Subject: CVS commit: pkgsrc/www/lighttpd
To: None <pkgsrc-changes@NetBSD.org>
From: Joerg Sonnenberger <joerg@netbsd.org>
List: pkgsrc-changes
Date: 07/25/2007 10:26:05
Module Name: pkgsrc
Committed By: joerg
Date: Wed Jul 25 10:26:05 UTC 2007
Modified Files:
pkgsrc/www/lighttpd: Makefile distinfo
Log Message:
Update to lighttpd 1.4.16. This fixes a number of security issues:
- various possible NULL pointer references
- two cases were uninitialised memory is used or memory could be
corrupted. This might be exploitable to execute arbitrary code.
- possible mod_access by-pass by appending /
- a local DOS by broken FastCGI handlers
To generate a diff of this commit:
cvs rdiff -r1.14 -r1.15 pkgsrc/www/lighttpd/Makefile
cvs rdiff -r1.9 -r1.10 pkgsrc/www/lighttpd/distinfo
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.