Format: 1.8 Date: Mon, 13 Feb 2023 21:33:26 -0600 Source: lighttpd Binary: lighttpd lighttpd-mod-authn-gssapi lighttpd-mod-authn-pam lighttpd-mod-authn-sasl lighttpd-mod-deflate lighttpd-mod-geoip lighttpd-mod-maxminddb lighttpd-mod-mbedtls lighttpd-mod-nss lighttpd-mod-openssl lighttpd-mod-trigger-b4-dl lighttpd-mod-vhostdb-pgsql lighttpd-mod-webdav lighttpd-mod-wolfssl lighttpd-modules-dbi lighttpd-modules-ldap lighttpd-modules-lua lighttpd-modules-mysql Built-For-Profiles: noudeb Architecture: armhf Version: 1.4.63-1ubuntu3.1 Distribution: jammy Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Jack Fewx Description: lighttpd - fast webserver with minimal memory footprint lighttpd-mod-authn-gssapi - GSSAPI authentication module for lighttpd lighttpd-mod-authn-pam - PAM authentication module for lighttpd lighttpd-mod-authn-sasl - SASL authentication module for lighttpd lighttpd-mod-deflate - HTTP response compression module for lighttpd lighttpd-mod-geoip - GeoIP info module for lighttpd lighttpd-mod-maxminddb - GeoIP2 info module for lighttpd lighttpd-mod-mbedtls - TLS support using mbedTLS module for lighttpd lighttpd-mod-nss - TLS support using NSS crypto module for lighttpd lighttpd-mod-openssl - TLS support using OpenSSL module for lighttpd lighttpd-mod-trigger-b4-dl - anti-deep-linking module for lighttpd lighttpd-mod-vhostdb-pgsql - PostgreSQL-based virtual host configuration module for lighttpd lighttpd-mod-webdav - WebDAV module for lighttpd lighttpd-mod-wolfssl - TLS support using wolfSSL module for lighttpd lighttpd-modules-dbi - DBI-based modules for lighttpd lighttpd-modules-ldap - LDAP-based modules for lighttpd lighttpd-modules-lua - LUA-based modules for lighttpd lighttpd-modules-mysql - MySQL-based modules for lighttpd Launchpad-Bugs-Fixed: 1994989 Changes: lighttpd (1.4.63-1ubuntu3.1) jammy-security; urgency=medium . * SECURITY UPDATE: Out-of-bounds Write - debian/patches/CVE-2022-22707.patch: mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow. (LP: #1994989) - CVE-2022-22707 * SECURITY UPDATE: Resource leak - debian/patches/CVE-2022-41556.patch: Resource leak in gw_backend.c. - CVE-2022-41556 Checksums-Sha1: e11785fa80dcc59cfbaa6dca1fae5a66c71e953b 826182 lighttpd-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb f5e4b68941cf921269eaf261fd19667e38ffe2a9 26902 lighttpd-mod-authn-gssapi-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 1e53c13f98762d27a56bf17b39f85dbca4f6408c 7542 lighttpd-mod-authn-gssapi_1.4.63-1ubuntu3.1_armhf.deb 19b13b51936c0ba448642503ebeb434224cb26c8 14430 lighttpd-mod-authn-pam-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 17fc33c38bcef1172989e541d215b4b14430c8dc 3248 lighttpd-mod-authn-pam_1.4.63-1ubuntu3.1_armhf.deb 75eced23b1cd274eaa2cf333a9fafa9eb7edb926 16588 lighttpd-mod-authn-sasl-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 9e1b3a03cff57f666cf85c0afa862c930eabe3f8 3974 lighttpd-mod-authn-sasl_1.4.63-1ubuntu3.1_armhf.deb 638b36a2f11e9e7994c2e99372298f4260df7c66 33104 lighttpd-mod-deflate-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 