37ad2a7d28
From http://www.lighttpd.net/: Important changes ----------------- This release contains a lot of bug fixes, many detected by scan.coverity.com (and more to come). The main reason for the release is a fix for an SQL injection (and path traversal) bug triggered by specially crafted (and invalid) Host: headers. Security fixes -------------- http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2014_01.txt (no CVE yet) NOTE: We (nixpkgs) currently don't build the mod_mysql_vhost module mentioned above.