summaryrefslogtreecommitdiff
path: root/NEWS
Commit message (Expand)AuthorAgeFilesLines
* fix buffer, chunk and http_chunk APIStefan Bühler2015-02-081-0/+1
* print backtrace in assert logging with libunwindStefan Bühler2015-02-071-0/+1
* [connections] fix bug in connection state handlingStefan Bühler2015-02-071-0/+1
* [network] fix compile break in calculation of sockaddr_un size if SUN_LEN is ...Stefan Bühler2015-02-071-0/+1
* add NEWS entry for previous commitStefan Bühler2015-02-071-0/+1
* [ssl] disable SSL3.0 by defaultStefan Bühler2014-10-161-0/+1
* [mod_dirlisting,mod_redirect,mod_rewrite] abort config parsing if pcre-compil...Stefan Bühler2014-10-161-0/+1
* [build] use fortify flags with "extra-warnings"Stefan Bühler2014-10-161-0/+1
* add support for (Free)BSD extended attributesMoritz Wilhelmy2014-05-221-0/+1
* fix typo in NEWS entry for #2579Stefan Bühler2014-05-131-1/+1
* add more mime types and a script to generate mime.conf (fxies #2579)Stefan Bühler2014-05-131-0/+1
* fix bad shift in conditional netmask ".../0" handlingStefan Bühler2014-04-141-0/+1
* use keep-alive timeout while waiting for HTTP headers; use always the read ti...Stefan Bühler2014-04-021-1/+1
* - next is 1.4.36Stefan Bühler2014-04-021-2/+5
* fix SQL injection / host name validation (thx Jann Horn)lighttpd-1.4.35Stefan Bühler2014-03-121-0/+1
* check length of unix domain socket filenamesStefan Bühler2014-02-161-0/+1
* [mod_webdav] fix logic error in handling file creation errorStefan Bühler2014-02-161-0/+1
* fix unchecked return values from stream_open/stat_cache_get_entryStefan Bühler2014-02-161-0/+1
* [network] check return value of lseek()Stefan Bühler2014-02-161-0/+1
* force assertion: setting FD_CLOEXEC must work (if available)Stefan Bühler2014-02-161-0/+1
* [mod_cml_lua] fix null pointer dereferenceStefan Bühler2014-02-161-0/+1
* add force_assert() to enforce assertions as simple assert()s are disabled by ...Stefan Bühler2014-02-161-0/+1
* fix resource leaks in error cases on config parsing and other initializationsStefan Bühler2014-02-141-0/+1
* [buffer] fix length check in buffer_is_equal_right_lenStefan Bühler2014-02-141-0/+1
* remove logical dead codeStefan Bühler2014-02-141-0/+1
* add comments for switch fall throughsStefan Bühler2014-02-141-0/+1
* [mod_magnet] fix memory leakStefan Bühler2014-02-141-0/+1
* [mod_fastcgi,mod_scgi] fix resource leaks on spawning backendsStefan Bühler2014-02-141-0/+1
* [mod_dirlisting] fix memory leak if pcre failsStefan Bühler2014-02-141-0/+1
* [mod_rrdtool] fix invalid read (string not null terminated)Stefan Bühler2014-02-141-0/+1
* [mod_fastcgi] fix use after free (only triggered if fastcgi debug is active)Stefan Bühler2014-02-141-1/+1
* NEWS entry for previous commitStefan Bühler2014-02-141-1/+2
* - next is 1.4.35Stefan Bühler2014-01-201-0/+3
* [mod_webdav] fix fd leak found with parfait (fixes #2530, thx kukackajiri)Stefan Bühler2014-01-101-0/+1
* [mod_mysql_vhost] fix memory leak on config init (#2530)Stefan Bühler2014-01-101-0/+1
* [auto* build] remove -no-undefined from linker flags, as we actually link mod...Stefan Bühler2014-01-101-0/+1
* [core] decode URL before rewrite, enabling it to work in $HTTP["url"] conditi...Stefan Bühler2014-01-101-0/+1
* maintain physical.basedir (the "acting" doc-root as prefix of physical.path) ...Stefan Bühler2014-01-101-0/+1
* [ssl] fix regression from CVE-2013-4508 (client-cert sessions were broken)Stefan Bühler2013-11-131-0/+1
* [core] check success of setuid,setgid,setgroups (CVE-2013-4559)Stefan Bühler2013-11-131-0/+1
* [stat-cache] fix FAM cleanup/fdevent handlingStefan Bühler2013-11-131-0/+1
* [stat-cache] FAM: fix use after free (CVE-2013-4560)Stefan Bühler2013-11-131-0/+1
* NEWS entry for previous commitStefan Bühler2013-11-131-0/+1
* [ssl] fix SNI handling; only use key+cert+verify-client from SNI specific con...Stefan Bühler2013-11-051-0/+1
* [mod_extforward] fix compilation without IPv6, (not) using undefined var (fix...Stefan Bühler2013-10-131-0/+1
* [mod_auth] explicitly link ssl for SHA1 (fixes #2517)Stefan Bühler2013-10-131-1/+1
* - next is 1.4.34Stefan Bühler2013-09-271-1/+4
* [core] set signal handlers before forking child processes in modules/plugins_...Stefan Bühler2013-08-301-0/+1
* [core] allow files to be used as document-root (fixes #2475)Stefan Bühler2013-08-301-0/+1
* [mod_accesslog] add accesslog.syslog-level option (fixes #2480)Stefan Bühler2013-08-301-0/+1