134f1b28653d3eb06a55d30b076649bdcf178dc2 10736 lighttpd-mod-deflate_1.4.63-1ubuntu3.1_armhf.deb b1398f824f7e30e927d058980fb1d1b1f68f9db3 15940 lighttpd-mod-geoip-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 11e87dfcfec5a3f211949f2e5f899cf922e29694 4110 lighttpd-mod-geoip_1.4.63-1ubuntu3.1_armhf.deb ebe66ce704c7d76e51ea3556493c60dc15c5e204 18170 lighttpd-mod-maxminddb-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 5a07f3b60702a0729031f4501488f37417c76c2c 4408 lighttpd-mod-maxminddb_1.4.63-1ubuntu3.1_armhf.deb 1182b7e557e088ae5d621cd6f05e8d66dfc7a3c5 58820 lighttpd-mod-mbedtls-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 80c3055ef534705775bf624d4d7b58cedc7b1abd 19652 lighttpd-mod-mbedtls_1.4.63-1ubuntu3.1_armhf.deb 770757d39be71a6ac9fc203712788888104316d8 62030 lighttpd-mod-nss-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb aa16afa380b122bf590a6e36ee2293644c6fd3c1 19924 lighttpd-mod-nss_1.4.63-1ubuntu3.1_armhf.deb 85c69034aff5f465c15d66733826c8df57a3d821 50046 lighttpd-mod-openssl-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 95354cea842f455a7d9772990b658c9ae8635ed8 18584 lighttpd-mod-openssl_1.4.63-1ubuntu3.1_armhf.deb 0cb47afa00e3c9ad78e533540461c37402129112 23172 lighttpd-mod-trigger-b4-dl-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb edbff44d0894466e92ac146ffc1148829046b84d 6434 lighttpd-mod-trigger-b4-dl_1.4.63-1ubuntu3.1_armhf.deb b10787002b5ca7722dd724eef15d7f62173cd86c 15924 lighttpd-mod-vhostdb-pgsql-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 2112121f878e5d76f4602e252bd305cb7cb39d3e 3884 lighttpd-mod-vhostdb-pgsql_1.4.63-1ubuntu3.1_armhf.deb a1311b67440cff749331b8029fceddc8dce3b6f2 85502 lighttpd-mod-webdav-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 00f7ead2c012ae9a6e5b26469ff9d9af301fac7b 24692 lighttpd-mod-webdav_1.4.63-1ubuntu3.1_armhf.deb c8563b8a7cd1024cc13f5ae67be5588073546d9a 64700 lighttpd-mod-wolfssl-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 79e3a870e46109f979a9d261db1bb099d0b60c8d 19644 lighttpd-mod-wolfssl_1.4.63-1ubuntu3.1_armhf.deb 3424e5258e59da948c63134fea38af047f68fe65 29692 lighttpd-modules-dbi-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb b8776bec27d15c6cd6d1c211a0953d80b04108fc 6978 lighttpd-modules-dbi_1.4.63-1ubuntu3.1_armhf.deb 8f4524637ca049a7600cf17847f8f732e333d3e7 34084 lighttpd-modules-ldap-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 7204e10e5d5ad129dda1661cb9586f8624254003 9548 lighttpd-modules-ldap_1.4.63-1ubuntu3.1_armhf.deb 206bcd442b28684040ae780c6d61b49be70a7f55 81352 lighttpd-modules-lua-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 2caad361c3f693d554f0f852e62dc84244352d37 23358 lighttpd-modules-lua_1.4.63-1ubuntu3.1_armhf.deb 988441007f4a578e19fe003a0931b86010cedef2 39984 lighttpd-modules-mysql-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 76ed45fbb5680cc6d08a453fb5c48694e69df1ce 9184 lighttpd-modules-mysql_1.4.63-1ubuntu3.1_armhf.deb 0ad7a554284997360d38d263598d2fca01c39fa5 20530 lighttpd_1.4.63-1ubuntu3.1_armhf.buildinfo 1db08680cae72ddb7b653da9e3050311dbe78c0d 348702 lighttpd_1.4.63-1ubuntu3.1_armhf.deb