summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorGlenn Strauss <gstrauss@gluelogic.com>2018-08-13 00:43:56 -0400
committerGlenn Strauss <gstrauss@gluelogic.com>2018-08-13 00:43:56 -0400
commita9e131fa376ade9aad7b7ee13098f6dd8337f84b (patch)
treef636daefa18de669da152f2f08a40a08a9911a81 /NEWS
parenta2114a1c9b34a165cf69439e21a5d1429e252554 (diff)
downloadlighttpd-git-a9e131fa376ade9aad7b7ee13098f6dd8337f84b.tar.gz
- next is 1.4.51
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS4
1 files changed, 4 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index a4a36345..eeef7411 100644
--- a/NEWS
+++ b/NEWS
@@ -3,6 +3,8 @@
NEWS
====
+- 1.4.51
+
- 1.4.50 - 2018-08-13
* [mod_extforward] allow explict IPs to be untrusted (#2860)
* [core] fix crash if 'host' empty in config (fixes #2876)
@@ -61,6 +63,8 @@ NEWS
* [build] add missing file for test_burl
* [core] quell insignificant coverity warning
* [core] extend server.http-parseopts
+ * [mod_alias] security: path traversal in mod_alias (in some use cases) (fixes #2898)
+ * [core] security: use-after-free after invalid Range request (fixes #2899)
- 1.4.49 - 2018-03-11
* [core] adjust offset if response header blank line