diff options
Diffstat (limited to 'debian/changelog')
-rw-r--r-- | debian/changelog | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/debian/changelog b/debian/changelog index a77da66..231841b 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,9 +1,12 @@ -lighttpd (1.4.31-4) UNRELEASED; urgency=low +lighttpd (1.4.31-4) unstable; urgency=high + * CVE-XXXX-XXXX: Switch the socket path for PHP when using FastCGI. /tmp is + world-writable which may cause security implications if an attacker + manages to control /tmp/php.sock before the web server (re-)starts. * Switch VCS to git * Push standards version (no changes) - -- Arno Töll <arno@debian.org> Wed, 21 Nov 2012 23:13:23 +0100 + -- Arno Töll <arno@debian.org> Thu, 14 Mar 2013 02:20:07 +0100 lighttpd (1.4.31-3) unstable; urgency=high |