root/tags/lighttpd-1.4.19/NEWS

Revision 2125, 30.7 kB (checked in by darix, 6 months ago)

- added CVE for the mod_userdir bug

Line 
1
2====
3NEWS
4====
5
6- 1.4.19 -
7
8  * added support for If-Range: <date> (#1346)
9  * added support for matching $HTTP["scheme"] in configs
10  * fixed initgroups() called after chroot (#1384)
11  * fixed case-sensitive check for Auth-Method (#1456)
12  * execute fcgi app without /bin/sh if used as argument to spawn-fcgi (#1428)
13  * fixed a bug that made /-prefixed extensions being handled also when
14    matching the end of the uri in fcgi,scgi and proxy modules (#1489)
15  * print error if X-LIGHTTPD-send-file cannot be done; reset header
16    Content-Length for send-file. Patches by Stefan Buehler
17  * prevent crash in certain php-fcgi configurations (#841)
18  * add IdleServers and Scoreboard directives in ?auto mode for mod_status (#1507)
19  * open log immediately after daemonizing, fixes SIGPIPEs on startup  (#165)
20  * HTTPS env var should be "on" when using mod_extforward and the X-Forwarded-Proto header is set. (#1499)
21  * generate ETag and Last-Modified headers for mod_ssi based on newest modified include (#1491)
22  * support letterhomes in mod_userdir (#1473)
23  * support chained proxies in mod_extforward (#1528)
24  * fixed bogus "cgi died ?" if we kill the CGI process on shutdown
25  * fixed ECONNRESET handling in network-openssl
26  * fixed handling of EAGAIN in network-linux-sendfile (#657)
27  * reset conditional cache (#1164)
28  * create directories in mod_compress (was broken with alias/userdir) (#1027)
29  * fixed out of range access in fd array (#1562, #372) (CVE-2008-0983)
30  * mod_compress should check if the request is already handled, e.g. by fastcgi (#1565)
31  * remove broken workaround for buggy Opera version with ssl/chunked encoding (#285)
32  * generate etag/last-modified header for on-the-fly-compressed files (#1171)
33  * req-method OPTIONS: do not insert default response if request was denied, do not deny OPTIONS by default (#1324)
34  * fixed memory leak on windows (#1347)
35  * fixed building outside of the src dir (#1349)
36  * fixed including of stdint.h/inttypes.h in etag.c (#1413)
37  * do not add Accept-Ranges header if range-request is disabled (#1449)
38  * log the ip of failed auth tries in error.log (enhancement #1544)
39  * fixed RoundRobin in mod_proxy (#516)
40  * check for symlinks after successful pathinfo matching (#1574)
41  * fixed mod-proxy.t to run with a builddir outside of the src dir
42  * do not suppress content on "307 Temporary Redirect" (#1412)
43  * fixed Content-Length header if response body gets removed in connections.c (#1412, part 2)
44  * do not generate a "Content-Length: 0" header for HEAD requests, added test too
45  * remove compress cache file if compression or write failed (#1150)
46  * fixed body handling of status 300 requests
47  * spawn-fcgi: only try to connect to unix socket (not tcp) before spawning (#1575)
48  * fix sending source of cgi script instead of 500 error if fork fails (CVE-2008-1111)
49  * fix min-procs handling in mod_scgi.c, just set to max-procs (patch from #623)
50  * fix sending "408 - Timeout" instead of "410 - Gone" for timedout urls in mod_secdownload (#1440)
51  * workaround #1587: require userdir.path to be set to enable mod_userdir (empty string allowed) (CVE-2008-1270)
52  * make configure checks for --with-pcre, --with-zlib and --with-bzip2 failing if the headers aren't found
53  * fixed handling of waitpid() == EINTR mod_ssi on solaris
54
