Format: 1.8 Date: Thu, 16 Feb 2023 20:09:14 -0600 Source: lighttpd Binary: lighttpd lighttpd-dev lighttpd-mod-authn-gssapi lighttpd-mod-authn-pam lighttpd-mod-authn-sasl lighttpd-mod-cml lighttpd-mod-geoip lighttpd-mod-magnet lighttpd-mod-maxminddb lighttpd-mod-trigger-b4-dl lighttpd-mod-vhostdb-dbi lighttpd-mod-vhostdb-pgsql lighttpd-mod-webdav lighttpd-modules-ldap lighttpd-modules-mysql Architecture: riscv64 Version: 1.4.55-1ubuntu1.20.04.2 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Jack Fewx Description: lighttpd - fast webserver with minimal memory footprint lighttpd-dev - Development files for lighttpd lighttpd-mod-authn-gssapi - GSSAPI authentication for lighttpd lighttpd-mod-authn-pam - PAM authentication for lighttpd lighttpd-mod-authn-sasl - SASL authentication for lighttpd lighttpd-mod-cml - cache meta language module for lighttpd lighttpd-mod-geoip - GeoIP restrictions for lighttpd lighttpd-mod-magnet - control the request handling module for lighttpd lighttpd-mod-maxminddb - GeoIP2 restrictions for lighttpd lighttpd-mod-trigger-b4-dl - anti-deep-linking module for lighttpd lighttpd-mod-vhostdb-dbi - DBI-based virtual host configuration for lighttpd lighttpd-mod-vhostdb-pgsql - PostgreSQL-based virtual host configuration for lighttpd lighttpd-mod-webdav - WebDAV module for lighttpd lighttpd-modules-ldap - LDAP-based modules for lighttpd lighttpd-modules-mysql - MySQL-based modules for lighttpd Launchpad-Bugs-Fixed: 1994989 Changes: lighttpd (1.4.55-1ubuntu1.20.04.2) focal-security; urgency=medium . * SECURITY UPDATE: Out-of-bounds Write - debian/patches/CVE-2022-22707.patch: mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow. (LP: #1994989) - CVE-2022-22707 Checksums-Sha1: cdcde04440c84e22b8ef3e07daadf91be2e81574 1116288 lighttpd-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 987d0a20c5d65c0bc58618b0faf754cd85aad54e 34624 lighttpd-dev_1.4.55-1ubuntu1.20.04.2_riscv64.deb 02b1b32f2c0a3597b1bd557b67d73c768548c0fe 27720 lighttpd-mod-authn-gssapi-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 686a3ccf373b605c1c031e2d82a8664b82ed6377 9352 lighttpd-mod-authn-gssapi_1.4.55-1ubuntu1.20.04.2_riscv64.deb 292696436de6f942e697a76781cd93abcefc645d 15224 lighttpd-mod-authn-pam-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 38311c1c756d99d15239facb4f9689cf7ff794c9 3500 lighttpd-mod-authn-pam_1.4.55-1ubuntu1.20.04.2_riscv64.deb a33aa7bed3fa8ee8a4da5ce3b4c6ab23eb7b2511 16584 lighttpd-mod-authn-sasl-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb c8d38ecbd136dfb9eb4c636705db9ef50d2269d3 3996 lighttpd-mod-authn-sasl_1.4.55-1ubuntu1.20.04.2_riscv64.deb edda6eea6078fe7c631b4e8b327e4bbc7d4b7eab 38464 lighttpd-mod-cml-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb a71df941d896cc3d6744d5c4c1b7d6ac2837c833 10036 lighttpd-mod-cml_1.4.55-1ubuntu1.20.04.2_riscv64.deb 0f5ac86fb96606e7e7620adc44b4e34d0ab23a81 16784 lighttpd-mod-geoip-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 3dda3e7bae53b6484f43d965a1f6a5727ad65056 5876 lighttpd-mod-geoip_1.4.55-1ubuntu1.20.04.2_riscv64.deb 91a798bbab899b25c04f76cfd05dce9edd4d3606 36640 lighttpd-mod-magnet-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 