summaryrefslogtreecommitdiff
path: root/debian/changelog
diff options
context:
space:
mode:
Diffstat (limited to 'debian/changelog')
-rw-r--r--debian/changelog7
1 files changed, 5 insertions, 2 deletions
diff --git a/debian/changelog b/debian/changelog
index a77da66..231841b 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,9 +1,12 @@
-lighttpd (1.4.31-4) UNRELEASED; urgency=low
+lighttpd (1.4.31-4) unstable; urgency=high
+ * CVE-XXXX-XXXX: Switch the socket path for PHP when using FastCGI. /tmp is
+ world-writable which may cause security implications if an attacker
+ manages to control /tmp/php.sock before the web server (re-)starts.
* Switch VCS to git
* Push standards version (no changes)
- -- Arno Töll <arno@debian.org> Wed, 21 Nov 2012 23:13:23 +0100
+ -- Arno Töll <arno@debian.org> Thu, 14 Mar 2013 02:20:07 +0100
lighttpd (1.4.31-3) unstable; urgency=high