55- 1.4.18 - 2007-09-09
56
57  * fixed compile error on IRIX 6.5.x on prctl() (#1333)
58  * fixed forwarding a SIGINT and SIGHUP when using max-workers (#902)
59  * fixed FastCGI header overrun in mod_fastcgi (reported by mattias@secweb.se)
60  * fixed hanging redirects with keep-alive due to missing
61    "Content-Length: 0" headers
62  * fixed crashing when using undefined environment variables in the config
63  * fixed compilation of mod_mysql_vhost on irix (#1341)
64
65- 1.4.17 - 2007-08-29
66
67  * added dir-listing.set-footer in mod_dirlisting (#1277)
68  * added sending UID and PID for SIGTERM and SIGINT to the logs
69  * fixed hardcoded font-sizes in mod_dirlisting (#1267)
70  * fixed different ETag length on 32/64 platforms (#1279)
71  * fixed compression of files < 128 bytes by disabling compression (#1241)
72  * fixed mysql server reconnects (#518)
73  * fixed disabled keep-alive for dynamic content with HTTP/1.0 (#1166)
74  * fixed crash on mixed EOL sequences in mod_cgi
75  * fixed key compare (#1287)
76  * fixed invalid char in header values (#1286)
77  * fixed invalid "304 Not Modified" on broken timestamps
78  * fixed endless loop on shrinked files with sendfile() on BSD (#1289)
79  * fixed counter overrun in ?auto in mod_status (#909)
80  * fixed too aggresive caching of nested conditionals (#41)
81  * fixed possible overflow in unix-socket path checks on BSD (#713)
82  * fixed extra Content-Length header on 1xx, 204 and 304 (#1002)
83  * fixed handling of duplicate If-Modified-Since to return 304
84  * fixed extracting status code from NPH scripts (#1125)
85  * fixed prctl() usage (#1310)
86  * removed config-check if passwd files exist (#1188)
87  * fixed crash when etags are disabled but the client sends one (#1322)
88  * fixed crash when freeing the config in mod_alias
89  * fixed server.error-handler-404 breakage from 1.4.16 (#1270)
90  * fixed entering 404-handler from dynamic content (#948)
91  * added more debug infos for FAM based stat-cache
92  * use more LSB like paths in the sample config (#1242)
93
94- 1.4.16 - 2007-07-25
95
96  * added static-file.etags, etag.use-inode, etag.use-mtime, etag.use-size
97    to customize the generation of ETags for static files. (#1209)
98    (patch by <Yusufg@gmail.com>)
99  * fixed typecast of NULL on execl() (#1235)
100    (patch by F. Denis)
101  * fixed circumventing url.access-deny by trailing slash (#1230)
102  * fixed crash on duplicate headers with trailing WS (#1232)
103  * fixed accepting more connections then requested (#1216)
104  * fixed mem-leak in mod_auth (reported by Stefan Esser)
105  * fixed crash with md5-sess and cnonce not set in mod_auth (reported by Stefan Esser)
106  * fixed missing check for base64 encoded string in mod_auth and Basic auth
107    (reported by Stefan Esser)
108  * fixed possible crash in Auth-Digest header parser on trailing WS in
109    mod_auth (reported by Stefan Esser)
110  * fixed check on stale errno values, which broke handling of broken fastcgi
111    applications. (#1245)
112  * fixed crash on 32bit archs when debug-msgs are printed in mod_scgi, mod_fastcgi
113    and mod_webdav (#1263)
114
115- 1.4.15 - 2007-04-13
116
117  * fixed broken Set-Cookie headers
118
119- 1.4.14 - 2007-04-13
120
121  * fix crash if gethostbyaddr() failed on redirect [1718]
122  * properly handle 206 responses generated by *cgi scripts. (#755) [1716]
123  * added HTTPS=on to the environment of cgi scripts (#861) [1684]
124  * fix handling of 303 (#1045) [1678]
125  * made the configure check for lua more portable [1677]