Checksums-Sha256: 0dc0b27d2d8e0b224c11345ee9709b424bcd479702c23829c540d4b6e627c963 826182 lighttpd-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 4c4dff5bcd7d17916b49d8f418210f8923fe27cf5d29f7cb9aafd3a4ea2b1bb8 26902 lighttpd-mod-authn-gssapi-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 9c2b7a231b45b1ed1b26ff492fdd5d79ec273c224cae7a4aa457fd9fa474c94f 7542 lighttpd-mod-authn-gssapi_1.4.63-1ubuntu3.1_armhf.deb 9e513f998ada0af9ff18d037820b080f4e91ff1325138cab2d48eeb649683a36 14430 lighttpd-mod-authn-pam-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb b50d161cce00e8db5ffdcddedb5d09df156f8cec8e75009c4b226957d8d6fc1d 3248 lighttpd-mod-authn-pam_1.4.63-1ubuntu3.1_armhf.deb 7b6d3f95912b813a9d386bd6677e6134c465d3b2ac40b021ac68ca9e9ece8039 16588 lighttpd-mod-authn-sasl-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb c41d9b97bba24cbae227bc1ea4b2e30d9bd3a163e750df07c475bfb2a61146db 3974 lighttpd-mod-authn-sasl_1.4.63-1ubuntu3.1_armhf.deb 5805ac50b825ed1e713faf90e0aad8f1d62dc74dd3ad4ec87c1763031e89599e 33104 lighttpd-mod-deflate-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 77bda91ff395846379a7ac555ca2cd90d4faf1afdcd82f8caae48d9e3083b25d 10736 lighttpd-mod-deflate_1.4.63-1ubuntu3.1_armhf.deb 0009f1a912ac7c37e18a20507331c3254785f9879dea47c653f98f091bfc2a97 15940 lighttpd-mod-geoip-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 27d80aae1bb86af7de3eb7f7ce7a876aa4b8c8f9c07f7a3c3e484507057d4e79 4110 lighttpd-mod-geoip_1.4.63-1ubuntu3.1_armhf.deb 0884f761d34aa51c6a3b9a0821aee9373f7589b273e8ae916275fbe3e8f95aba 18170 lighttpd-mod-maxminddb-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 711d598a764646652d9edb9481ea6106522ebcc1ca205baad0bd8f55681c6b6c 4408 lighttpd-mod-maxminddb_1.4.63-1ubuntu3.1_armhf.deb 54536ba66611f8a05bd1851f54435d3127f962dd4b0a389c4aec1744ce9ac7fc 58820 lighttpd-mod-mbedtls-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 67388ee5a255284acf02dbb0fa0efecb2f86be6ce69bea93aca620a8363badb8 19652 lighttpd-mod-mbedtls_1.4.63-1ubuntu3.1_armhf.deb e9f55e5270f0667ad15663c84da550958c7e328a05cbae4ae549f31b5dc4010d 62030 lighttpd-mod-nss-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 4dc9d2bf8591a339ebd3658f69524783bf052dd80386e18df80186100edef854 19924 lighttpd-mod-nss_1.4.63-1ubuntu3.1_armhf.deb d037d6e311d1c08c62b04579a8a7836f7c228d84b945c212d5dc056fec92ecd2 50046 lighttpd-mod-openssl-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb bf3eeccc4583b8e20788845c0c813d53cbcbce9a8ed754ec4e94ef9c162e62a9 18584 lighttpd-mod-openssl_1.4.63-1ubuntu3.1_armhf.deb 51a4b4f66c475292dc9537f0e3dd3ee683e163b16c0eafa88a0d57adb65fe015 23172 lighttpd-mod-trigger-b4-dl-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 008e353eefe2629beeaca48368d313817a9a4f93426e1af883590d834bc83957 6434 lighttpd-mod-trigger-b4-dl_1.4.63-1ubuntu3.1_armhf.deb adb15f16c49af18a2b95235730cb1152a9d62a66cd5120a4b3ca9e872a61f7f8 15924 lighttpd-mod-vhostdb-pgsql-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb eba095437d5fde433da3a275658ded70b9249912dbf9960270bca81e82fb61e7 3884 