Re: [Bug 107628] Re: DoS-vulnerability in lighttpd

2007-05-04 Thread Martin Pitt
Hi Scott, Scott Kitterman [2007-05-03 11:52 -]: > That update: > > https://launchpad.net/ubuntu/dapper/+source/lighttpd/1.4.11-3ubuntu3.1 > > has been sitting in dapper-proposed since last November and lacks the > fix for this issue. So the existing -proposed package has the > vulnerability

Re: [Bug 107628] Re: DoS-vulnerability in lighttpd

2007-05-02 Thread Scott Kitterman
Then that leaves us with a higher version numbered package in dapper-proposed that is unpatched. If that SRU ever gets released we'll re-introduce the vulnerability. -- DoS-vulnerability in lighttpd https://bugs.launchpad.net/bugs/107628 You received this bug notification because you are a mem

Re: [Bug 107628] Re: DoS-vulnerability in lighttpd

2007-04-19 Thread Kees Cook
On Thu, Apr 19, 2007 at 06:48:33PM -, Scott Kitterman wrote: > Debdiff for Edgy for testing. Hi Scott, Thanks very much for getting the patches extracted. The lighttpd package, however, uses the "dpatch" patch system. Instead of applying the fixes inline, please use "dpatch-edit-patch".