-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 20:37:18 +0100 Source: lighttpd Binary: lighttpd lighttpd-doc lighttpd-mod-mysql-vhost lighttpd-mod-trigger-b4-dl lighttpd-mod-cml lighttpd-mod-magnet lighttpd-mod-webdav Architecture: mipsel Version: 1.4.28-2+squeeze1 Distribution: squeeze-security Urgency: high Maintainer: mipsel Build Daemon (rem) Changed-By: Arno Töll Description: lighttpd - A fast webserver with minimal memory footprint lighttpd-doc - Documentation for lighttpd lighttpd-mod-cml - Cache meta language module for lighttpd lighttpd-mod-magnet - Control the request handling module for lighttpd lighttpd-mod-mysql-vhost - MySQL-based virtual host configuration for lighttpd lighttpd-mod-trigger-b4-dl - Anti-deep-linking module for lighttpd lighttpd-mod-webdav - WebDAV module for lighttpd Changes: lighttpd (1.4.28-2+squeeze1) stable-security; urgency=high . * Backport security issues from 1.4.30: + Fix integer overflow (CVE-2011-4362) + Fix attack vector as disclosed by the SSL BEAST attack (related: CVE-2011-3389). Note: If you are upgrading from an older version you need to change your configuration to mitigate effects of the attack. See the corresponding NEWS file for details. Checksums-Sha1: 55ecbc934a1f0464b59b0b2c5a4ec31b1d86c653 282148 lighttpd_1.4.28-2+squeeze1_mipsel.deb 7467186b8661046befa8b657e52cc4559ab1de85 18272 lighttpd-mod-mysql-vhost_1.4.28-2+squeeze1_mipsel.deb 194f1055430762ed92a099a54e4865e933486ebf 19706 lighttpd-mod-trigger-b4-dl_1.4.28-2+squeeze1_mipsel.deb c9dfa579267f67efa5ece108287fd238e53b0b0a 22428 lighttpd-mod-cml_1.4.28-2+squeeze1_mipsel.deb 3e089426459c29fc1fd14394fefd6b3634fa1ef1 23496 lighttpd-mod-magnet_1.4.28-2+squeeze1_mipsel.deb 93e840ed75e4193aa8cce27bb818ed66d684cc45 29684 lighttpd-mod-webdav_1.4.28-2+squeeze1_mipsel.deb Checksums-Sha256: 832cf4bc97c17da1b7281b30162bbc1ac08011b1c29c64fbeb86e3d6dbccb3da 282148 lighttpd_1.4.28-2+squeeze1_mipsel.deb af48caa9ad3f19cbb9567d57b5691d2f1c8c5ea1836deddb66d9b35badb07466 18272 lighttpd-mod-mysql-vhost_1.4.28-2+squeeze1_mipsel.deb e969306cadac7b5ea0cfb42701e6971f72ab56f4124b94984cb07cb46bcb5d00 19706 lighttpd-mod-trigger-b4-dl_1.4.28-2+squeeze1_mipsel.deb c8d8bd884102418d5534b7ac1450e2026e7e4798b686557e2da16a41ebd23ec9 22428 lighttpd-mod-cml_1.4.28-2+squeeze1_mipsel.deb 49f10f1f2766f59a70962ddc8fc70b47d5f7d7d67d17c718da073225ddab460d 23496 lighttpd-mod-magnet_1.4.28-2+squeeze1_mipsel.deb 5b315e6b8de01d22d80c7bdeb5394fa716e9739f797e84f86bfce206c70202a7 29684 lighttpd-mod-webdav_1.4.28-2+squeeze1_mipsel.deb Files: eb65b6ceb158ed9500c9d8cee717a354 282148 httpd optional lighttpd_1.4.28-2+squeeze1_mipsel.deb cbfef811c57af6bf7a7d4a52c2562f12 18272 httpd optional lighttpd-mod-mysql-vhost_1.4.28-2+squeeze1_mipsel.deb 799f557b6b702d8ef2ab9b2d3a921c84 19706 httpd optional lighttpd-mod-trigger-b4-dl_1.4.28-2+squeeze1_mipsel.deb 15aef86fc253e500b8e7fdb6c7bc6c5c 22428 httpd optional lighttpd-mod-cml_1.4.28-2+squeeze1_mipsel.deb f6e9785230766d64d172799cc0a36674 23496 httpd optional lighttpd-mod-magnet_1.4.28-2+squeeze1_mipsel.deb e7b1fa8eb9a2ed455fa03a7a6985b614 29684 httpd optional lighttpd-mod-webdav_1.4.28-2+squeeze1_mipsel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO8QLMAAoJEAzzgj1nKIEuu3sP/1AI8Ck+Ik7PnaKuSVnx9zF3 7P+H7z9zI4jH190aJYw5SpIZ+j4Rk192qQ9mAjTJSw8//01iS73ImDw+URIfgrwv WGmJ5wJOYKt553tlMDOUaFP4uwBHHxRphL9sJU0cyEaL+uiQ+wnJfGfCShdmSqi+ iidsmgG4aI4/Nkwsi6HhvyRUg10QiAUm/RB9gieGpKZooinfrihs/xMkY/GshaCq uwLkWQhk4Cfm/YRPg4v/QFZuvyordEOVDK+Q3IlNHVWK3hIu518gbPKJh/HaPNyk nDuNeoTsm5iabc482MIB84FG51uV/bVBqecmjt2/V5mv9Sr8aR/I6yDrOQnXt2YZ SZJwSaS4Bm84lW2h+/aGBJuwgYo+WSOkBRFwFue7UobVPhkGz7IWcve/VPuZ7HjI KSIp8tCgjRqvYg14j4+GWlUBVm+vv6ol1W4U2CXLHABdr4P+Acgodoh+sSR9RDE+ r4xIQKtPbYPc9AxKoHZEMkUbO9fvlwvy9IGq+6k0AiMe5z4xaHgf5sP4powc6foO s+DnjWG9GMmaYm6tL0AZPXtaL+T5j1wsJgWTEFuinGLjKLsBguSwuz0CCJMDXWwU SH3KGpObfkTKBiezPgO2z5AejJInObaOmfWFuqzGczlYDJ+31FqmpdslePHg26hT RXj1RVXn07YjEaVjvyeS =fi63 -----END PGP SIGNATURE-----