summaryrefslogtreecommitdiff
path: root/NEWS
Commit message (Expand)AuthorAgeFilesLines
...
* [core] decode URL before rewrite, enabling it to work in $HTTP["url"] conditi...Stefan Bühler2014-01-101-0/+1
* maintain physical.basedir (the "acting" doc-root as prefix of physical.path) ...Stefan Bühler2014-01-101-0/+1
* [ssl] fix regression from CVE-2013-4508 (client-cert sessions were broken)Stefan Bühler2013-11-131-0/+1
* [core] check success of setuid,setgid,setgroups (CVE-2013-4559)Stefan Bühler2013-11-131-0/+1
* [stat-cache] fix FAM cleanup/fdevent handlingStefan Bühler2013-11-131-0/+1
* [stat-cache] FAM: fix use after free (CVE-2013-4560)Stefan Bühler2013-11-131-0/+1
* NEWS entry for previous commitStefan Bühler2013-11-131-0/+1
* [ssl] fix SNI handling; only use key+cert+verify-client from SNI specific con...Stefan Bühler2013-11-051-0/+1
* [mod_extforward] fix compilation without IPv6, (not) using undefined var (fix...Stefan Bühler2013-10-131-0/+1
* [mod_auth] explicitly link ssl for SHA1 (fixes #2517)Stefan Bühler2013-10-131-1/+1
* - next is 1.4.34Stefan Bühler2013-09-271-1/+4
* [core] set signal handlers before forking child processes in modules/plugins_...Stefan Bühler2013-08-301-0/+1
* [core] allow files to be used as document-root (fixes #2475)Stefan Bühler2013-08-301-0/+1
* [mod_accesslog] add accesslog.syslog-level option (fixes #2480)Stefan Bühler2013-08-301-0/+1
* [mod_simple_vhost] fix cache; skip module if simple-vhost.server-root is empt...Stefan Bühler2013-08-301-0/+1
* [core] check whether server.chroot existsStefan Bühler2013-08-301-0/+1
* [core] remove requirement that default doc-root has to exist, there are reaso...Stefan Bühler2013-08-301-0/+1
* [auth] new method "extern" to use already present REMOTE_USER (from magnet, s...Stefan Bühler2013-08-301-0/+1
* [auth] put REMOTE_USER into cgi environment, making it accessible to lua via ...Stefan Bühler2013-08-301-0/+1
* [ssl] add option ssl.empty-fragments, defaulting to disabled (fixes #2492)Stefan Bühler2013-08-301-0/+1
* [ssl] accept ssl renegotiations if they are not disabled (fixes #2491)Stefan Bühler2013-08-301-0/+1
* [ssl] Fix $HTTP["scheme"] conditional, could be "http" for ssl connections if...Stefan Bühler2013-07-311-0/+1
* [network] use constants available at compile time for maximum number of chunk...Stefan Bühler2013-06-291-0/+1
* [ssl] use DH only if openssl supports it (fixes #2479)Stefan Bühler2013-06-291-0/+1
* [core] recognize more http methods to forward to backends (fixes #2346)Stefan Bühler2013-06-291-0/+1
* [core] return 501 Not Implemented in static file mode for all methods except ...Stefan Bühler2013-06-291-0/+1
* [mod_userdir] add userdir.active option, "enabled" by defaultStefan Bühler2013-06-291-0/+1
* [auto* build] simplify autogen.sh, handle automake 1.13 test running (fixes #...Stefan Bühler2013-06-291-0/+1
* [mod_auth] fix invalid read in digest qop=auth-int handling (fixes #2478)Stefan Bühler2013-06-291-0/+1
* [cmake] Use TARGET_LINK_LIBRARIES instead of LINK_FLAGS for library dependenc...Stefan Bühler2013-06-291-0/+1
* fix undefined stuff found with clangStefan Bühler2013-05-151-0/+1
* fix some bugs found with canalyze (fixes #2484, thx Zhenbo Xu)Stefan Bühler2013-05-151-0/+1
* [mod_auth] fix base64_decode (#2484)Stefan Bühler2013-05-151-0/+1
* [mod_auth] add htpasswd -s (SHA1) support if openssl is used (needs openssl f...Stefan Bühler2013-04-291-0/+1
* [mod_auth] use crypt() on encrypted password instead of extracting salt first...Stefan Bühler2013-04-291-0/+1
* reject non ASCII characters in HTTP header namesStefan Bühler2013-03-251-0/+1
* call ERR_clear_error only for ssl connections in CON_STATE_ERRORStefan Bühler2013-03-251-0/+1
* [mod_fastcgi,log] support multi line logging (fixes #2252)Stefan Bühler2013-03-251-0/+1
* fix handling of If-Modified-Since if If-None-Match is present (don't return 4...Stefan Bühler2013-01-221-0/+2
* mod_fastcgi: fix mix up of "mode" => "authorizer" in other fastcgi configs (f...Stefan Bühler2013-01-041-1/+1
* - next is 1.4.33Stefan Bühler2012-11-211-1/+4
* remove whitespace at end of header keyslighttpd-1.4.32Stefan Bühler2012-11-211-0/+1
* fix DoS in Connection header value split (reported by Jesse Sipprell, CVE-201...Stefan Bühler2012-11-211-0/+1
* mod_extforward: log address of untrusted proxy with debug.log-request-handlingStefan Bühler2012-11-151-0/+1
* tests: make sure mod_proxy doesn't leave running processes (fixes #2435, thx ...Cyril Brulebois2012-11-091-0/+1
* detect "x-gzip"/"x-bzip2" as separate encodings, more strict encoding matchin...Stefan Bühler2012-11-091-0/+1
* network_server_init: fix double free and memleak on error (fixes #2440, thx k...Stefan Bühler2012-11-091-0/+1
* fix :port handling in $HTTP["host"] checks (fixes #2135. thx liming)Stefan Bühler2012-11-071-0/+1
* add PATCH method (fixes #2424)Stefan Bühler2012-11-071-0/+1
* configure.ac: remove old stuff, add some new to fix warnings in automake 1.12...Stefan Bühler2012-11-071-0/+1