4b57306bd329caa839e491c762b85857b240aea9 11004 lighttpd-mod-magnet_1.4.55-1ubuntu1.20.04.2_riscv64.deb c623789b878274354579a5d5dcd4dd5c5161cde1 18744 lighttpd-mod-maxminddb-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb d418ec2ef3fb169fe9344944086d185479de4351 4500 lighttpd-mod-maxminddb_1.4.55-1ubuntu1.20.04.2_riscv64.deb a9182e5554dc729c26bb7171663caabbfec5a6b5 23888 lighttpd-mod-trigger-b4-dl-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 3c0bec40f1c50e5d6ed06a9d2441d4ef7496ab27 8080 lighttpd-mod-trigger-b4-dl_1.4.55-1ubuntu1.20.04.2_riscv64.deb 8bdb540f9306c0b4a1221e10613c72d423969280 16796 lighttpd-mod-vhostdb-dbi-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 050eba8887c91a79691bf2e55917fdfc7e1d1d75 4268 lighttpd-mod-vhostdb-dbi_1.4.55-1ubuntu1.20.04.2_riscv64.deb b6674ecbc1aea0b9aae3c1185d69a232edfd2aba 16872 lighttpd-mod-vhostdb-pgsql-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 3aee74fbbd85ce0176dfaab71eda79c3dbb768ce 3996 lighttpd-mod-vhostdb-pgsql_1.4.55-1ubuntu1.20.04.2_riscv64.deb 3f500534a8c68869aefe9fd46b301aa0fc560b53 87468 lighttpd-mod-webdav-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb ccbb3e52fd46f2b330ba18cfe559ee011d172024 25308 lighttpd-mod-webdav_1.4.55-1ubuntu1.20.04.2_riscv64.deb e42f71a61a0d44645d1de979cc4603f4a5df2790 40628 lighttpd-modules-ldap-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 7189fda9ba5f02ad3e57798b124833163b590b32 8960 lighttpd-modules-ldap_1.4.55-1ubuntu1.20.04.2_riscv64.deb 64e843df92804c865f8c499ae653e920dbce593d 59896 lighttpd-modules-mysql-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 32215ecbb73107bdd1b1e9848d118dfeef4a69cf 9488 lighttpd-modules-mysql_1.4.55-1ubuntu1.20.04.2_riscv64.deb 1d47db50a31021c5858b39ba869cb426c8e7ea30 18531 lighttpd_1.4.55-1ubuntu1.20.04.2_riscv64.buildinfo 12be9ed55d5df3025b13dc190566d9d6bdf917ad 292336 lighttpd_1.4.55-1ubuntu1.20.04.2_riscv64.deb Checksums-Sha256: 89f411ed0724423676e580028b6293b446da0a85fdf3080956bbe0e9f5fa9ac3 1116288 lighttpd-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 01091be97192d05439348f536772f7f171660c5d7eb259928c08016f92df2650 34624 lighttpd-dev_1.4.55-1ubuntu1.20.04.2_riscv64.deb 19d94974708cd662adaf9fb0a51d411afed75f0c2cbc07a3e207456c8a9eee57 27720 lighttpd-mod-authn-gssapi-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb f6c64ffff7026d45371b483461c354dba8949614eaaabeea6ba041449586d3bc 9352 lighttpd-mod-authn-gssapi_1.4.55-1ubuntu1.20.04.2_riscv64.deb ddb683af4c269934d4f6661f7052e600b625fddaf9c526a4dd618cc7d6e3b412 15224 lighttpd-mod-authn-pam-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 2d55f227ecd128d8eb87b520be4fd23d76ddb3d8c9f9509db7d5a24150bf95d3 3500 lighttpd-mod-authn-pam_1.4.55-1ubuntu1.20.04.2_riscv64.deb ebec1cf489558c290363bbaeb7a5231a94159671609f1a5134a304d1e0af7da8 16584 lighttpd-mod-authn-sasl-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb bd6b2d97a9735eb740f6a9d51d7ce4f813e58e86974b87812de7db830504ff8b 3996 lighttpd-mod-authn-sasl_1.4.55-1ubuntu1.20.04.2_riscv64.deb a08489bbba532c47076f60e53b56db8556a1ef1d0c46835546a541c9c1fbe741 38464 lighttpd-mod-cml-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 3647772b885d74caba6af4aa8a53a799e5e497dfb8c636096fce969a50ee759e 