Debian 4.0: 1362-2 Critical: Lighttpd Remote Code Execution Threat

This updated advisory correctly patches the security issue, which was
not handled in DSA-1362-1.

For the stable distribution (etch), this problem has been fixed in version
1.4.13-4etch4.

We recommend that you upgrade your lighttpd package.


Upgrade instructions
- --------------------wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 4.0 alias etch

Size/MD5 checksum: 1098 17dfd0625a22e95cfd3e9ec509fbdb5b
Size/MD5 checksum: 36522 13f9e5815efe59582a154beaa70d8330

Architecture independent packages:

Size/MD5 checksum: 99910 e787e67007923593212e2d96f3fe8895

alpha architecture (DE...