126  * added mod_extforward module [1665]
127  * references to the fam stat cache engine should be conditional (#1039) [1664]
128  * fix http 500 errors (colin.stephen/at/o2.com) #1041 [1663]
129  * prevent wrong pidfile unlinking on graceful restart (Chris Webb) [1656]
130  * ignore empty packets from STDERR stream. #998
131  * fix a crash for files with an mtime of 0 reported by cubiq on irc [1519]
132    CVE-2007-1870
133  * allow empty passwords with ldap (J�Sonnenberger) [1516]
134  * mod_scgi.c segfault fix #964 [1501]
135  * Added round-robin support to mod_fastcgi [1500]
136  * Handle DragonFlyBSD the same way as Freebsd (J�Sonnenberger) [1492,1676]
137  * added now and weeks support to mod_expire. #943
138  * fix cpu hog in certain requests [1473] CVE-2007-1869
139  * fix for handling hostnames with trailing dot [1406]
140  * fixed header-injection via server.tag (#1106)
141  * disabled caching of files without a content-type to solve the
142    aggressive caching of FF
143  * remove trailing white-spaces from HTTP-requests before parsing (#1098)
144  * fixed accesslog.use-syslog in a conditional and the caching of the
145    accesslog for files (fixes #1064)
146  * fixed various crashes at startup on broken accesslog.format strings (#1000)
147  * fixed handling of %% in accesslog.format
148  * fixed conditional dir-listing.exclude (#930)
149  * reduced default PATH_MAX to 255 (#826)
150  * ECONNABORTED is not known on cygwin (#863)
151  * fixed crash on url.redirect and url.rewrite if %0 is used in a global context
152    (#800)
153  * fixed possible crash in debug-message in mod_extforward
154  * fixed compilation of mod_extforward on glibc < 2.3.4
155  * fixed include of empty in the configfiles (#1076)
156  * send SIGUSR1 to fastcgi children before SIGTERM. libfcgi wants SIGUSR1. (#737)
157  * fixed missing AUTH_TYPE entry in the fastcgi environment. (#889)
158  * fixed compilation in network_writev.c on MacOS X 10.3.9 (#903)
159  * added kill-signal as another setting for fastcgi backends. See the wiki for more.
160
161- 1.4.13 - 2006-10-09
162
163  * added initgroups in spawn-fcgi (#871)
164  * added apr1 support htpasswd in mod-auth (#870)
165  * added lighty.stat() to mod_magnet
166  * fixed segfault in splitted CRLF CRLF sequences
167    (introduced in 1.4.12) (#876)
168  * fixed compilation of LOCK support in mod-webdav
169  * fixed fragments in request-URLs (#869)
170  * fixed pkg-config check for lua5.1 on debian
171  * fixed Content-Length = 0 on HEAD requests without
172    a known Content-Length (#119)
173  * fixed mkdir() forcing 0700 (#884)
174  * fixed writev() on FreeBSD 4.x and older (#875)
175  * removed warning about a 404-error-handler
176    returned 404
177  * backported and fixed the buildsystem changes for
178    webdav locks
179  * fixed plugin loading so we can finally load lua
180    extensions in mod_magnet scripts
181  * fixed large uploads if xattr is enabled
182
183- 1.4.12 - 2006-09-23
184
185  * added experimental LOCK support for webdav
186  * added Content-Range support for PUT in webdav
187  * added support for += on empty arrays in config-files
188  * added ssl.cipher-list and ssl.use-sslv2
189  * added $HTTP["querystring"] conditional
190  * added mod_magnet as long-term replacement for mod_cml
191  * added work-around for a Opera Bug with SSL + Chunked-Encoding
192  * changed --print-config to print to stdout instead of stderr
193  * changed no longer use 0600 for new files with webdav. umask is
194    honored. Make sure you have set a proper umask.
