lighty's life: PRE-RELEASE: lighttpd-1.5.0-r1992

PRE-RELEASE: lighttpd-1.5.0-r1992

jan — Thu, 06 Sep 2007 22:21:00 +0000

Some time passed since the last pre-release, time for an update.

Everyone who runs 1.5.0 already has to upgrade to get fixes several vulnerabilities that got fixed in the 1.4.x branch already.

If this release passes your requirements it will be the last 1.5.0 pre-release. Afterwards we will start the the normal 1.5.x series and will add the missing features in 1.5.1 and later.

Download: http://www.lighttpd.net/download/lighttpd-1.5.0-r1992.tar.gz

md5sum: b62e2442ee0f3395844b54385b14397a

Changes

added native support for mingw32
added experimental option to compile without glib
fixed mod_uploadprogress
fixed endless loop on freebsd-sendfile (#1289)
fixed compile in IRIX and HP/UX
fixed hardcoded font-sizes in mod_dirlisting (#1267)
fixed different ETag length on 32/64 platforms (#1279)
fixed conditional dir-listing.exclude (#930)
fixed CONTENT_LENGTH = -1 in mod_cgi (#1276)
fixed typecast of NULL on execl() (#1235)
fixed extra Content-Length header on 1xx, 204 and 304 (#1002)
fixed mysql server reconnects (#518)
fixed prctl() usage (#1310, #1333)
fixed FastCGI header overrun in mod_proxy_backend_fastcgi (reported by mattias@secweb.se)
fixed mem-leak in mod_auth (reported by Stefan Esser)
fixed crash with md5-sess and cnonce not set in mod_auth (reported by Stefan Esser)
fixed missing check for base64 encoded string in mod_auth and Basic auth (reported by Stefan Esser)
fixed possible crash in Auth-Digest header parser on trailing WS in mod_auth (reported by Stefan Esser)

"PRE-RELEASE: lighttpd-1.5.0-r1992" by kk

Sat, 22 Sep 2007 15:11:18 +0000

In lighttpd-1.5.0-r1992, is it thread-safe to joblist_append() in the joblist_queue_thread while the main thread switching srv-joblist and srv-joblist_prev?

"PRE-RELEASE: lighttpd-1.5.0-r1992" by Bisente

Thu, 20 Sep 2007 19:44:42 +0000

I've built packages for Debian Sarge (should work in Etch also, I guess). They're available here: http://www.bisente.com/blog/2007/09/20/lighttpd-150-svn-r1992-debian-sarge/?lan=english

"PRE-RELEASE: lighttpd-1.5.0-r1992" by robin

Fri, 14 Sep 2007 18:26:01 +0000

I had the same undefined symbol problem as Pete. should network.c be included in "common_src" instead of "src" in Makefile.am?

"PRE-RELEASE: lighttpd-1.5.0-r1992" by ServerTweak.com

Tue, 11 Sep 2007 04:16:24 +0000

Excellent work Jan and the rest of the developers committing. I look forward to trying out this test release :D

"PRE-RELEASE: lighttpd-1.5.0-r1992" by Gary

Mon, 10 Sep 2007 04:34:51 +0000

Will the final 1.5 have support for ssl.verify.peer etc? Thanks.

"PRE-RELEASE: lighttpd-1.5.0-r1992" by Pete

Sun, 09 Sep 2007 21:14:06 +0000

I'm really excited about this release, but it doesn't want to build on my MacBook Pro (running Tiger).

It fails trying to build mod_status, with this error:

/usr/bin/ld: Undefined symbols:
_network_get_backend_info_by_type
_network_get_backends Googling for this hasn't turned up any results. Any ideas?

"PRE-RELEASE: lighttpd-1.5.0-r1992" by Doug

Sun, 09 Sep 2007 16:53:20 +0000

How does LighTTPD compare to NGINX? Compare as in memory usage, speed, configuration, features.

"PRE-RELEASE: lighttpd-1.5.0-r1992" by Alex Gao

Sun, 09 Sep 2007 10:52:47 +0000

Greate work! I'll upgrade my server this week. BTW, the mod_secdownload is such good thing which let kick off those bandwidth thief from china who using download client called "thunder"(Google China even invests this f*ck company).

"PRE-RELEASE: lighttpd-1.5.0-r1992" by Kevin Worthington

Sat, 08 Sep 2007 07:16:44 +0000

I built binary and source RPMs for this pre-release on CentOS 4, CentOS 5, and Fedora 7. The CentOS RPMs will also work on RedHat Enterprise Linux 4 & 5. Read my announcement here: https://www.kevinworthington.com/index.php/2007/09/08/pre-release-lighttpd-150-r1992-redhatcentos-4-5-fedora-7-rpms/

"PRE-RELEASE: lighttpd-1.5.0-r1992" by Amr Hamdy

Fri, 07 Sep 2007 18:30:11 +0000

I've compiled this release on CentOS 5, 2.6.18-8.1.8.el5 SMP x86_64 , on a DELL PowerEdge 2900 server .. and it really cause frequent kernel panics .. The kernel stopped to panic when I went pack to version 1.4.17 ..

"PRE-RELEASE: lighttpd-1.5.0-r1992" by mike

Fri, 07 Sep 2007 12:52:11 +0000

Great job! Cant wait to compile and check uploadprogress!!!

"PRE-RELEASE: lighttpd-1.5.0-r1992" by Amr Hamdy

Fri, 07 Sep 2007 01:34:45 +0000

Excellent work ! :) .. by the way "--disable-ipv6" configure option doesn't work .. the lighttpd get ipv6 support even when gibing that option at compile time .. This didn't happen in the previous pre-release :)