10036 lighttpd-mod-cml_1.4.55-1ubuntu1.20.04.2_riscv64.deb 68873c26d49203fd187ca390d33c38119c7d7663da0c8a327efdc521f962b216 16784 lighttpd-mod-geoip-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb f4b96fd51363fb47c5080a0972070a4515d082c0ae6c7a2ae06b92791d1491ef 5876 lighttpd-mod-geoip_1.4.55-1ubuntu1.20.04.2_riscv64.deb 0ce374a3ee95815c41e9f447998cc5e272d553a5d36267266cd08767f10ff59a 36640 lighttpd-mod-magnet-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb a0bbc685ac0eea3927264b7b948e7119873bcfc007bb77438de4b89f63786bb5 11004 lighttpd-mod-magnet_1.4.55-1ubuntu1.20.04.2_riscv64.deb 08f06d3768bb3daeef86d002b8aaff7a59912362125c6cc9ac60102f13f415e7 18744 lighttpd-mod-maxminddb-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb a9c3c35448f3c3e4018a3d931e602af0cb1666a45514252facb6871c9803b3c5 4500 lighttpd-mod-maxminddb_1.4.55-1ubuntu1.20.04.2_riscv64.deb 4c1818cf55c69a4007800feda45d446b4dee45b233c0b20a06557a148dd5ca6c 23888 lighttpd-mod-trigger-b4-dl-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 564a0f1aba89ce25bed2fc81583e849e2137dbfdc71252decf691b26e102182b 8080 lighttpd-mod-trigger-b4-dl_1.4.55-1ubuntu1.20.04.2_riscv64.deb 11f29a0018ec308e16887559ca01e40f04257a9f71bba8d25cd2a97b7105d58d 16796 lighttpd-mod-vhostdb-dbi-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 824435453b36bef30f81790a2c315feecda26d2928b94768a32acf2de1c4a390 4268 lighttpd-mod-vhostdb-dbi_1.4.55-1ubuntu1.20.04.2_riscv64.deb feac26a2fb1dd1823f1174ac2940ce329577b7d53743eeb49b395dac45de7803 16872 lighttpd-mod-vhostdb-pgsql-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 4b5662946dee127d7b87628f39e4303b3cb02a884fc6efbe7011f5bf6c0a155c 3996 lighttpd-mod-vhostdb-pgsql_1.4.55-1ubuntu1.20.04.2_riscv64.deb c749fe5bd3f492d4dc1540563c0c3cfcfd9cec7df7924c91314a59c741f10e3a 87468 lighttpd-mod-webdav-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 4d25d1e6c172f1fea1a7306bd041c5003cb153d53373cd7ffe83520d9676dcde 25308 lighttpd-mod-webdav_1.4.55-1ubuntu1.20.04.2_riscv64.deb 9b0cef15f5c1afe2262991f5f516810e16e8d73400aa416e13f3e643742f09b5 40628 lighttpd-modules-ldap-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb b9fb4411087ed94aeb1a7a2a86386b441ee3607ab3fd20955e2743515e2ad2c0 8960 lighttpd-modules-ldap_1.4.55-1ubuntu1.20.04.2_riscv64.deb 0f61d294825ecd64ac79622fbc0dfb4a5bc47effc1e8f11d34e51a256a756736 59896 lighttpd-modules-mysql-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 6eac7036ea0c96715201ecf20cd104191e2e23e2487e94f31676efbe0a95a4cf 9488 lighttpd-modules-mysql_1.4.55-1ubuntu1.20.04.2_riscv64.deb 7e76957896fafeec38812f1ed349b648fe9823e1f27fe385153dc157318cc2e1 18531 lighttpd_1.4.55-1ubuntu1.20.04.2_riscv64.buildinfo 5aaa9ad29a62d296ad1fe3bd5aee5061169ddd8554b83df6720898dcfd8c03dc 292336 lighttpd_1.4.55-1ubuntu1.20.04.2_riscv64.deb Files: 5d16a60d70381b5dbb57cf10818a6f93 1116288 debug optional lighttpd-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 0aa359f9354003f8467d95cd52cc8467 34624 httpd optional lighttpd-dev_1.4.55-1ubuntu1.20.04.2_riscv64.deb 3b741f905a4520b8af558a49b18f4c4a 27720 debug optional lighttpd-mod-authn-gssapi-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 00825fa95906761b17f89d3a62b38fff 9352 httpd optional