Security update for lighttpd (moderate)

An update that fixes one vulnerability is now available.

Description:

This update for lighttpd fixes the following issues:

lighttpd was updated to 1.4.67:

• Update comment about TCP_INFO on OpenBSD
• [mod_ajp13] fix crash with bad response headers (fixes #3170)
• [core] handle RDHUP when collecting chunked body CVE-2022-41556
  (boo#1203872)
• [core] tweak streaming request body to backends
• [core] handle ENOSPC with pwritev() (#3171)
• [core] manually calculate off_t max (fixes #3171)
• [autoconf] force large file support (#3171)
• [multiple] quiet coverity warnings using casts
• [meson] add license keyword to project declaration

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Backports SLE-15-SP4:

  zypper in -t patch openSUSE-2022-10140=1

• openSUSE Backports SLE-15-SP3:

  zypper in -t patch openSUSE-2022-10140=1