This update of lighttpd fixes an out-of-bounds read due to
a signedness error which could cause a Denial of Service
(CVE-2011-4362). Additionally an option was added to honor
the server cipher order (resolves lighttpd#2364).