195  * fixed upload hangs with SSL
196  * fixed connection drops with SSL (aka bad retry)
197  * fixed path traversal with \ on cygwin
198  * fixed mem-leak in mod_flv_streaming
199  * fixed required trailing newline in configfiles (#142)
200  * fixed quoting the autoconf files (#466)
201  * fixed empty Host: + $HTTP["host"] handling (#458)
202  * fixed handling of If-Modified-Since if ETag is not set
203  * fixed default-shell if SHELL is not set (#441)
204  * fixed appending and assigning of env.* vars
205  * fixed empty FCGI_STDERR packets
206  * fixed conditional server.allow-http-11
207  * fixed handling of follow-symlink + lstat()
208  * fixed SIGHUP handling if max-workers is used
209  * fixed "Software caused connection abort" messages on FreeBSD
210
211- 1.4.11 - 2006-03-09
212
213  * added ability to specify which ip address spawn-fci listens on
214    (agkr/at/pobox.com)
215  * added mod_flv_streaming to streaming Flash Movies efficiently
216  * fixed handling of error codes returned by mod_dav_svn behing a
217    mod_proxy
218  * fixed error-messages in mod_auth and mod_fastcgi
219  * fixed re-enabling overloaded local fastcgi backends
220  * fixed handling of deleted files in linux-sendfile
221  * fixed compilation on BSD and MacOSX
222  * fixed $SERVER["socket"] on a already bound socket
223  * fixed local source retrieval on windows
224    (secunia)
225  * fixed hanging cgi if remote side is dieing while reading
226    from the pipe (sandy/at/meebo.com)
227
228- 1.4.10 - 2006-02-08
229
230  * added docs for mod_dirlisting
231  * added fastcgi.map-extensions to mod_fastcgi
232  * fixed load balancing for mod_fastcgi
233  * fixed extra newline for syslog() in mod_accesslog
234  * fixed user-track cookie for IE in mod_usertrack
235  * fixed crash in digest handling in mod_auth
236  * fixed handling of 301 response-bodies from a mod_proxy backend
237  * fixed loading of base modules if server.modules is not set
238  * fixed broken cgi if mod_scgi is loaded
239
240- 1.4.9 - 2006-01-14
241
242  * added server.core-files option (sandy <sandy/at/meebo.com>)
243  * added docs for mod_status
244  * added mod_evasive to limit the number of connections by IP (<w1zzard/at/techpowerup.com>)
245  * added the power-magnet to mod_cml
246  * added internal statistics to mod_fastcgi
247  * added server.statistics-url to get internal statistics from mod_status
248  * added support for conditional range-requests through If-Range
249  * added static building via scons
250  * fixed 100% cpu loops in mod_cgi ("sandy" <sjen/at/cs.stanford.edu>)
251  * fixed handling for secure-download.timeout (jamis/at/37signals.com)
252  * fixed IE bug in content-charset in the output of mod_dirlisting (sniper/at/php.net)
253  * fixed typos and language in the docs (ryan-2005/at/ryandesign.com)
254  * fixed assertion in mod_cgi on HEAD request is Content-Length (<sandy/at/meebo.com>)
255  * fixed handling if equal but duplicate If-Modified-Since request headers
256  * fixed endless loops in mod_fastcgi if backend is dead
257  * fixed Depth: 1 handling in PROPFIND requests on empty dirs
258  * fixed encoding of UTF8 encoded dirlistings (Jani Taskinen <sniper/at/iki.fi>)
259  * fixed initial bind to a unix-domain socket through server.bind
260  * fixed handling of lowercase filesystems
261  * fixed duplicate request headers cause by mod_setenv
262
263- 1.4.8 - 2005-11-23
264
265  * added auto-reconnect to ldap-server in mod_auth
266    (joerg/at/netbsd.org)
267  * changed auth.ldap-cafile to be optional
268    (joerg/at/netbsd.org)
269  * added strip_request_uri in mod_fastcgi
270  * added more X-* headers to mod_proxy
271    (Ben Grimm <bengrimm/at/gmail.com>)
272  * added 'debug' to simple-vhost to suppress the
273    (mod_simple_vhost.c.157) No such file or directory /servers/ww.lighttpd.net/pages/
274    messages by default
275  * added support to let the server listen on UNIX-socket
276  * changed default stat-cache-engine to 'simple'
277  * removed debian/ dir from source package on request by packager
278  * fixed max-age timestamps in mod_expire
279  * fixed encoding the filenames in PROPFIND in mod_webdav
280  * fixed range request handling in network_writev
281  * fixed retry on connect error in mod_fastcgi
282    (Robert G. Jakabosky <bobby/at/alphatrade.com>)
283  * fixed possible crash in mod_webdav if sqlite3 support
284    is available but not use
285  * fixed fdvent-handler init if server.max-worker was used
286    (Siddharth Vijayakrishnan <mail/at/bluefireworks.net>)
287  * fixed missing cleanup in mysql_vhost
288  * fixed assert() in "connections.c:962:
289      connection_handle_read_state: Assertion 'c->mem->used' failed."
