Format: 1.8 Date: Thu, 16 Feb 2023 20:09:14 -0600 Source: lighttpd Binary: lighttpd lighttpd-dev lighttpd-doc lighttpd-mod-authn-gssapi lighttpd-mod-authn-pam lighttpd-mod-authn-sasl lighttpd-mod-cml lighttpd-mod-geoip lighttpd-mod-magnet lighttpd-mod-maxminddb lighttpd-mod-trigger-b4-dl lighttpd-mod-vhostdb-dbi lighttpd-mod-vhostdb-pgsql lighttpd-mod-webdav lighttpd-modules-ldap lighttpd-modules-mysql Architecture: amd64 all Version: 1.4.55-1ubuntu1.20.04.2 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Jack Fewx Description: lighttpd - fast webserver with minimal memory footprint lighttpd-dev - Development files for lighttpd lighttpd-doc - documentation for lighttpd lighttpd-mod-authn-gssapi - GSSAPI authentication for lighttpd lighttpd-mod-authn-pam - PAM authentication for lighttpd lighttpd-mod-authn-sasl - SASL authentication for lighttpd lighttpd-mod-cml - cache meta language module for lighttpd lighttpd-mod-geoip - GeoIP restrictions for lighttpd lighttpd-mod-magnet - control the request handling module for lighttpd lighttpd-mod-maxminddb - GeoIP2 restrictions for lighttpd lighttpd-mod-trigger-b4-dl - anti-deep-linking module for lighttpd lighttpd-mod-vhostdb-dbi - DBI-based virtual host configuration for lighttpd lighttpd-mod-vhostdb-pgsql - PostgreSQL-based virtual host configuration for lighttpd lighttpd-mod-webdav - WebDAV module for lighttpd lighttpd-modules-ldap - LDAP-based modules for lighttpd lighttpd-modules-mysql - MySQL-based modules for lighttpd Launchpad-Bugs-Fixed: 1994989 Changes: lighttpd (1.4.55-1ubuntu1.20.04.2) focal-security; urgency=medium . * SECURITY UPDATE: Out-of-bounds Write - debian/patches/CVE-2022-22707.patch: mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow. (LP: #1994989) - CVE-2022-22707 Checksums-Sha1: 69e46be30158c934f951200fcf294dbc77daa22c 1132380 lighttpd-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 38ff0eb61269aab149160d3df39bb44f16d15e7c 34620 lighttpd-dev_1.4.55-1ubuntu1.20.04.2_amd64.deb 1b8893ab32a267107032589fa1dec548f79e7a12 95856 lighttpd-doc_1.4.55-1ubuntu1.20.04.2_all.deb ba3f11ac96e496a6a3344a1f415d38180ea66d6e 28248 lighttpd-mod-authn-gssapi-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 6cc65d85efadd5dc20565ba94d4822cc3d4ae5f5 10584 lighttpd-mod-authn-gssapi_1.4.55-1ubuntu1.20.04.2_amd64.deb a278fa58d0943e5195684ed531489e3afb407a35 15196 lighttpd-mod-authn-pam-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 9d0bdb62147bf2510884baa39af144e4407a0599 4004 lighttpd-mod-authn-pam_1.4.55-1ubuntu1.20.04.2_amd64.deb 6c77e2056fc084718d57859cd76155fb58ff5145 16420 lighttpd-mod-authn-sasl-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb fbabfa1c2cf21e92a54cbeb68fb33b13a2b5a597 4540 lighttpd-mod-authn-sasl_1.4.55-1ubuntu1.20.04.2_amd64.deb 6062a77be8903d78e04295e7409251b1b9545eeb 37740 lighttpd-mod-cml-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 078dff10dea8c54177b2bfc49c238a340c210ab0 11108 lighttpd-mod-cml_1.4.55-1ubuntu1.20.04.2_amd64.deb e08711153596268482af4e75063b634582b068f2 16644 lighttpd-mod-geoip-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb ab26841be5af49bccf8f1378300b5521bdef0caf 6416 lighttpd-mod-geoip_1.4.55-1ubuntu1.20.04.2_amd64.deb 61c5fb5f575161927e022fda887ce69b79e174c2 36384 