Lighttpd 1.4.8 has been released on 2005-11-23. It includes various bugfixes, one of them a possible overflow.
It will be committed when I have time to do so.
simply renaming lighttpd-1.4.7.ebuild to 1.4.8 and running ebuild digest worked fine for me. The tar isnt on any of the mirrors yet, but it got it from lighttpd.net just fine.
looks like 1.4.8 was added 15th dec.