UbuntuUpdates.org

Package "lighttpd"

Name: lighttpd

Description:

fast webserver with minimal memory footprint
Latest version: 1.4.55-1ubuntu1.20.04.2
Release: focal (20.04)
Level: security
Repository: universe
Homepage: https://www.lighttpd.net/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "lighttpd"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "lighttpd" in Focal

Repository Area Version
base universe 1.4.55-1ubuntu1
updates universe 1.4.55-1ubuntu1.20.04.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.4.55-1ubuntu1.20.04.2 2023-02-27 22:06:51 UTC

  lighttpd (1.4.55-1ubuntu1.20.04.2) focal-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds Write
    - debian/patches/CVE-2022-22707.patch: mod_extforward_Forwarded function
      of the mod_extforward plugin has a stack-based buffer overflow.
      (LP: #1994989)
    - CVE-2022-22707

 -- Jack Fewx <email address hidden> Thu, 16 Feb 2023 20:09:14 -0600
1994989 lighttpd CVE-2022-22707
CVE-2022-22707 In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes repr


About   -   Send Feedback to @ubuntu_updates