lighttpd-mod-authn-gssapi_1.4.55-1ubuntu1.20.04.2_riscv64.deb 608f6dcc1b3765bbbdf6395ed634f2fe 15224 debug optional lighttpd-mod-authn-pam-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb e1f06314f4b5a832b7089aa2aa1a9aee 3500 httpd optional lighttpd-mod-authn-pam_1.4.55-1ubuntu1.20.04.2_riscv64.deb 648df38ea65fffde9c88cf852a1517d6 16584 debug optional lighttpd-mod-authn-sasl-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 97e2ca07789ef160d52b52788942267c 3996 httpd optional lighttpd-mod-authn-sasl_1.4.55-1ubuntu1.20.04.2_riscv64.deb 1da33760445b59a37f13ae34fb80d23c 38464 debug optional lighttpd-mod-cml-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb f6eecc8ab96579debda397a87d4b6eba 10036 httpd optional lighttpd-mod-cml_1.4.55-1ubuntu1.20.04.2_riscv64.deb de4d44a339f7fbfb50bf2b4920806132 16784 debug optional lighttpd-mod-geoip-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 754692acdfa35559b8c5d8d9d7cfb743 5876 httpd optional lighttpd-mod-geoip_1.4.55-1ubuntu1.20.04.2_riscv64.deb dd4a417ee5ff5af455e66435bf18020a 36640 debug optional lighttpd-mod-magnet-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 9560d6db2f2dfe6dbfff0fc53b483e0b 11004 httpd optional lighttpd-mod-magnet_1.4.55-1ubuntu1.20.04.2_riscv64.deb 9b486e417ba4ae26e7ffeb21e0e7c16d 18744 debug optional lighttpd-mod-maxminddb-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 1c13767a2e08ba6af0195f6e23fb22dc 4500 httpd optional lighttpd-mod-maxminddb_1.4.55-1ubuntu1.20.04.2_riscv64.deb 98c2be43f9de5372c79221c024a16fe0 23888 debug optional lighttpd-mod-trigger-b4-dl-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 329473ed854e6ddb1e240e646ed30894 8080 httpd optional lighttpd-mod-trigger-b4-dl_1.4.55-1ubuntu1.20.04.2_riscv64.deb f7c00350d31f16e024b1796114072346 16796 debug optional lighttpd-mod-vhostdb-dbi-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 083c9e8facbce776edc082439d02a2a7 4268 httpd optional lighttpd-mod-vhostdb-dbi_1.4.55-1ubuntu1.20.04.2_riscv64.deb 6bc532d15612f1668c83ad7bf647d322 16872 debug optional lighttpd-mod-vhostdb-pgsql-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb a2a9a6ce0bc808a1cb6abd69a9534928 3996 httpd optional lighttpd-mod-vhostdb-pgsql_1.4.55-1ubuntu1.20.04.2_riscv64.deb 17decc9988ac51889e18a6e627272dc4 87468 debug optional lighttpd-mod-webdav-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb c187675994a21fd5c7d443d6fe02e7cc 25308 httpd optional lighttpd-mod-webdav_1.4.55-1ubuntu1.20.04.2_riscv64.deb 0e7f96aadf3038becc3b5527d6c19635 40628 debug optional lighttpd-modules-ldap-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb 427851097e864035529a4aa730023221 8960 httpd optional lighttpd-modules-ldap_1.4.55-1ubuntu1.20.04.2_riscv64.deb 3f830f3ad0c7dfa12d8d7e103beddd75 59896 debug optional lighttpd-modules-mysql-dbgsym_1.4.55-1ubuntu1.20.04.2_riscv64.ddeb d093270e1ad54f2d6dbc4fb00e7a90b3 9488 httpd optional lighttpd-modules-mysql_1.4.55-1ubuntu1.20.04.2_riscv64.deb ddc151d6f7787a1a3d26a3310c00269f 18531 httpd optional lighttpd_1.4.55-1ubuntu1.20.04.2_riscv64.buildinfo 6d5df12ab1603f89e9ae3bb3accb78a6 292336 httpd optional lighttpd_1.4.55-1ubuntu1.20.04.2_riscv64.deb Original-Maintainer: Debian lighttpd maintainers