[pkg-lighttpd] Bug#810277: lighttpd: Can't restrict ipv6 bind

[Karl]

Package: lighttpd
Version: 1.4.39-1
Severity: normal
Tags: ipv6

Dear Maintainer,

I'm trying to configure lighttpd to listen only on loopback.
I've added the configuration directive 'server.bind = "127.0.0.1"'.
This restricts the ipv4 listen address, however `netstat -nlp`
still reports that lighttpd is listening on :::80 -- all ipv6 addresses!

The documentation states that lighttpd should listen only on ipv4 addresses when
one is provided for server.bind, unless additional socket addresses are specified.

I've tried a few configuration combinations (use-ipv6 = "disable", different package versions),
but the problem persists.

This is in contrast to the behavior of the default install of exim4 on my system,
which is listening only on 127.0.0.1:25 and ::1:25 .


-- System Information:
Debian Release: 8.2
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-042stab111.12 (SMP w/3 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=locale: Cannot set LC_CTYPE to default locale: No such file or directory
locale: Cannot set LC_MESSAGES to default locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory
ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages lighttpd depends on:
ii  init-system-helpers         1.22
ii  libattr1                    1:2.4.47-2
ii  libbz2-1.0                  1.0.6-7+b3
ii  libc6                       2.19-18+deb8u1
ii  libfam0                     2.7.0-17.1
ii  libldap-2.4-2               2.4.40+dfsg-1+deb8u1
ii  libpcre3                    2:8.35-3.3
ii  libssl1.0.0                 1.0.1k-3+deb8u2
ii  libterm-readline-perl-perl  1.0303-1
ii  lsb-base                    4.1+Debian13+nmu1
ii  mime-support                3.58
ii  perl                        5.20.2-3+deb8u1
ii  systemd                     215-17+deb8u2
ii  zlib1g                      1:1.2.8.dfsg-2+b1

Versions of packages lighttpd recommends:
ii  spawn-fcgi  1.6.4-1

Versions of packages lighttpd suggests:
pn  apache2-utils  <none>
ii  openssl        1.0.1k-3+deb8u2
pn  rrdtool        <none>

-- debconf information excluded