290  * fixed 64bit issue in md5
291  * fixed crash in mod_status
292  * fixed duplicate headers in mod_proxy
293  * fixed Content-Length in HEAD request in mod_proxy
294  * fixed unsigned/signed comparisions
295  * fixed streaming in mod_cgi
296  * fixed possible overflow in password-salt handling
297    (reported on slashdot by james-web/at/and.org)
298  * fixed server-traffic-limit if connection limit is not set
299
300- 1.4.7 - 2005-11-02
301
302  * added FD_CLOEXEC to fds which are kept open for a longer time
303  * added smaller, moving mmaped windows to network_writev
304  * added madvise() to instruct the kernel the do proper read-ahead in network_writev
305  * added support for %I in mod_accesslog
306  * added better compat to Apache for ?auto in mod_status
307  * added support for userdirs without a entry in /etc/passwd in mod_userdir
308    (rob/at/inversepath.com)
309  * added startup-time selectable network-backend
310  * added location of upload-files to config as array
311  * added webdav.log-xml for logging xml-content in mod_webdav
312  * added Cache-Control: max-age to mod_expire
313  * workaround missing client-bug by assuming we received a close-notify on
314    non-keep-alive requests in SSL request
315  * disabled kerberos5 support by default to fix compilation on RHEL
316  * fixed order of library checks to fix compilation on Solaris 9
317  * fixed open file-descriptors on read-error
318  * fixed crash if /var/tmp is not writable
319
320- 1.4.6 - 2005-10-09
321
322  * fixed compilation on MacOS X and cygwin
323  * fixed compressed output if caching was disabled (seen in IE and Opera)
324  * fixed range-request option
325  * fixed mysql-vhost module (was broken in 1.4.5)
326  * fixed false positive in the detection of case-insensitive FS
327
328- 1.4.5 - 2005-10-02
329
330  * added all DeltaV methods as known methods
331  * added buffer-to-disk of request content
332  * added warning for unused variables in conditionals
333  * added global index-generators to mod_indexfile
334  * fixed caching for remote-ip conditionals with keep-alive
335  * fixed redirects with content
336  * fixed infinite loop in exec-cmd in mod_ssi
337  * fixed segfault in config handling for mod_mysql_vhost
338  * fixed segfault on FIFOs/Sockets
339  * fixed possible crash on uninit memory if If-Modified-Since was too long
340  * fixed accounting of mem-chunks
341  * fixed starving of connections on high load
342  * fixed crc errors in mod_compress on 64bit platforms
343  * fixed handling of overlapping fastcgi packets (bug added in 1.4.4)
344  * fixed logic of conditionals if a header was not set
345  * fixed a segfault in mod_rewrite if %1 references were used
346  * fixed handling of empty request URIs in HTTP requests
347
348- 1.4.4 - 2005-09-16
349  * added support for %V in mod_accesslog
350  * added a option for a FastCGI responser to send static files
351  * added md5 and blowfish hashes to htpasswd
352  * fixed METHOD in mod_accesslog of WebDAV methods
353  * fixed check for permission before files in sent
354  * fixed mod-proxy and content for non-POST requests
355  * fixed compilation of mod_cml on MacOS X
356  * fixed SSL errmsg after accept()
357  * fixed memleak in stat-cache
358  * fixed aborted connections if file was moved while in transfer
359  * fixed mem-usage for large FastCGI transfers
360
361- 1.4.3 - 2005-09-01
362
363  * added gracefull shutdown
364  * added server.max-connections
365  * fixed compilation on all BSD platforms
366  * fixed init of kqueue and /dev/poll after daemonize
367  * fixed segfault if select() is event-handler and more than FD_SETSIZE
368    fds are opened
369  * fixed compilation of mod_cml
370  * fixed bin-copy-env in mod_fastcgi
371
372- 1.4.2 - 2005-08-29
373
374  * fixed mimetype detection on uppercase extensions
375  * fixed memleak in stat-cache
376  * fixed infinite loop in mod_cgi
377  * fixed alignment crashes on sparc64 and alpha64
