Bug#428368: lighttpd vuln patch

2007-07-24 Thread Steve Kemp
This one isn't going to get released as-is, as there are a couple more pending issues with lighttpd. I'll roll them all up once I have valid identifiers for them. Steve -- # The Debian Security Audit Project. http://www.debian.org/security/audit -- To UNSUBSCRIBE, email to [EMAIL

Bug#428368: lighttpd vuln patch

2007-07-20 Thread Pierre Habouzit
attached is the patch that fixes it. I'm going to NMU lighttpd in unstable, please someone takes care of etch. -- ·O· Pierre Habouzit ··O[EMAIL PROTECTED] OOOhttp://www.madism.org

Bug#428368: lighttpd vuln patch

2007-07-20 Thread Pierre Habouzit
On Fri, Jul 20, 2007 at 11:02:07AM +0200, Pierre Habouzit wrote: attached is the patch that fixes it. I'm going to NMU lighttpd in unstable, please someone takes care of etch. I obviously forgot the patch... -- ·O· Pierre Habouzit ··O[EMAIL

Bug#428368: lighttpd vuln patch

2007-07-20 Thread Steve Kemp
On Fri Jul 20, 2007 at 11:02:07 +0200, Pierre Habouzit wrote: attached is the patch that fixes it. I'm going to NMU lighttpd in unstable, please someone takes care of etch. Joey if you could allocate a DOS CVE ID I'll do the upload, I've already done lighttpd patches for etch. Steve --

Bug#428368: lighttpd vuln patch

2007-07-20 Thread Joey Schulze
Steve Kemp wrote: On Fri Jul 20, 2007 at 11:02:07 +0200, Pierre Habouzit wrote: attached is the patch that fixes it. I'm going to NMU lighttpd in unstable, please someone takes care of etch. Joey if you could allocate a DOS CVE ID I'll do the upload, I've already done lighttpd