baserev update by copy to link target

• Files Changed
• Browse Source

  * a number of bug fixes
  * Fix HTTP/2 downloads >= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    “CipherString” => “EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384”,
    “Options” => “-ServerPreference”
    old defaults:
    “CipherString” => “HIGH”,
    “Options” => “ServerPreference”
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    – ssl.honor-cipher-order
    – ssl.dh-file
    – ssl.ec-curve
    – ssl.disable-client-renegotiation
    – ssl.use-sslv2
    – ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.

• Files Changed
• Browse Source

- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration

• Files Changed
• Browse Source

- update to 1.4.66:
  * [core] h2: optim: send window update in 16k units
  * [mod_magnet] reset for http-response-send-file
  * [multiple] fix json encoding
  * [core] buffer_append_bs_escaped_json()
  * [autoconf] update ax_prog_cc_for_build.m4
  * [doc] add libdeflate to INSTALL
  * [mod_webdav] cold func if xml reqbody w/o db conf
  * [mod_webdav] check reqbody Content-Type is XML
  * [doc] more consistent use of vars in examples
  * [core] do not load indexfile, dirlisting if unused
  * [mod_dirlisting] send ETag, Cache-Control w/ cache
  * [mod_openssl] compile compat w/ openssl < 1.1.0
  * [mod_webdav] webdav_reqbody_type_xml() fixes
  * [core] clarify server.username = "root" error msg
  * [mod_wolfssl] compat with older wolfssl versions
  * [core] fix li_base64_dec() on whitespace
  * [core] perf tweak buffer_eq_icase_ssn()
  * [mod_deflate] fix use of libdeflate for files>128k (fixes #3161)
  * [core] fix buffer_substr_replace() extend (fixes #3160)
  * [mod_webdav] build with Android NDK
  * [core] check r->http_status before handling Range
  * [core] preprocessor option to force crypto lib
  * [core] fix SIGUSR1 graceful restart w/ TLS (fixes #3164)
  * [mod_authn_gssapi] warn if no confidentiality flag (fixes #3163)
  * [mod_wstunnel] fix crash with bad hybivers (fixes #3165)
  * [core] perf: adjust max h2 stream send increment
  * [core] fix HTTP/2 downloads >= 4GiB (fixes #3166)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (“partial-put-copy-modify” => “enable”)
  * mod_accesslog option: accesslog.escaping = “json”
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ‘*’, part of “PRI *” preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)

• Files Changed
• Browse Source

• Browse Source