378  * fixed test system for gentoo ebuild
379  * fixed infinite loop in SSL
380  * fixed range request for files > 2Gb
381
382- 1.4.1 - 2005-08-22
383
384  * added a complete Class 1 complient mod_webdav
385  * fixed ssl support (especially on OpenBSD)
386  * fixed response header in body problem in mod_cgi
387  * fixed numbers before body problem
388  * fixed compilation on Solaris and FreeBSD
389  * fixed conditional options in mod_dirlisting
390  * fixed segfault in mod_dirlisting for NFS directories
391  * fixed check for docroot in change-root environments
392
393- 1.4.0 - 2005-08-17
394
395  * added nested conditionals
396  * added remote-ip to $HTTP
397  * added support for stat-cache via FAM
398  * added a read-only WebDAV module
399  * fixed cleanup in mod_proxy and mod_fastcgi
400  * fixed handling of filenames on case-insensitive filesystems
401
402- 1.3.16 - 2005-07-31
403
404  * added Date: headers to dynamic HTTP/1.0 requests
405  * added support for OPTION * HTTP/1.1
406  * added support for accesslog to syslog
407  * added support for PATH_INFO guessing if check-local is disabled in
408      mod_fastcgi
409  * added switch to disable range-requests
410  * added valid-user option for mod_auth (tigger at gentoo.org)
411  * added JavaScript based sorting to mod_status (erik)
412  * added selective TCP_CORK (Christian von Roques)
413  * break up endless loops with Status: 500
414  * fixed endless loops in mod_rewrite
415  * mapped url.rewrite and url.rewrite-final to uri.rewrite-once
416  * fixed compilation for mod_trigger_b4_dl
417  * fixed 'can't reach host' in mod_proxy
418  * error-handler-404 defaults to Status: 200 and static files work now
419
420- 1.3.15 - 2005-07-15
421
422  * added mod_cml
423  * added mod_trigger_b4_dl
424  * added encoding to mod_dirlisting
425  * added ?auto to mod_status
426  * relaxed handling of characters in URIs even more
427  * fixed detection of sendfile() on Linux 2.4.x
428  * fixed comparision of buffers for short strings
429  * server.errorfile-prefix is now conditional
430  * fixed mod_rrdtool to close STDERR
431
432- 1.3.14 - 2005-06-15
433
434  * added SCGI support via mod_scgi
435  * added hash-based and round-robin load balancing to mod_proxy
436  * fixed range requests larger than 2Gb
437  * fixed compilation on Solaris
438  * fixed endless loops in mod_fastcgi, mod_cgi and mod_proxy
439  * fixed handling of URIs for '+' and characters > 127
440
441- 1.3.13 - 2005-03-06
442
443  * added customizable directory listings
444  * fixed compile error on all BSD unixes
445  * fixed PATHINFO handling for FastCGI
446  * fixed handling of remote-close on FreeBSD and OpenSSL
447
448- 1.3.12 - 2005-03-02
449
450  * added ssl.ca-file
451  * added support for \n\n as terminator
452  * rewrote test-framework and added more tests
453  * fixed cgi.assign with empty handler
454  * fixed segfault in debug-code
455  * fixed mod_expire if modification-timestamps are used
456  * fixed segfault on duplication Host-headers
457  * fixed endless loop in mod_fastcgi
458  * fixed handling of dead fastcgi-processes
459
460- 1.3.11 - 2005-02-20
461
462  * added REMOTE_PORT and SERVER_ADDR to CGI-env
463  * relaxed handling of newlines before keep-alive requests
464  * relaxed uri-parser again
465  * fixed PHP_SELF for php
466  * fixed compilation on MacOS X
467  * fixed handling of EPIPE and ECONNRESET
468  * fixed crash in mod_auth if config-options are missing
469  * fixed handling of missing trailing / in mod_userdir
470  * fixed conditional secdownload.secret
471  * fixed REPORT ME error due to failed reconnects in mod_fastcgi
472  * fixed cmdline handling in mod_fastcgi
473
474- 1.3.10 - 2005-02-06
475
476  * added support for full commandline in spawn-fcgi
477  * fixed missing check for IP-address in mod_fastcgi
478  * fixed compile error with openssl in mod_fastcgi
479  * removed a debug-message from network-functions
480
