[SECURITY] [DLA 282-1] lighttpd security update

[Guido Günther <agx@debian.org>]

Package        : lighttpd
Version        : 1.4.28-2+squeeze1.7
CVE ID         : CVE-2014-3566
Debian Bug     : #765702

This update allows to disable SSLv3 in lighttpd in order to protect
against the POODLE attack. SSLv3 is now disabled by default and can be
reenabled (if needed) using the ssl.use-sslv3 option.

Attachment: signature.asc
Description: Digital signature