summaryrefslogtreecommitdiff
path: root/NEWS
Commit message (Expand)AuthorAgeFilesLines
* [mod_auth] add htpasswd -s (SHA1) support if openssl is used (needs openssl f...Stefan Bühler2013-04-291-0/+1
* [mod_auth] use crypt() on encrypted password instead of extracting salt first...Stefan Bühler2013-04-291-0/+1
* reject non ASCII characters in HTTP header namesStefan Bühler2013-03-251-0/+1
* call ERR_clear_error only for ssl connections in CON_STATE_ERRORStefan Bühler2013-03-251-0/+1
* [mod_fastcgi,log] support multi line logging (fixes #2252)Stefan Bühler2013-03-251-0/+1
* fix handling of If-Modified-Since if If-None-Match is present (don't return 4...Stefan Bühler2013-01-221-0/+2
* mod_fastcgi: fix mix up of "mode" => "authorizer" in other fastcgi configs (f...Stefan Bühler2013-01-041-1/+1
* - next is 1.4.33Stefan Bühler2012-11-211-1/+4
* remove whitespace at end of header keyslighttpd-1.4.32Stefan Bühler2012-11-211-0/+1
* fix DoS in Connection header value split (reported by Jesse Sipprell, CVE-201...Stefan Bühler2012-11-211-0/+1
* mod_extforward: log address of untrusted proxy with debug.log-request-handlingStefan Bühler2012-11-151-0/+1
* tests: make sure mod_proxy doesn't leave running processes (fixes #2435, thx ...Cyril Brulebois2012-11-091-0/+1
* detect "x-gzip"/"x-bzip2" as separate encodings, more strict encoding matchin...Stefan Bühler2012-11-091-0/+1
* network_server_init: fix double free and memleak on error (fixes #2440, thx k...Stefan Bühler2012-11-091-0/+1
* fix :port handling in $HTTP["host"] checks (fixes #2135. thx liming)Stefan Bühler2012-11-071-0/+1
* add PATCH method (fixes #2424)Stefan Bühler2012-11-071-0/+1
* configure.ac: remove old stuff, add some new to fix warnings in automake 1.12...Stefan Bühler2012-11-071-0/+1
* Handle ENAMETOOLONG, return 404 Not Found (fixes #2396, thx dererkazo)Stefan Bühler2012-11-071-0/+1
* Ignore EPIPE/ECONNRESET after SSL_shutdown (thx patdk-wk for reporting)Stefan Bühler2012-11-061-0/+1
* Code cleanup with clang/sparse (fixes #2437, thx kibi)Stefan Bühler2012-08-311-1/+1
* - next is 1.4.32Stefan Bühler2012-08-311-1/+4
* Fix --enable-mmap handling in configure.aclighttpd-1.4.31Stefan Bühler2012-05-311-1/+2
* [mod_redirect] Support url.redirect-code option (fixes #2247)Stefan Bühler2012-05-301-0/+1
* [mod_extforward] Support ipv6 addresses (fixes #1889)Stefan Bühler2012-05-181-0/+1
* Detect multiple -f options: show error message instead of assert (fixes #2416)Stefan Bühler2012-05-181-0/+1
* [mod_*cgi,mod_accesslog] Fix splitting :port with ipv6 (fixes #2333, thx simo...Stefan Bühler2012-04-191-0/+1
* [auth] Add "AUTH_TYPE" environment (for *cgi), remove fastcgi specific workar...Stefan Bühler2012-04-191-0/+1
* [mod_auth] Fix digest "md5-sess" implementation (Errata ID 1649, RFC 2617) (f...Stefan Bühler2012-04-191-0/+1
* Fix access log escaping of " and \\ (fixes #1551)Stefan Bühler2012-04-191-0/+1
* Fix handling of empty header list entries in http_request_split_value, fixing...Stefan Bühler2012-04-191-0/+1
* buffer_caseless_compare: always convert letters to lowercase to get transitiv...Stefan Bühler2012-04-081-0/+1
* Disable mmap by default (fixes #2391)Stefan Bühler2012-02-241-0/+1
* [mod_compress] fix handling if etags are disabled but cache-dir is set - may ...Stefan Bühler2012-01-111-0/+1
* Move fdevent subsystem includes to implementation files to reduce conflicts (...Stefan Bühler2011-12-251-0/+1
* [ssl] fix segfault in counting renegotiations for openssl versions without TL...Stefan Bühler2011-12-231-1/+1
* - next is 1.4.31Stefan Bühler2011-12-181-1/+4
* [libev/cgi] fix waitpid ECHILD errors in cgi with libev (fixes #2324)Stefan Bühler2011-12-181-0/+1
* [ssl] fix ssl connection aborts if files are larger than the MAX_WRITE_LIMIT ...Stefan Bühler2011-12-051-0/+1
* [core] accept dots in ipv6 addresses in host header (fixes #2359)Stefan Bühler2011-11-301-0/+1
* [ssl] add option to honor server cipher order, true by default (fixes #2364)Stefan Bühler2011-11-301-0/+1
* [ssl] count renegotiations to prevent client renegotiationsStefan Bühler2011-11-301-0/+1
* [mod_auth] Fix signedness error in http_auth (fixes #2370, CVE-2011-4362)Stefan Bühler2011-11-291-0/+1
* Fix mod_status bug: always showed "0/0" in the "Read" column for uploads (fix...Stefan Bühler2011-10-051-0/+1
* Don't overwrite 401 (auth required) with 501 (unknown method) (fixes #2341)Stefan Bühler2011-09-051-0/+1
* Add static-file.disable-pathinfo option to prevent handling of urls like .../...Stefan Bühler2011-08-301-0/+1
* [ssl] fix build errors when Elliptic-Curve Diffie-Hellman is disabledStefan Bühler2011-08-221-0/+2
* Always use our 'own' md5 implementation, fixes linking issues on MacOS (fixes...Stefan Bühler2011-07-301-1/+1
* - next is 1.4.30Stefan Bühler2011-07-031-1/+4
* fdevent: add solaris eventports (fixes #2171)lighttpd-1.4.29Stefan Bühler2011-06-131-0/+1
* [doc] Move docs to outdated/ subdir and refer to wiki instead (fixes #2248)Stefan Bühler2011-06-131-0/+1