Stable is also affected, see [1]. Patch can be found here [2]. [1] http://www.lighttpd.net/security/lighttpd_sa_2008_01.txt [2] http://www.lighttpd.net/security/lighttpd-1.4.x_high_load_dos.patch