LightTPD Changelog

What's new in LightTPD 1.4.37

Sep 8, 2015
  • Contains some regression fixes for 1.4.36, and cmake, scons and FreeBSD (and maybe other BSDs) related fixes. Static builds (for now scons only) have been improved. mmap handling in mod_cgi was improved, also the network mmap backend now handles SIGBUS (SIGBUS is triggered if a file gets smaller while reading; there are still some other places this can happen).
  • The internal API changed again, so please be careful with 3rd party plugins.
  • The test suite on our jenkins instance is now also run for scons (including static and fullstatic builds) and FreeBSD, hopefully preventing the kind of regressions especially FreeBSD had with 1.4.36 in future releases.

New in LightTPD 1.4.36 (Jul 27, 2015)

  • [ssl] disable SSL3.0 by default
  • escape all strings for logging
  • fix segfault when temp file for upload couldn’t be created (found by coverity)
  • changes to the internal API for buffers, chunks and more; 3rd party plugins are likely to break

New in LightTPD 1.4.31 (Jun 1, 2012)

  • [ssl] fix segfault in counting renegotiations for openssl versions without TLSEXT/SNI (thx carpii for reporting)
  • Move fdevent subsystem includes to implementation files to reduce conflicts (fixes #2373)
  • [mod_compress] fix handling if etags are disabled but cache-dir is set – may lead to double response
  • disable mmap by default (fixes #2391)
  • buffer_caseless_compare: always convert letters to lowercase to get transitive results, fixing array lookups (fixes #2405)
  • Fix handling of empty header list entries in http_request_split_value, fixing invalid read in valgrind (fixes #2413)
  • Fix access log escaping of ” and \\ (fixes #1551)
  • [mod_auth] Fix digest “md5-sess” implementation (Errata ID 1649, RFC 2617) (fixes #2410)
  • [auth] Add “AUTH_TYPE” environment (for * cgi), remove fastcgi specific workaround, add fastcgi test case (fixes #889)
  • [mod_*cgi,mod_accesslog] Fix splitting :port with ipv6 (fixes #2333, thx simoncpu)
  • Detect multiple -f options: show error message instead of assert (fixes #2416)
  • [mod_extforward] Support ipv6 addresses (fixes #1889)
  • [mod_redirect] Support url.redirect-code option (fixes #2247)
  • Fix --enable-mmap handling in configure.ac