PRE-RELEASE: lighttpd-1.4.13-r1370.tar.gz

jan — Wed, 04 Oct 2006 08:13:00 +0000

The crash reported in #876 is critical enough to fire another release shortly after 1.4.12 was released.

It also contains some minor bugfixes and a better check for lua 5.1. If you are running on Debian you can compile mod-magnet with —with-lua=lua5.1

Download: lighttpd-1.4.13-r1370.tar.gz

ChangeLog:

added initgroups in spawn-fcgi (#871)
added apr1 support htpasswd in mod-auth (#870)
fixed segfault in splitted CRLF CRLF sequences (introduced in 1.4.12) (#876)
fixed compilation of LOCK support in mod-webdav
fixed fragments in request-URLs (#869)
fixed pkg-config check for lua5.1 on debian

RELEASE: lighttpd 1.4.12

jan — Sat, 23 Sep 2006 19:17:00 +0000

I’m very proud to announce the release of 1.4.12.

After 8 pre-releases and several cross-compiles and test-runs no new bugs were found and you should have a solid and stable release in your hands.

Over the 1.4.11 was available for download (03/2006 – now) the number of lighty installations raised from 27 103 to 120 442 according to netcraft.com. That’s amazing. It was important for us to create a release is good enough to replace 1.4.11.

This release fixes several long-standing bugs like

SSL hangs with Opera (we added work-around for a bug in Opera)
a long list of fixes for SSL in general
added ssl.use-sslv2 and ssl.cipher-list for all who have to comply with PCI

and only added a 2 really new features:

(experimental) LOCK support for webdav
mod_magnet as long-term replacement for mod_cml

On mod_cml:

mod_cml is deprecated from now on
it will be removed in 1.5.0
mod_magnet provides the same functionality and more with a cleaner syntax and in a more generic form

Download:

lighttpd-1.4.12.tar.gz
http://www.lighttpd.net/download/lighttpd-1.4.12.tar.gz

MD5: 8f6756452138f5da384251f849b329f2

ChangeLog:

added experimental LOCK support for webdav
added Content-Range support for PUT in webdav
added support for += on empty arrays in config-files
added ssl.cipher-list and ssl.use-sslv2
added $HTTP[“querystring”] conditional
added mod_magnet as long-term replacement for mod_cml
added work-around for a Opera Bug with SSL + Chunked-Encoding
changed—print-config to print to stdout instead of stderr
changed no longer use 0600 for new files with webdav. umask is honored. Make sure you have set a proper umask.
fixed upload hangs with SSL
fixed connection drops with SSL (aka bad retry)
fixed path traversal with \ on cygwin
fixed mem-leak in mod_flv_streaming
fixed required trailing newline in configfiles (#142)
fixed quoting the autoconf files (#466)
fixed empty Host: + $HTTP[“host”] handling (#458)
fixed handling of If-Modified-Since if ETag is not set
fixed default-shell if SHELL is not set (#441)
fixed appending and assigning of env.* vars
fixed empty FCGI_STDERR packets
fixed conditional server.allow-http-11
fixed handling of follow-symlink + lstat()
fixed SIGHUP handling if max-workers is used
fixed “Software caused connection abort” messages on FreeBSD

lighttpd 1.4.10 released

jan — Wed, 08 Feb 2006 15:31:00 +0000

lighttpd 1.4.10 has been release and fixes the fastcgi and cgi problems of .9.

CGI should work again
fastcgi should not result in a crash under high load
load balancing in fastcgi should work as expected
broken digest request shouldn’t crash mod_auth

New is

  fastcgi.map-extensions = ( ".php3" => ".php" )
  fastcgi.server = ( ".php" => ... )

Links

lighty's life: Tag release

PRE-RELEASE: lighttpd-1.4.13-r1370.tar.gz

RELEASE: lighttpd 1.4.12

lighttpd 1.4.10 released