Debian

Available patches from Ubuntu

To see Ubuntu differences wrt. to Debian, write down a grep-dctrl query identifying the packages you're interested in:
grep-dctrl -n -sPackage Sources.Debian
(e.g. -FPackage linux-ntfs or linux-ntfs)

Modified packages are listed below:

Debian ( Changelog | PTS | Bugs ) Ubuntu ( Changelog | txt | LP | Bugs ) | Diff from Ubuntu

Source: lighttpd

lighttpd (1.4.52-3ubuntu1) disco; urgency=medium * Merge from Debian unstable. Remaining changes: - debian/control, debian/lighttpd-dev.install: + Add lighttpd-dev package. - debian/index.html: + Corrected BTS Ubuntu link and branding on the default page. - debian/lighttpd.conf: + Comment 'use-ipv6.pl' by default, which causes failure to bind port in ipv4. - debian/control: + Build-Depends on libgamin-dev rather than libfam-dev to fix startup warning. - debian/rules: + Add override_dh_installinit to set "defaults 91 09" to not start before apache2 but in the same runlevel with the same priority. - debian/lighttpd.dirs, debian/control, debian/rules, debian/lighttpd.ufw.profile: + Add the UFW profile. + Make the application build sanely: - Remove duplicate override on dh_install - Remove duplicate outdated NEWS file - Install updated upstream NEWS file and fix cp: cannot stat /debian/tmp/changelog thingy to fix FTBFS when built twice in a row. -- Gianfranco Costamagna <locutusofborg@debian.org> Thu, 10 Jan 2019 10:43:14 +0100

Modifications :
  1. Download patch debian/lighttpd-doc.docs

    --- 1.4.52-3/debian/lighttpd-doc.docs 2018-12-06 12:10:09.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/lighttpd-doc.docs 2018-12-17 04:21:13.000000000 +0000 @@ -1,2 +1,2 @@ README -debian/tmp/changelog +NEWS
  2. Download patch debian/lighttpd-mod-magnet.docs

    --- 1.4.52-3/debian/lighttpd-mod-magnet.docs 2018-12-06 12:10:09.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/lighttpd-mod-magnet.docs 2018-12-17 04:21:13.000000000 +0000 @@ -1,2 +1,2 @@ README -debian/tmp/changelog +NEWS
  3. Download patch debian/patches/add-lighttpd.pc-configure.patch

    --- 1.4.52-3/debian/patches/add-lighttpd.pc-configure.patch 1970-01-01 00:00:00.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/patches/add-lighttpd.pc-configure.patch 2018-12-10 12:25:41.000000000 +0000 @@ -0,0 +1,17 @@ +Description: Add lighttpd.pc to ac_config_files to make sure its being built + correctly. +Author: Andreas Moog <andreas.moog@warperbbs.de> +Bug-Debian: http://bugs.debian.org/726934 + +Index: lighttpd-1.4.49/configure.ac +=================================================================== +--- lighttpd-1.4.49.orig/configure.ac ++++ lighttpd-1.4.49/configure.ac +@@ -1373,6 +1373,7 @@ + tests/docroot/www/indexfile/Makefile \ + tests/docroot/www/Makefile \ + tests/Makefile \ ++ lighttpd.pc \ + ]) + AC_OUTPUT +
  4. Download patch debian/lighttpd-mod-authn-mysql.docs

    --- 1.4.52-3/debian/lighttpd-mod-authn-mysql.docs 2018-12-06 12:10:09.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/lighttpd-mod-authn-mysql.docs 2018-12-17 04:21:13.000000000 +0000 @@ -1,2 +1,2 @@ README -debian/tmp/changelog +NEWS
  5. Download patch debian/lighttpd.dirs

    --- 1.4.52-3/debian/lighttpd.dirs 2019-01-07 08:17:40.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/lighttpd.dirs 2019-01-10 09:37:30.000000000 +0000 @@ -1,5 +1,6 @@ etc/lighttpd/conf-available etc/lighttpd/conf-enabled +etc/ufw/applications.d usr/sbin var/cache/lighttpd/compress var/cache/lighttpd/uploads
  6. Download patch debian/lighttpd-mod-authn-ldap.docs

    --- 1.4.52-3/debian/lighttpd-mod-authn-ldap.docs 2018-12-06 12:10:09.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/lighttpd-mod-authn-ldap.docs 2018-12-17 04:21:13.000000000 +0000 @@ -1,2 +1,2 @@ README -debian/tmp/changelog +NEWS
  7. Download patch debian/rules

