lighty's life: RELEASE: lighttpd 1.4.13

RELEASE: lighttpd 1.4.13

jan — Tue, 10 Oct 2006 10:18:00 +0000

Only 2 weeks after .12 hit the servers we have a new release cleaning up the issues that were introduced by it.

On the fix side we have:

fixed a seg-fault in the HTTP-Request splitting
fixed long-standing bug with Content-Length and HEAD requests
fixed a possible abort of a upload if xattr is enabled

New are

mod-magnet finally handles ‘require “lfs”’ without complaining
mod-magnet got light.stat() which uses the stat-cache
mod-webdav supports LOCK if compiled with—with-webdav-locks

Debian user have to compile their lua-support with:

$ configure --with-lua=lua5.1 ...

as their lua-5.1 package isn’t called ‘lua’.

Enjoy this release and watch out for 1.5.0 on the horizon. :)

Download

lighttpd-1.4.13-1.i386.rpm [built on Fedora Core 4] MD5: 3d4a857e02e111d6955ccf76e416cb41
lighttpd-1.4.13-1.src.rpm MD5: 6272d8310fae8bcc35e6ab4778e2016c
lighttpd-1.4.13.tar.gz MD5: d775d6478391b95d841a1018c8db0b95

ChangeLog

added initgroups in spawn-fcgi (#871)
added apr1 support htpasswd in mod-auth (#870)
added lighty.stat() to mod_magnet
fixed segfault in splitted CRLF CRLF sequences (introduced in 1.4.12) (#876)
fixed compilation of LOCK support in mod-webdav
fixed fragments in request-URLs (#869)
fixed pkg-config check for lua5.1 on debian
fixed Content-Length = 0 on HEAD requests without a known Content-Length (#119)
fixed mkdir() forcing 0700 (#884)
fixed writev() on FreeBSD 4.x and older (#875)
removed warning about a 404-error-handler returned 404
backported and fixed the buildsystem changes for webdav locks
fixed plugin loading so we can finally load lua extensions in mod_magnet scripts
fixed large uploads if xattr is enabled

"RELEASE: lighttpd 1.4.13" by darix

Sun, 05 Nov 2006 01:47:58 +0000

i consider mod_uploadprogress one of the most useless features out there. on the other hand mod_magnet is the best thing since sliced bread.

"RELEASE: lighttpd 1.4.13" by smiley

Sat, 04 Nov 2006 00:26:42 +0000

4 months after mod_uplaod progress was anounced, still nothing, yet in that time u managed to add alot of useless features...

"RELEASE: lighttpd 1.4.13" by Andre Bogus

Wed, 01 Nov 2006 22:52:24 +0000

I just got a gentoo maintainer to look at the lua-5.1.1 ebuild, which is a prerequisite for lighty-1.4.13. They're working at it.

"RELEASE: lighttpd 1.4.13" by Sebastian

Fri, 20 Oct 2006 19:42:52 +0000

Hi there, im still missing mysql auth included though theres already been a patch around: http://trac.lighttpd.net/trac/ticket/752 Any infos on this? Best regards

"RELEASE: lighttpd 1.4.13" by Roger Wilco

Wed, 18 Oct 2006 11:47:31 +0000

See https://bugs.gentoo.org/show_bug.cgi?id=148996

"RELEASE: lighttpd 1.4.13" by Knight

Tue, 17 Oct 2006 18:49:17 +0000

Sorry about the multiple posting.... Didn't notice this was ajax :(

"RELEASE: lighttpd 1.4.13" by Knight

Tue, 17 Oct 2006 18:48:48 +0000

Any idea when updated gentoo ebuilds will be released?

"RELEASE: lighttpd 1.4.13" by Knight

Tue, 17 Oct 2006 18:48:45 +0000

Any idea when updated gentoo ebuilds will be released?

"RELEASE: lighttpd 1.4.13" by Knight

Tue, 17 Oct 2006 18:48:44 +0000

Any idea when updated gentoo ebuilds will be released?

"RELEASE: lighttpd 1.4.13" by Knight

Tue, 17 Oct 2006 18:48:32 +0000

Any idea when updated gentoo ebuilds will be released?

"RELEASE: lighttpd 1.4.13" by Richard Warburton

Tue, 17 Oct 2006 04:19:47 +0000

This release rocks. It's fast, stable, reliable, and WebDAV works! It sooo kicks everything else I've used (IIS/Apache). Not to mention an easy config file.

"RELEASE: lighttpd 1.4.13" by Alex

Thu, 12 Oct 2006 00:22:58 +0000

Pete, mod_proxy_core is a feature slated for 1.5

"RELEASE: lighttpd 1.4.13" by Pete

Wed, 11 Oct 2006 19:04:21 +0000

Hey, where's mod_proxy_core? This is a really exciting one for me, and I hope its available now. I use Lighttpd + Mongrel + Rails, and need X-Send-File support. Can I use mod_proxy_core with 1.4.13... and if so, where can I get it? Many Thanks, Pete

"RELEASE: lighttpd 1.4.13" by Jan Kneschke

Wed, 11 Oct 2006 10:22:43 +0000

I documented the options in http://trac.lighttpd.net/trac/wiki/Docs:SSL#pci-dss-compliance PCI stands for Paying Card Industry, PCI DSS is their Data Security Standard.

"RELEASE: lighttpd 1.4.13" by vladimir

Wed, 11 Oct 2006 07:39:17 +0000

Should be read: 3. ChangeLog is outdated and reffer to absent in rpm NEWS. (No NEWS in rpm.)

"RELEASE: lighttpd 1.4.13" by vladimir

Wed, 11 Oct 2006 04:42:13 +0000

Some notes: 1. lighttpd-1.4.13-1.i386.rpm compiled without SSL support. 2. from lighttpd 1.4.12 release: 'added ssl.use-sslv2 and ssl.cipher-list for all who have to comply with PCI' What is PCI in this context? No explanation of ssl.cipher-list and ssl.use-sslv2 available. 3. Installed ChangeLog is outdated and reffer to absent NEWS. Thanks for great work!

"RELEASE: lighttpd 1.4.13" by Tim

Tue, 10 Oct 2006 14:58:13 +0000

Thanks again to everybody involved in the development of this release.