Package: sponsorship-requests
Severity: normal

Dear mentors,

I am looking for a sponsor for my package "mini-httpd":
Marked urgent because of CVE-2026-68005.

 * Package name     : mini-httpd
   Version          : 1.30-18
   Upstream contact : Jef Poskanzer [email protected]
 * URL              : https://www.acme.com/software/mini_httpd
 * License          : BSD-2-clause
 * Vcs              : https://salsa.debian.org/debian/mini-httpd
   Section          : web

The source builds the following binary packages:

  mini-httpd - Small HTTP server

To access further information about this package, please visit the
following URL:

  https://mentors.debian.net/package/mini-httpd/

Alternatively, you can download the package with 'dget' using this
command:

  dget -x
https://mentors.debian.net/debian/pool/main/m/mini-httpd/mini-httpd_1.30-18.dsc

Changes since the last upload:

 mini-httpd (1.30-18) unstable; urgency=high
 .
   * Fix memory exhaustion DoS in header parsing (CVE-2026-68005).
     (Closes: #1144953)
   * Fix potential Slowloris in the same place by removing old
alarm(60)
     based timeout mechanism.
   * Update copyright year on debian/

Regards,

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to