RELEASE: lighttpd 1.4.12

I’m very proud to announce the release of 1.4.12.

After 8 pre-releases and several cross-compiles and test-runs no new bugs were found and you should have a solid and stable release in your hands.

Over the 1.4.11 was available for download (03/2006 - now) the number of lighty installations raised from 27 103 to 120 442 according to netcraft.com. That’s amazing. It was important for us to create a release is good enough to replace 1.4.11.

This release fixes several long-standing bugs like

  • SSL hangs with Opera (we added work-around for a bug in Opera)
  • a long list of fixes for SSL in general
  • added ssl.use-sslv2 and ssl.cipher-list for all who have to comply with PCI

and only added a 2 really new features:

  • (experimental) LOCK support for webdav
  • mod_magnet as long-term replacement for mod_cml

On mod_cml:

  • mod_cml is deprecated from now on
  • it will be removed in 1.5.0
  • mod_magnet provides the same functionality and more with a cleaner syntax and in a more generic form

Download:

  • lighttpd-1.4.12.tar.gz

https://download.lighttpd.net/lighttpd/releases-1.4.x/

MD5: 8f6756452138f5da384251f849b329f2

ChangeLog:

  • added experimental LOCK support for webdav
  • added Content-Range support for PUT in webdav
  • added support for += on empty arrays in config-files
  • added ssl.cipher-list and ssl.use-sslv2
  • added $HTTP["querystring"] conditional
  • added mod_magnet as long-term replacement for mod_cml
  • added work-around for a Opera Bug with SSL + Chunked-Encoding
  • changed --print-config to print to stdout instead of stderr
  • changed no longer use 0600 for new files with webdav. umask is honored. Make sure you have set a proper umask.
  • fixed upload hangs with SSL
  • fixed connection drops with SSL (aka bad retry)
  • fixed path traversal with \ on cygwin
  • fixed mem-leak in mod_flv_streaming
  • fixed required trailing newline in configfiles (#142)
  • fixed quoting the autoconf files (#466)
  • fixed empty Host: + $HTTP["host"] handling (#458)
  • fixed handling of If-Modified-Since if ETag is not set
  • fixed default-shell if SHELL is not set (#441)
  • fixed appending and assigning of env.* vars
  • fixed empty FCGI_STDERR packets
  • fixed conditional server.allow-http-11
  • fixed handling of follow-symlink + lstat()
  • fixed SIGHUP handling if max-workers is used
  • fixed “Software caused connection abort” messages on FreeBSD