| Name | TEMP-0000000-37DBC3 |
| Description | use after free / double free |
| Source | Automatically generated temporary name. Not for external reference. |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| lighttpd (PTS) | buster | 1.4.53-4+deb10u2 | fixed |
| buster (security) | 1.4.53-4+deb10u3 | fixed |
| bullseye (security), bullseye | 1.4.59-1+deb11u2 | fixed |
| bookworm | 1.4.69-1 | fixed |
| trixie | 1.4.74-1 | fixed |
| sid | 1.4.74-2 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|
| lighttpd | source | squeeze | (not affected) | | | |
| lighttpd | source | wheezy | (not affected) | | | |
| lighttpd | source | jessie | (not affected) | | | |
| lighttpd | source | (unstable) | 1.4.39-1 | | | |
Notes
[jessie] - lighttpd <not-affected> (Regression introduced in 1.4.36)
[wheezy] - lighttpd <not-affected> (Regression introduced in 1.4.36)
[squeeze] - lighttpd <not-affected> (Regression introduced in 1.4.36)
http://redmine.lighttpd.net/issues/2700
Introduced in 1.4.36: http://web.archive.org/web/20150906061055/http://redmine.lighttpd.net/projects/lighttpd/repository/revisions/2976