    --- 1.4.52-3/debian/rules 2019-01-07 08:17:40.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/rules 2019-01-10 09:41:52.000000000 +0000 @@ -40,8 +40,8 @@ override_dh_auto_configure: CPPFLAGS_FOR_BUILD="$(shell dpkg-buildflags --get CPPFLAGS)" \ override_dh_install: - cp NEWS debian/tmp/changelog dh_install + install -m644 debian/lighttpd.ufw.profile debian/lighttpd/etc/ufw/applications.d/lighttpd dh_missing --fail-missing DOCLESS_PACKAGES=\ @@ -66,7 +66,7 @@ override_dh_fixperms: debian/lighttpd/var/log/lighttpd || true override_dh_installinit: - dh_installinit --error-handler=start_failed + dh_installinit --error-handler=true -- defaults 91 09 override_dh_gencontrol: set -e; for p in `dh_listpackages`; do \
  8. Download patch debian/NEWS

    --- 1.4.52-3/debian/NEWS 2019-01-07 08:17:40.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/NEWS 2019-01-10 09:38:34.000000000 +0000 @@ -12,50 +12,3 @@ lighttpd (1.4.52-2+exp1) experimental; u Do depend on virtual packages lighttpd-mod-* instead. -- Helmut Grohne <helmut.grohne@intenta.de> Fri, 04 Jan 2019 08:23:03 +0100 - -lighttpd (1.4.31-4) unstable; urgency=high - - The default Debian configuration file for PHP invoked from FastCGI was - vulnerable to local symlink attacks and race conditions when an attacker - manages to control the PHP socket file (/tmp/php.socket up to 1.4.31-3) - before the web server started. Possibly the web server could have been - tricked to use a forged PHP. - - The problem lies in the configuration, thus this update will fix the problem - only if you did not modify the file /etc/lighttpd/conf-available/15-fastcgi-php.conf - If you did, dpkg will not overwrite your changes. Please make sure to set - - "socket" => "/var/run/lighttpd/php.socket" - - yourself in that case. - - -- Arno Töll <arno@debian.org> Thu, 14 Mar 2013 01:57:42 +0100 - -lighttpd (1.4.30-1) unstable; urgency=medium - - This releases includes an option to force Lighttpd to honor the cipher order - in ssl.cipher-list. This mitigates the effects of a SSL CBC attack commonly - referred to as "BEAST attack". See [1] and CVE-2011-3389 for more details. - - To minimze the risk of this attack it is recommended either to disable all CBC - ciphers (beware: this will break reasonably old clients or those who support - CBC ciphers only), or pursue clients to use safe ciphers where possible at - least. To do so, set - - ssl.cipher-list = "ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM" - ssl.honor-cipher-order = "enable" - - in your /etc/lighttpd/conf-available/10-ssl.conf file or on any SSL enabled - host you configured. If you did not change this file previously, this upgrade - will update it automatically. - - [1] http://blog.ivanristic.com/2011/10/mitigating-the-beast-attack-on-tls.html - - -- Arno Töll <debian@toell.net> Sun, 18 Dec 2011 20:26:50 +0100 - -lighttpd (1.4.23-1) unstable; urgency=low - - spawn-fcgi is now separate package. Please install "spawn-fcgi" package if - you need it. - - -- Krzysztof Krzyżaniak (eloy) <eloy@debian.org> Thu, 09 Jul 2009 15:53:14 +0200
  9. Download patch debian/control

    --- 1.4.52-3/debian/control 2019-01-07 08:43:57.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/control 2019-01-10 09:40:38.000000000 +0000 @@ -13,9 +13,9 @@ Build-Depends: libbz2-dev, libattr1-dev, libpcre3-dev, + libgamin-dev, default-libmysqlclient-dev, libdbi-dev, - libfam-dev, libldap2-dev, libfcgi-dev, libgdbm-dev, @@ -58,6 +58,7 @@ Suggests: php-cgi, apache2-utils, lighttpd-doc, + ufw Description: fast webserver with minimal memory footprint lighttpd is a small webserver and fast webserver developed with security in mind and a lot of features. @@ -214,6 +215,13 @@ Description: WebDAV module for lighttpd DELETE PUT +Package: lighttpd-dev +Architecture: any +Suggests: lighttpd +Depends: ${shlibs:Depends}, ${misc:Depends} +Description: Development files for lighttpd + This package contains the development header-files for lighttpd. + Package: lighttpd-mod-authn-gssapi Architecture: any Depends:
  10. Download patch debian/lighttpd-mod-trigger-b4-dl.docs