481- 1.3.9 - 2005-02-06
482
483  * added a stricter URI parser
484  * added a check to the CGI spawner if the cgi-handler exists
485  * added documentation for SSL and mod_status
486  * added handling of startup environment to FastCGI
487  * improved performance in FastCGI in buildind the FastCGI header
488  * fixed min-procs and max-procs in FastCGI on PowerPC
489  * fixed crash in setenv.add-response-header
490  * fixed handling of nph-scripts in CGI
491  * fixed accidently sending out physical file in CGI on error
492  * fixed cygwin support
493  * fixed handling of missing files
494  * fixed HEAD requests for dynamic requests
495
496- 1.3.8 - 2005-01-30
497
498  * added traffic shaping by remote host and virtual server
499  * added auto-spawning of FastCGI process on demand
500  * added virtual host based on MySQL
501  * added mod_setenv to add envirnoment and http headers on the fly
502  * added support for syslog in mod_accesslog
503  * improved output of mod_status
504  * improved debug output in request handling
505  * fixed build problems on netbsd 1.4.x and 1.5.x
506  * fixed status.url configuration
507  * fixed handling of != and !~ in configutation
508  * fixed special cases in keep-alive handling
509  * fixed timeout handling in handling POST requests
510  * fixed mode AUTHORIZER in FastCGI
511  * fixed handling if internal redirects if no Host: is supplied
512  * fixed mod_alias + pathinfo
513  * fixed directory indexes and permissions
514  * enabled sending errorlog to syslog again
515
516- 1.3.7 - 2004-12-11
517
518  * added retries for a fastcgi connect if a php-childs
519    dies at startup
520  * update the debian directory
521  * added setgroups() to drop all group-privs
522  * added native port to windows via mingw32
523  * added server.tag = '...'
524  * added support for ${...} in mod_ssi
525  * ported all plugins to conditional support
526  * fixed multipart handling in cgi
527  * fixed kqueue event-handler
528  * fixed wrap-around in mod_status
529  * fixed crash with SSL + FastCGI
530  * fixed detection of SSL headers
531  * fixed handling of dangling SSL_shutdown
532  * fixed detection of keep-alive of Firefox
533
534- 1.3.6 - 2004-11-03
535
536  * added spawn-fcgi to the distribution
537  * added support in fastcgi module to spawn fastcgi
538    processes itself
539  * fixed logfile cycling if external logging is used
540  * fixed connection handling in fastcgi if no chunk
541    encoding is used
542  * fixed internal redirects on directories if a query
543    string is supplied
544  * fixed cgi-module for POST request above 4k
545  * fixed mod_alias and follow-symlink
546
547- 1.3.5 - 2004-10-31
548
549  * added mod_alias
550  * added mod_userdir
551  * added the exec command to the SSI handler
552  * added a switch to disable follow-symlinks
553  * added a switch to disable IPv6 at compile-time
554  * fixed compilation on FreeBSD and NetBSD 1.3.x
555  * fixed segfault in pipelining
556  * fixed a segfault in writev() handler if LFS is used
557
558- 1.3.4 - 2004-10-24
559
560  * added limiter for open files
561  * added logging of user supplied data to accesslogs
562  * added build target for OpenWRT
563  * added plain backend support for auth-digest
564  * fixed handling the external accesslog processes
565  * fixed SERVER_NAME in CGI and FastCGI
566
567- 1.3.3 - 2004-10-16
568
569  * added support for NL terminators in CGI-scripts
570  * added support for conditionals in mod_auth,
571    mod_simple_vhost and mod_evhost
572  * added a error-handler for 404 codes
573  * fixed request counter in the rrdtool module
574  * fixed log-file cycling
575  * fixed seg-fault
576
577- 1.3.2 - 2004-09-30
578
579  * fixed file-cache
580
581- 1.3.1 - 2004-09-30
582
583  * fixed file-cache
584  * fixed parsing of IPv6 adresses
585  * fixed cgi for cygwin
586  * fixed test-suite for FreeBSD and IRIX
587  * fixed handling of shrinked files
