~ubuntu-branches/ubuntu/lucid/lighttpd/lucid-security : changes

~ubuntu-branches/ubuntu/lucid/lighttpd/lucid-security » Changes from revision 53

From Revision 33 to 14

Rev	Summary	Authors	Tags	Date
33	* SECURITY UPDATE: (LP: #200987) * SECURITY UPDATE: (LP: #200987) + debian/patches/91_CVE-2008-1270.dpatch - mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to read arbitrary files, as demonstrated by accessing the ~nobody directory. * References + CVE-2008-1270 + http://trac.lighttpd.net/trac/ticket/1587 + http://trac.lighttpd.net/trac/changeset/2120	Emanuele Gentili	1.4.18-1ubuntu6	17 years ago
32	* debian/patches/90-CVE-2008-1111.dpatch: * debian/patches/90-CVE-2008-1111.dpatch: - Fixes CVE-2008-1111 "mod_cgi in lighttpd 1.4.18, when a fork failure occurs, sends the source code of CGI scripts instead of a 500 error, which might allow remote attackers to obtain sensitive information." Upstream Patch: http://trac.lighttpd.net/trac/changeset/2107	Stephan Hermann	1.4.18-1ubuntu5	17 years ago
31	* debian/patches/90_accept_ranges_fix.dpatch: * debian/patches/90_accept_ranges_fix.dpatch: - Fixes a problem serving PDF files or other files who are in need of no Accept-Ranges header (http://trac.lighttpd.net/trac/ticket/541) (Patch: http://trac.lighttpd.net/trac/changeset/2090) * debian/index.html: - replaced all occurances of debian with ubuntu (LP: #115565)	Stephan Hermann	1.4.18-1ubuntu4	17 years ago
30	* debian/patches/90_maxfds_crash_fix.dpatch: * debian/patches/90_maxfds_crash_fix.dpatch: - added patch from upstream to fix the maxfds issue - See: http://trac.lighttpd.net/trac/ticket/1562	Stephan Hermann	1.4.18-1ubuntu3	17 years ago
29	Rebuild against libldap2.4-2 Rebuild against libldap2.4-2	Emmet Hikory	1.4.18-1ubuntu2	17 years ago
28	* Merge from Debian unstable, remaining changes: * Merge from Debian unstable, remaining changes: - Update maintainer field in debian/control. - Build against libgamin-dev rather than libfam-dev (fixes a warning during startup) - Make sure that upgrades succeed, even if we can't restart lighttpd. - Clean environment in init.d script.	Soren Hansen	1.4.18-1ubuntu1	17 years ago
27	* Merge from Debian unstable, remaining changes: * Merge from Debian unstable, remaining changes: - Update maintainer field in debian/control. - Build against libgamin-dev rather than libfam-dev (fixes a warning during startup) - Make sure that upgrades succeed, even if we can't restart lighttpd. - Clean environment in init.d script.	Soren Hansen	1.4.17-1ubuntu1	17 years ago
26	Build against libgamin-dev rather than libfam-dev (fixes a w... Build against libgamin-dev rather than libfam-dev (fixes a warning during startup about mismatched sizes of a data type).	Soren Hansen	1.4.16-2ubuntu2	17 years ago
25	* Merge from Debian unstable, remaining changes: (LP: #13122... * Merge from Debian unstable, remaining changes: (LP: #131224) - Make sure that upgrades succeed, even if we can't restart lighttpd. - Clean environment in init.d script. - Update maintainer field in debian/control.	Michele Angrisano	1.4.16-2ubuntu1	17 years ago
24	* Merge from Debian unstable, remaining changes: * Merge from Debian unstable, remaining changes: - Add fam/gamin stat cache engine support. - Replace Depends: on perl with Depends: on libterm-readline-perl-perl. - Make sure that upgrades succeed, even if we can't restart lighttpd. - Clean environment in init.d script. - Update maintainer field in debian/control.	Michele Angrisano	1.4.16-1ubuntu1	17 years ago
23	* Merge from Debian unstable, remaining changes: * Merge from Debian unstable, remaining changes: - Add fam/gamin stat cache engine support. - Replace Depends: on perl with Depends: on libterm-readline-perl-perl. - Make sure that upgrades succeed, even if we can't restart lighttpd. - Clean environment in init.d script. - Update maintainer field in debian/control.	Michele Angrisano	1.4.15-1.1ubuntu1	17 years ago
22	* Merge from Debian unstable. Remaining Ubuntu changes: * Merge from Debian unstable. Remaining Ubuntu changes: - Add fam/gamin stat cache engine support - Clean environment in init.d script - Replace Depends: on perl with Depends: on libterm-readline-perl-perl - Make sure that upgrades succeed, even if we can't restart lighttpd - DebianMaintainerField update	Soren Hansen	1.4.15-1ubuntu1	17 years ago
21	* Added LDAP connection leak fix from Debian (Bug: #413917) * Added LDAP connection leak fix from Debian (Bug: #413917) - debian/patches/03_ldap_leak_bugfix.dpatch * Added security fixes from 1.4.14 (Closes LP: #106416) - Remote DOS in CRLF parsing (CVE-2007-1869) debian/patches/04_security_crlf_parsing_dos.dpatch - DOS with files with mtime 0 (CVE-2007-1870) debian/patches/05_security_zero_mtime_crash.dpatch	Lukas Fittl	1.4.13-9ubuntu4	17 years ago
20	Make sure that upgrades succeed, even if we can't restart li... Make sure that upgrades succeed, even if we can't restart lighttpd (LP: #86882)	Soren Hansen	1.4.13-9ubuntu3	17 years ago
19	Add fam/gamin stat cache engine support (Closes: LP#80818) Add fam/gamin stat cache engine support (Closes: LP#80818)	Soren Hansen	1.4.13-9ubuntu2	18 years ago
18	* Merge from Debian unstable. Remaining Ubuntu changes: * Merge from Debian unstable. Remaining Ubuntu changes: - Clean environment in init.d script - Replace Depends: on perl with Depends: on libterm-readline-perl-perl	Adrien Cunin	1.4.13-9ubuntu1	18 years ago
17	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - Clean environment in init.d script - Replace Depends: on perl with Depends: on libterm-readline-perl-perl	Soren Hansen	1.4.13-7ubuntu1	18 years ago
16	Fix typo in init-script Fix typo in init-script	Soren Hansen	1.4.13-6ubuntu3	18 years ago
15	Clean the environment before starting. Fixes: LP#53840 Clean the environment before starting. Fixes: LP#53840	Soren Hansen	1.4.13-6ubuntu2	18 years ago
14	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - Replace Depends: on perl with Depends: on libterm-readline-perl-perl	Soren Hansen	1.4.13-6ubuntu1	18 years ago