    --- 1.4.52-3/debian/lighttpd-mod-trigger-b4-dl.docs 2018-12-06 12:10:09.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/lighttpd-mod-trigger-b4-dl.docs 2018-12-17 04:21:13.000000000 +0000 @@ -1,2 +1,2 @@ README -debian/tmp/changelog +NEWS
  11. Download patch debian/lighttpd-dev.install

    --- 1.4.52-3/debian/lighttpd-dev.install 1970-01-01 00:00:00.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/lighttpd-dev.install 2018-11-03 14:30:27.000000000 +0000 @@ -0,0 +1,3 @@ +config.h /usr/include/lighttpd +src/*.h /usr/include/lighttpd +lighttpd.pc /usr/lib/pkgconfig
  12. Download patch debian/patches/build-dev-package.patch

    --- 1.4.52-3/debian/patches/build-dev-package.patch 1970-01-01 00:00:00.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/patches/build-dev-package.patch 2018-11-03 14:30:27.000000000 +0000 @@ -0,0 +1,27 @@ +--- /dev/null ++++ lighttpd-1.4.33/lighttpd.pc.in +@@ -0,0 +1,14 @@ ++# lighttpd pkg-config file ++ ++prefix=@prefix@ ++exec_prefix=@exec_prefix@ ++libdir=@libdir@ ++includedir=@includedir@ ++ ++Name: lighttpd ++Description: lighttpd ++Version: @VERSION@ ++Requires: ++Conflicts: ++Libs: ++Cflags: -I${includedir} -DHAVE_CONFIG_H @CPPFLAGS@ + +#--- lighttpd-1.4.44.orig/Makefile.am +#+++ lighttpd-1.4.44/Makefile.am +#@@ -7,3 +7,6 @@ ACLOCAL_AMFLAGS = -I m4 -I scripts/m4 +# distcleancheck_listfiles = find -type f -exec sh -c 'test -f $(srcdir)/{} || echo {}' ';' +# +# AM_DISTCHECK_CONFIGURE_FLAGS=--with-openssl +#+ +#+pkgconfigdir = $(libdir)/pkgconfig +#+pkgconfig_DATA = lighttpd.pc
  13. Download patch debian/lighttpd-mod-mysql-vhost.docs

    --- 1.4.52-3/debian/lighttpd-mod-mysql-vhost.docs 2018-12-06 12:10:09.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/lighttpd-mod-mysql-vhost.docs 2018-12-17 04:21:13.000000000 +0000 @@ -1,2 +1,2 @@ README -debian/tmp/changelog +NEWS
  14. Download patch debian/lighttpd-mod-cml.docs

    --- 1.4.52-3/debian/lighttpd-mod-cml.docs 2018-12-06 12:10:09.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/lighttpd-mod-cml.docs 2018-12-17 04:21:13.000000000 +0000 @@ -1,2 +1,2 @@ README -debian/tmp/changelog +NEWS
  15. Download patch debian/index.html

    --- 1.4.52-3/debian/index.html 2018-12-06 12:10:09.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/index.html 2018-12-17 04:21:13.000000000 +0000 @@ -29,21 +29,21 @@ a:hover { text-decoration: none; color: <ul> <li>Configuration files can be found in <span class="tt">/etc/lighttpd</span>. Please read <span class="tt">/etc/lighttpd/conf-available/README</span> file.</li> <li>The DocumentRoot, which is the directory under which all your HTML files should exist, is set to <span class="tt">/var/www/html</span>.</li> - <li>CGI scripts are looked for in <span class="tt">/usr/www/cgi-bin</span>, which is where Debian packages will place their scripts. You can enable cgi module by using command <span class="bold tt">&quot;lighty-enable-mod cgi&quot;</span>.</li> + <li>CGI scripts are looked for in <span class="tt">/usr/www/cgi-bin</span>, which is where Ubuntu packages will place their scripts. You can enable cgi module by using command <span class="bold tt">&quot;lighty-enable-mod cgi&quot;</span>.</li> <li>Log files are placed in <span class="tt">/var/log/lighttpd</span>, and will be rotated weekly. The frequency of rotation can be easily changed by editing <span class="tt">/etc/logrotate.d/lighttpd</span>.</li> <li>The default directory index is <span class="tt">index.html</span>, meaning that requests for a directory <span class="tt">/foo/bar/</span> will give the contents of the file /var/www/foo/bar/index.html if it exists (assuming that <span class="tt">/var/www</span> is your DocumentRoot).</li> <li>You can enable user directories by using command <span class="bold tt">&quot;lighty-enable-mod userdir&quot;</span></li> </ul> <h2>About this page</h2> <p> - This is a placeholder page installed by the Debian release of the <a href="http://packages.debian.org/lighttpd">Lighttpd server package.</a> + This is a placeholder page installed by the Ubuntu release of the <a href="http://packages.ubuntu.com/lighttpd">Lighttpd server package.</a> </p> <p> - This computer has installed the Debian GNU/Linux operating system, but it has nothing to do with the Debian Project. Please do not contact the Debian Project about it. + This computer has installed the Ubuntu operating system, but it has nothing to do with the Ubuntu Project. Please do not contact the Ubuntu Project about it. </p> <p> If you find a bug in this Lighttpd package, or in Lighttpd itself, please file a bug report on it. Instructions on doing this, and the list of known bugs of this package, can be found in the - <a href="http://bugs.debian.org/cgi-bin/pkgreport.cgi?pkg=lighttpd">Debian Bug Tracking System.</a> + <a href="https://bugs.launchpad.net/ubuntu/+source/lighttpd">Ubuntu Bug Tracking System.</a> </p> </div> </div>
  16. Download patch debian/patches/series