lighttpd-mod-magnet-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 2edc7ab1759f51f1a2c0c90e952f8c5a2985cfff 12560 lighttpd-mod-magnet_1.4.55-1ubuntu1.20.04.2_amd64.deb 919c6580540cd24bf658474229184561786b42d0 18984 lighttpd-mod-maxminddb-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 32c4bc5aa10f2660369992f713c9a7d052826338 5240 lighttpd-mod-maxminddb_1.4.55-1ubuntu1.20.04.2_amd64.deb 6e64a308942083cb98a8cff1b34136e0d54846b8 23992 lighttpd-mod-trigger-b4-dl-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 7838a9ad9e316fb1075f8433ab33cb8a1f1d0bd2 8872 lighttpd-mod-trigger-b4-dl_1.4.55-1ubuntu1.20.04.2_amd64.deb 06fdb91610743cad12e6db1c68ba11a5eb3cf83e 16708 lighttpd-mod-vhostdb-dbi-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 01f17d14b5715c37494d023fd2bf8c3c616878bd 4948 lighttpd-mod-vhostdb-dbi_1.4.55-1ubuntu1.20.04.2_amd64.deb 4241caf26c08277df7a93776927d8902d1a59839 16792 lighttpd-mod-vhostdb-pgsql-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 43c375579784fba35f9e2233fd2b3eff6e0691e6 4564 lighttpd-mod-vhostdb-pgsql_1.4.55-1ubuntu1.20.04.2_amd64.deb 3c831d1a960522537f6b837375a8a23d42962f42 89804 lighttpd-mod-webdav-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb c87ce8c31ff7ef8752237799fd4e642288cbbc60 28284 lighttpd-mod-webdav_1.4.55-1ubuntu1.20.04.2_amd64.deb c3a3662495a47154211e770a579a49ad5c313f3f 40956 lighttpd-modules-ldap-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 308d1ce9c50a56bd9a33d76d2aee379aaa900c4f 10276 lighttpd-modules-ldap_1.4.55-1ubuntu1.20.04.2_amd64.deb 45cd7dec66359096d24d3dc9001a84a6e046df8a 60088 lighttpd-modules-mysql-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb a533168188f2d4b85f7b6603d0ea6639f51cb38b 10820 lighttpd-modules-mysql_1.4.55-1ubuntu1.20.04.2_amd64.deb 9ca5ed75ac1bfb69753cd5b81e46150734ed43b4 18928 lighttpd_1.4.55-1ubuntu1.20.04.2_amd64.buildinfo 20383b039996cc7dbd8a9635f4d9a648a1ba9395 323688 lighttpd_1.4.55-1ubuntu1.20.04.2_amd64.deb Checksums-Sha256: fe572948fd8fa20300c52198b90f7c0519be4ab621ecc12f2a4ba4a2b3dd3e26 1132380 lighttpd-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 34ec16e16cf4e5d57242505d81be907149417747c4e5e020d91110b9c785dcf0 34620 lighttpd-dev_1.4.55-1ubuntu1.20.04.2_amd64.deb 6aaee12537d4a009c4b06b5cab6c5a0697cb50b0df5862c44030a6d4a6836acb 95856 lighttpd-doc_1.4.55-1ubuntu1.20.04.2_all.deb d933efefb5a31fccb15fd4ce4b471ddd093019270eb184a32f2934b685b3e3ee 28248 lighttpd-mod-authn-gssapi-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb bbbad8f8c26d764a53c77cda7a2fcb3c69a1804059de4331e4ef5571857f9f25 10584 lighttpd-mod-authn-gssapi_1.4.55-1ubuntu1.20.04.2_amd64.deb 1fd2d5c669d67fb19d088b7176144f6c293f1131bb32d953a67156912f02c4b2 15196 lighttpd-mod-authn-pam-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 315f6d31de7964edae5a0d0c0f5282c91c701752dc63171735dc8bd39c62161d 4004 lighttpd-mod-authn-pam_1.4.55-1ubuntu1.20.04.2_amd64.deb 2d16fb2b3af1574f9598d6f33b9bbf4e638577d9220088e073049042222f691f 16420 lighttpd-mod-authn-sasl-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 64e795b6b430ef20627a0792394b10bcdd3e1a9800aded34861294510fd2fe1e 4540 lighttpd-mod-authn-sasl_1.4.55-1ubuntu1.20.04.2_amd64.deb d7a3991afa6fe328da0680e7dbf8fdedf84aa007d15c8aabfdf252d481b15b8d 37740 lighttpd-mod-cml-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb