-modules-dbi-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb a7205191db9c7bedc609c9428ba632c1 8320 httpd optional lighttpd-modules-dbi_1.4.63-1ubuntu3.1_amd64.deb ab83f14454dc22c618040e426529b21c 43606 debug optional lighttpd-modules-ldap-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 5eaac129c4312d62f48f1d739cb0d987 11288 httpd optional lighttpd-modules-ldap_1.4.63-1ubuntu3.1_amd64.deb 5572b9733fa1527f968f28cd216fb37c 94906 debug optional lighttpd-modules-lua-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb b6ef15ba10ed13e35adb5024c4b106f3 28234 httpd optional lighttpd-modules-lua_1.4.63-1ubuntu3.1_amd64.deb 16c886b0064a30c212d8b2eb5f654349 48072 debug optional lighttpd-modules-mysql-dbgsym_1.4.63-1ubuntu3.1_amd64.ddeb 112cfdd596a2aac94a1f3d17385c552c 10838 httpd optional lighttpd-modules-mysql_1.4.63-1ubuntu3.1_amd64.deb 930d6e47d7624d08f16f62e5cb7b758d 20981 httpd optional lighttpd_1.4.63-1ubuntu3.1_amd64.buildinfo 5a4f1c7c8235a0c0fb12786b8d28dee8 389260 httpd optional lighttpd_1.4.63-1ubuntu3.1_amd64.deb Original-Maintainer: Debian lighttpd maintainers