    --- 1.4.52-3/debian/patches/series 2019-01-07 08:31:47.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/patches/series 2019-01-10 09:38:09.000000000 +0000 @@ -1 +1,3 @@ http_auth_backends_assertion.patch +build-dev-package.patch +add-lighttpd.pc-configure.patch
  17. Download patch debian/lighttpd.ufw.profile

    --- 1.4.52-3/debian/lighttpd.ufw.profile 1970-01-01 00:00:00.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/lighttpd.ufw.profile 2018-11-03 14:30:27.000000000 +0000 @@ -0,0 +1,14 @@ +[Lighttpd HTTP] +title=Web Server (lighttpd, HTTP) +description=A fast webserver with minimal memory footprint +ports=80/tcp + +[Lighttpd HTTPS] +title=Web Server (lighttpd, HTTPS) +description=A fast webserver with minimal memory footprint +ports=443/tcp + +[Lighttpd Full] +title=Web Server (lighttpd, HTTP + HTTPS) +description=A fast webserver with minimal memory footprint +ports=80,443/tcp
  18. Download patch debian/lighttpd.docs

    --- 1.4.52-3/debian/lighttpd.docs 2018-12-06 12:10:09.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/lighttpd.docs 2018-12-17 04:21:13.000000000 +0000 @@ -1,2 +1,2 @@ README -debian/tmp/changelog +NEWS
  19. Download patch debian/lighttpd-mod-geoip.docs

    --- 1.4.52-3/debian/lighttpd-mod-geoip.docs 2018-12-06 12:10:09.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/lighttpd-mod-geoip.docs 2018-12-17 04:21:13.000000000 +0000 @@ -1,2 +1,2 @@ README -debian/tmp/changelog +NEWS
  20. Download patch debian/lighttpd.conf

    --- 1.4.52-3/debian/lighttpd.conf 2018-12-16 19:41:41.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/lighttpd.conf 2018-12-17 09:09:16.000000000 +0000 @@ -22,6 +22,7 @@ compress.cache-dir = "/var/cach compress.filetype = ( "application/javascript", "text/css", "text/html", "text/plain" ) # default listening port for IPv6 falls back to the IPv4 port -include_shell "/usr/share/lighttpd/use-ipv6.pl " + server.port +## Use ipv6 if available +#include_shell "/usr/share/lighttpd/use-ipv6.pl " + server.port include_shell "/usr/share/lighttpd/create-mime.conf.pl" include_shell "/usr/share/lighttpd/include-conf-enabled.pl"
  21. Download patch debian/lighttpd-mod-webdav.docs

    --- 1.4.52-3/debian/lighttpd-mod-webdav.docs 2018-12-06 12:10:09.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/lighttpd-mod-webdav.docs 2018-12-17 04:21:13.000000000 +0000 @@ -1,2 +1,2 @@ README -debian/tmp/changelog +NEWS
  22. Download patch debian/lighttpd-mod-authn-gssapi.docs

    --- 1.4.52-3/debian/lighttpd-mod-authn-gssapi.docs 2018-12-06 12:10:09.000000000 +0000 +++ 1.4.52-3ubuntu1/debian/lighttpd-mod-authn-gssapi.docs 2018-12-17 04:21:13.000000000 +0000 @@ -1,2 +1,2 @@ README -debian/tmp/changelog +NEWS
  1. lighttpd