Resolved Bugs
1224911 – CVE-2015-3200 lighttpd: log injection via malformed base64 string in Authentication header [epel-all]
1224910 – CVE-2015-3200 lighttpd: log injection via malformed base64 string in Authentication header [fedora-all]
1246857 – lighttpd-1.4.36 is available<br
Latest upstream security release:
http://www.lighttpd.net/2015/7/26/1.4.36/