a8aa4576b1e7f0f95625d7db3a8b572351b626512f8f8a266c9f5c6bf61294f9 11108 lighttpd-mod-cml_1.4.55-1ubuntu1.20.04.2_amd64.deb 41988b5ca71456811fc7336784ccacabfc19d71e046d3a252c5e01c36c1d319b 16644 lighttpd-mod-geoip-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb cd662670d19d6303edbc1e323408879920dd00d03d1d9c110a236ad79e10aecc 6416 lighttpd-mod-geoip_1.4.55-1ubuntu1.20.04.2_amd64.deb e04ea9563d2e2c1335d478b0a03a0300ef82d6e5f09740a33ddb30a14c69edac 36384 lighttpd-mod-magnet-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb abca59f171b31ba3f170db85e9e62698c3a098f55da909f9c7a5ecbb8f32409e 12560 lighttpd-mod-magnet_1.4.55-1ubuntu1.20.04.2_amd64.deb 2de292080e121e1e3360a14d0bfd5ca3ce9f22746f06eda66f63788e14442dd2 18984 lighttpd-mod-maxminddb-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 9c89b58ddafbe65f2c635e771bfef006f3bfb1afead0c9196c9630aa699a995a 5240 lighttpd-mod-maxminddb_1.4.55-1ubuntu1.20.04.2_amd64.deb d62c1117f0a17cb05c41778c7774a80356ba76f2e977bfdc8e8e53b071b4aaa8 23992 lighttpd-mod-trigger-b4-dl-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 734b784191d5b4eb031094652e55150f553b846de2175e0c3411e7a2de35c67e 8872 lighttpd-mod-trigger-b4-dl_1.4.55-1ubuntu1.20.04.2_amd64.deb 0860b2b32e0ada8dd73c11dc7698006e160ef1e95c4c3767831e692ddef82b76 16708 lighttpd-mod-vhostdb-dbi-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb e7638d45b1f288bd47442ee67651b194c3b4466fe43df030486760af5d7ca6f9 4948 lighttpd-mod-vhostdb-dbi_1.4.55-1ubuntu1.20.04.2_amd64.deb 9495c333ca8c51fd576112575065f42b24ef31dc05ed7711d6031aa753e386c4 16792 lighttpd-mod-vhostdb-pgsql-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb d83dcb3b515bf058ba8575c6561574b33e93763c3f5e8f88d6f62eb5261a69ed 4564 lighttpd-mod-vhostdb-pgsql_1.4.55-1ubuntu1.20.04.2_amd64.deb 64a4f7b108352ee5de8a1e0d78529c7c02671547e079a3d1f0c2a9ef761f1a5b 89804 lighttpd-mod-webdav-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 2730c1ea4f004a042752fd9c490f9abb991f071b6cd8e99471b7254ad750b8cc 28284 lighttpd-mod-webdav_1.4.55-1ubuntu1.20.04.2_amd64.deb 8bb3c52bcab70ab202ebd1abd745272f1c3f9783953f7d0f0a227f2019170a09 40956 lighttpd-modules-ldap-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 58c27f2fcb4a932e44ca93b99728a5a4b7784adeb7444975e3874d4b2d424609 10276 lighttpd-modules-ldap_1.4.55-1ubuntu1.20.04.2_amd64.deb 98f6d64fd5118b6f17ed4fce48116269688ba7c504b812bdf50edce20ea06cb9 60088 lighttpd-modules-mysql-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb ebb2b02600d0c1774aa7bc758fcbbda95cc388ff913e0048ae033ef2c4388e72 10820 lighttpd-modules-mysql_1.4.55-1ubuntu1.20.04.2_amd64.deb 5332cda38eb9d5930bdd25a9ca130c8fdd57481026b040270287ec9ae884e6ce 18928 lighttpd_1.4.55-1ubuntu1.20.04.2_amd64.buildinfo 41e03e78b43fce630b665c63ccf5bae9ad75b0ea71adc9b427768d33af696ac6 323688 lighttpd_1.4.55-1ubuntu1.20.04.2_amd64.deb Files: b6ce6efba26772e8498aae3f710b802a 1132380 debug optional lighttpd-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 892363974eac14f3f2aeb4602e4850e1 34620 httpd optional lighttpd-dev_1.4.55-1ubuntu1.20.04.2_amd64.deb d815e45922720b32c2bc037491cfe276 95856 doc optional lighttpd-doc_1.4.55-1ubuntu1.20.04.2_all.deb 8957932102a072c3a041ae10fb1a9ff9 28248 debug optional