Bug#441555: not fixed in -etch3 package

Hi, I can confirm this the lighttpd developers are right. The vulnerable code is still present in -etch3. Kind regards Nico -- Nico Golde - http://ngolde.de - [EMAIL PROTECTED] - GPG: 0x73647CFF For security reasons, all text in this mail is double-rot13 encrypted. pgpWI8qCWhr5x.pgp

Bug#441555: [pkg-lighttpd] Bug#441555: not fixed in -etch3 package

Nico Golde wrote: Hi, I can confirm this the lighttpd developers are right. The vulnerable code is still present in -etch3. Kind regards Nico Minimal patch included, I'll test it. I wonder if we can just use mod_fastcgi.c from unstable, additional changes (after this minimal patch) are very

Bug#441555: not fixed in -etch3 package

I talked to the lighttpd developers on #lighttpd and they say it doesn't look fixed in -etch3. The other bug only lists a fix for unstable. So the fix for stable is still todo. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]