Ubuntu Security Notice 5903-1 - It was discovered that lighttpd incorrectly handled certain inputs, which could result in a stack buffer overflow. A remote attacker could possibly use this issue to cause a denial of service.
a0a282a6f042353c2982180a586d4f786bba17c14f0faf45bda948394888a9e8
Debian Linux Security Advisory 5040-1 - An out-of-bounds memory access was discovered in the mod_extforward plugin of the lighttpd web server, which may result in denial of service.
6ae0bee24b3fa0261c1a634e286b84e2ba07b194259137498d04562447491d39