lighttpd 1.4.42 is the first version in a while that's considered stable by upstream. Any bugs currently open against 1.4.42 are IN_PROGRESS awaiting stabilization. Please test at your leisure. Thank you!
Whoops, forgot we were stabilizing in the CVE bug. Please ignore. *** This bug has been marked as a duplicate of bug 550458 ***