[3.17] main/lighttpd: security upgrade to 1.4.76 (!64432) · Merge requests · alpine / aports · GitLab

We are currently working on getting Alpine Linux 3.21 out. This means that merge requests that are not aimed to help with that (only affecting testing, new aports) have a lower priority at the moment. Please be patient, they will be eventually picked up.

gstrauss requested to merge gstrauss/aports:lighttpd-1.4.76-3.17-stable into 3.17-stable Apr 18, 2024

detect VU#421644 HTTP/2 CONTINUATION Flood
avoid CVE-2024-3094 xz supply chain attack

Ref https://www.lighttpd.net/2024/4/12/1.4.76/

Ref !64038 (merged)