lighttpd-mod-vhostdb-pgsql_1.4.63-1ubuntu3.1_armhf.deb 980ef8a13c8fe9b7b91f53144c084110504220ec31a74e022036b4f13b24b36e 85502 lighttpd-mod-webdav-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 9fe2b1d2a97ecdaafccf5849847354144e94265c8555976aba3b7f847b7f66ca 24692 lighttpd-mod-webdav_1.4.63-1ubuntu3.1_armhf.deb f961eaa513ac7a7cda7f4fc2cd81cf9fa645425a50cf1a11dccf955212fbfd7a 64700 lighttpd-mod-wolfssl-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 274f9ebe91417e4b1568b823adc493a8d3d4ea6a2b8a6a0057c58e52934585c1 19644 lighttpd-mod-wolfssl_1.4.63-1ubuntu3.1_armhf.deb 84c29dd4d4a1db571a504a13822a4cadf02460c384b1639d24c6f4479e115402 29692 lighttpd-modules-dbi-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 540456617c49da0b52b45c4cdc3e7c0d6e241dfbe755a5927a26f6ead9d386fb 6978 lighttpd-modules-dbi_1.4.63-1ubuntu3.1_armhf.deb 00ac85367fab2e2da8fa0a1be62e84d00654a6c9b1fefafe36683239c85f6b67 34084 lighttpd-modules-ldap-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb b4ba24dab122f8b2124cd80f0741dd08af0c9870d796fcc3123b86965cf3d8be 9548 lighttpd-modules-ldap_1.4.63-1ubuntu3.1_armhf.deb 97d73710ced3549e3ef50681b7583de75be2044c27c9897cffb672243366b943 81352 lighttpd-modules-lua-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 19c21e8c3f4680a261e494997baed098895a1d2cc17bdecb2957f982ade81d17 23358 lighttpd-modules-lua_1.4.63-1ubuntu3.1_armhf.deb 4879b47de35af5eb3fa7346264af9b3f6a74fbcaf369b55d8a25a744e5d9c9e6 39984 lighttpd-modules-mysql-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb dedfedab0ee4770412e7f60cf5b45d33bf6e770db66617ecce0d666438c5a10c 9184 lighttpd-modules-mysql_1.4.63-1ubuntu3.1_armhf.deb 97b6e4cea470e5087fed47abc8bafba47053a4803a798a6ec5e463919cd591a4 20530 lighttpd_1.4.63-1ubuntu3.1_armhf.buildinfo 892576e9594cb7385e14a061224ea30bb0b85869f99c33b6fdbb84d4031b381b 348702 lighttpd_1.4.63-1ubuntu3.1_armhf.deb Files: 7ca5a2bb140e6fb4573a2888f9cd138c 826182 debug optional lighttpd-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 5c477b1b174b24d461b21ca92bb26bff 26902 debug optional lighttpd-mod-authn-gssapi-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 25b9962fb46eef90a7c8ad3ea2a7729d 7542 httpd optional lighttpd-mod-authn-gssapi_1.4.63-1ubuntu3.1_armhf.deb b3815fec05a35ca99dc065a4a1a2d511 14430 debug optional lighttpd-mod-authn-pam-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 726048757e67584428467be70b4cda0d 3248 httpd optional lighttpd-mod-authn-pam_1.4.63-1ubuntu3.1_armhf.deb 68fcecaae440892b4739878565c1af43 16588 debug optional lighttpd-mod-authn-sasl-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 6b9e7bf02b5e6bc76cc920d66b6969cb 3974 httpd optional lighttpd-mod-authn-sasl_1.4.63-1ubuntu3.1_armhf.deb 16035f08e19871bef8d2dbbf8e7eb346 33104 debug optional lighttpd-mod-deflate-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb bcc6c7d6cadc377f6f5f22ea672e5355 10736 httpd optional lighttpd-mod-deflate_1.4.63-1ubuntu3.1_armhf.deb 07580900156f31c891e66e1882a8d6c0 15940 debug optional lighttpd-mod-geoip-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 7493f00cee3e94612c536e1047cfe16d 