http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2012_01.txt OK brad@ (maintainer), same update from gsoares@