lighttpd-mod-authn-gssapi-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 604bb60718c6549351e250bd627a3fb2 10584 httpd optional lighttpd-mod-authn-gssapi_1.4.55-1ubuntu1.20.04.2_amd64.deb 12cc3752cf87ebc468dd633feb663bd3 15196 debug optional lighttpd-mod-authn-pam-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb a26136d56770b301240eaee8522df34a 4004 httpd optional lighttpd-mod-authn-pam_1.4.55-1ubuntu1.20.04.2_amd64.deb 8632da7cd1d6c9f7339a7189111a5a1f 16420 debug optional lighttpd-mod-authn-sasl-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 8bd5eaa94cfbcbe280c06e4af005aef9 4540 httpd optional lighttpd-mod-authn-sasl_1.4.55-1ubuntu1.20.04.2_amd64.deb 6d106ea7dd91844509d93387c170671f 37740 debug optional lighttpd-mod-cml-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb e8ae4f984de4db1be65d4a943ccb0d2d 11108 httpd optional lighttpd-mod-cml_1.4.55-1ubuntu1.20.04.2_amd64.deb 8abdac1f181f969c7488751ba30c1348 16644 debug optional lighttpd-mod-geoip-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 12aca4ab47b19b88790a657dc1abb340 6416 httpd optional lighttpd-mod-geoip_1.4.55-1ubuntu1.20.04.2_amd64.deb b2c86e0095e8d93bd6d2cbfd04985fd3 36384 debug optional lighttpd-mod-magnet-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 728ea557e4caaf648ab14c1c8a281877 12560 httpd optional lighttpd-mod-magnet_1.4.55-1ubuntu1.20.04.2_amd64.deb ddc4e5822e11f90e19c9a733c38be49f 18984 debug optional lighttpd-mod-maxminddb-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 4b6da9f4312964b2a8c7ecd163c80251 5240 httpd optional lighttpd-mod-maxminddb_1.4.55-1ubuntu1.20.04.2_amd64.deb 3012b3db67dc83b2156eec5ca4371601 23992 debug optional lighttpd-mod-trigger-b4-dl-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb a8d4b05da72a833510ac6033785d6378 8872 httpd optional lighttpd-mod-trigger-b4-dl_1.4.55-1ubuntu1.20.04.2_amd64.deb 82386f096e87bd12ce8a3ac4f0523e53 16708 debug optional lighttpd-mod-vhostdb-dbi-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb d9696793133cfb637d179714e8e72908 4948 httpd optional lighttpd-mod-vhostdb-dbi_1.4.55-1ubuntu1.20.04.2_amd64.deb 6c50c7acabb35d0eed9d5d96e795f3e4 16792 debug optional lighttpd-mod-vhostdb-pgsql-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 2a89e28fe3ef335da2ed4a7ce7a05a01 4564 httpd optional lighttpd-mod-vhostdb-pgsql_1.4.55-1ubuntu1.20.04.2_amd64.deb f78d7f3b24094a582ad51f0e13fb99b6 89804 debug optional lighttpd-mod-webdav-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb eb368dedccb72b45226603f683f6997f 28284 httpd optional lighttpd-mod-webdav_1.4.55-1ubuntu1.20.04.2_amd64.deb fc36c7c756a7c8e3e476bd95079c1ec6 40956 debug optional lighttpd-modules-ldap-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 7654f2129a2d2890e6d6177d43fdc647 10276 httpd optional lighttpd-modules-ldap_1.4.55-1ubuntu1.20.04.2_amd64.deb 7fc826e4e20b9d4aa03c078b69509fab 60088 debug optional lighttpd-modules-mysql-dbgsym_1.4.55-1ubuntu1.20.04.2_amd64.ddeb 13a207beb464276e6b9a24c71b58f814 10820 httpd optional lighttpd-modules-mysql_1.4.55-1ubuntu1.20.04.2_amd64.deb ac1ec72935d755423406a45fa6e94923 18928 httpd optional lighttpd_1.4.55-1ubuntu1.20.04.2_amd64.buildinfo 79a9671d9b75450249308f87c51b4e26 323688 httpd optional lighttpd_1.4.55-1ubuntu1.20.04.2_amd64.deb Original-Maintainer: Debian lighttpd maintainers