4110 httpd optional lighttpd-mod-geoip_1.4.63-1ubuntu3.1_armhf.deb dc2daa383ec8c86faaad5eab4e6c4a25 18170 debug optional lighttpd-mod-maxminddb-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb e5d3f88a22bd048d5590eb8e65971290 4408 httpd optional lighttpd-mod-maxminddb_1.4.63-1ubuntu3.1_armhf.deb 660cf2b5d5d7e5d042fa1a679330397f 58820 debug optional lighttpd-mod-mbedtls-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb fa23b16bc4ffe65b25043f998ce9b092 19652 httpd optional lighttpd-mod-mbedtls_1.4.63-1ubuntu3.1_armhf.deb bf4921e55b1c496edb24249b15819bbb 62030 debug optional lighttpd-mod-nss-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 9f939e65450e4db41a962521e98c4271 19924 httpd optional lighttpd-mod-nss_1.4.63-1ubuntu3.1_armhf.deb 11c2d3ee4d2d85b6abe076c16fd105e4 50046 debug optional lighttpd-mod-openssl-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb c110bf0c516065f5315cbcd151c09a2d 18584 httpd optional lighttpd-mod-openssl_1.4.63-1ubuntu3.1_armhf.deb c7c2ae055c69e5cebb7811ebb69d08f9 23172 debug optional lighttpd-mod-trigger-b4-dl-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb ef960d1046ed00ca464e76dd41399939 6434 httpd optional lighttpd-mod-trigger-b4-dl_1.4.63-1ubuntu3.1_armhf.deb 7d624ba956a704ba22ce3535ca8268ed 15924 debug optional lighttpd-mod-vhostdb-pgsql-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb e5f63319f94988de0fbab278164a7bf9 3884 httpd optional lighttpd-mod-vhostdb-pgsql_1.4.63-1ubuntu3.1_armhf.deb 2159605522cb87c62ceb91f10b162c0d 85502 debug optional lighttpd-mod-webdav-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 0112854e7d0cf2d8ca91cac2f3466367 24692 httpd optional lighttpd-mod-webdav_1.4.63-1ubuntu3.1_armhf.deb edcb462c781b68e830c465e9ac8114e6 64700 debug optional lighttpd-mod-wolfssl-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 782eb631fe3d96490304fc6bb4b0726f 19644 httpd optional lighttpd-mod-wolfssl_1.4.63-1ubuntu3.1_armhf.deb 7357e924180216778a34a8455b779e18 29692 debug optional lighttpd-modules-dbi-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 1c194378a2ca572bb1c449621e37ad41 6978 httpd optional lighttpd-modules-dbi_1.4.63-1ubuntu3.1_armhf.deb e50800bd7cba8416a1c06c6160247280 34084 debug optional lighttpd-modules-ldap-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 467fdba1a2c2f37e50bb759568f443eb 9548 httpd optional lighttpd-modules-ldap_1.4.63-1ubuntu3.1_armhf.deb 70fa8d4e5acf792fe4262c1577b321da 81352 debug optional lighttpd-modules-lua-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb 155f745a519a10b0a4f135cdf3dc048d 23358 httpd optional lighttpd-modules-lua_1.4.63-1ubuntu3.1_armhf.deb 613741c07475fc75e71077d015bef243 39984 debug optional lighttpd-modules-mysql-dbgsym_1.4.63-1ubuntu3.1_armhf.ddeb d6688a166d83d68ab47ccf76c425064d 9184 httpd optional lighttpd-modules-mysql_1.4.63-1ubuntu3.1_armhf.deb d8f2261cfdca2e6ae25cb614b46c11ce 20530 httpd optional lighttpd_1.4.63-1ubuntu3.1_armhf.buildinfo a9995a1b8f412b2a97f880b762da0b19 348702 httpd optional lighttpd_1.4.63-1ubuntu3.1_armhf.deb Original-Maintainer: Debian lighttpd maintainers