588  * fixed handling of REQUEST_URI after rewrite
589
590- 1.3.0 - 2004-09-17
591
592  * added build for MacOS X and Cygwin
593  * added handling of more than one socket
594  * added config-conditions for User-Agent and Referer
595  * added final rewrite-rules
596
597- 1.2.8 - 2004-09-11
598
599  * added a cache for mimetypes
600  * added X-Forwarded-For for mod_proxy
601  * fixed handling of comments in If-Modified-Since
602  * fixed error handling in FastCGI code
603  * fixed expire plugin for second Expire header
604
605- 1.2.7 - 2004-09-04
606
607  * added mod_rrdtool for internal statistics
608  * added xattr support
609  * added user-controlable timeouts
610  * improved documentation for many plugins
611  * fixed POST requests for mod_proxy
612  * fixed rare hang with CGI
613  * fixed seg-fault if no configfile is specified
614  * fixed rare problem in FastCGI header generation
615
616- 1.2.6 - 2004-08-26
617
618  * added apache-like accesslog definition
619  * enabled timestamp cache again
620  * improved performance in the string compare functions
621  * fixed double-free in fastcgi handler
622  * fixed error-handling in cgi handler
623
624- 1.2.5 - 2004-08-10
625
626  * added skeleton for solaris 10 port-API
627  * added compression support even if no cachedir is set
628  * added conditional configoptions
629  * fixed compilation on OpenBSD
630  * fixed kqueue support
631  * fixed pipelining bug
632  * fixed parallel build (triggered by Gentoo)
633  * updated debian postinst
634
635- 1.2.4 - 2004-07-31
636
637  * added kqueue support
638  * added server-side includes (mod_ssi)
639  * fixed large post uploads in fastcgi
640  * fixed rt-signals handling of delayed events
641
642- 1.2.3 - 2004-07-10
643
644  * added a proxy module for Java and friends
645  * added support to pass accesslog through an external programm
646  * added mimetypes for text/css and text/javascript
647  * fixed index-files for FastCGI if webserver is in chroot
648  * fixed error messages of CGI process fails to exec()
649  * fixed detection of pcre on IRIX and FreeBSD
650  * fixed timestamps in Last-Modified checks
651  * fixed 64bit builds
652  * fixed mmap-caching of large files
653  * relaxed the HTTP parser on empty headerfields
654
655- 1.2.2 - 2004-06-15
656
657  * added support for unix domain sockets in FastCGI
658  * fixed mmap caching
659  * fixed compile-time check for linux sendfile()
660  * fixed check for pcre.h on Fedora Core 2
661
662- 1.2.1 - 2004-05-30
663
664  * added experimental support for AIX send_file()
665  * added an mmap cache to the filehandle cache
666  * enabled FreeBSD sendfile support again
667  * added support for calling CGI binaries directly
668  * fixed pipelining for POST requests
669  * fixed some seg-faults if no configfile is used
670
671- 1.2.0 - 2004-05-17
672
673  * added conforming Expect: handling
674  * added a module for secure and fast downloading
675  * rewrote the event handling interface
676  * fixed array handling which might lead to 'missing header'
677  * fixed pipelining support
678  * fixed build of the localizer extension
679  * fixed cgi handling for headers which are flushed to often
680  * fixed compilation on Solaris 2.5
681
682- 1.1.9 - 2004-04-29
683
684  * added AUTHORIZER mode to the FastCGI module
685  * added 'check-local' option to disable local stat() in the FastCGI module
686  * added prefix-notation for FastCGI module
687  * added 'mod_usertrack'
688  * improved CGI/FastCGI spec conformance
689  * more code cleanup
690  * fixed HTTP/1.1 chunk headers
691  * fixed POST handling
692  * fixed SSL network handler
693  * fixed writev() network handler
694
695- 1.1.8 - 2004-04-16
696
697  * code cleanup
698  * limiting the size of the request-body and the request-header
699  * minor speed improvements
700  * tightend the HTTP-Parser again
701
702- 1.1.7 - 2004-04-12
703
704  * added REMOTE_USER to the Server->FastCGI parameters
705  * added bzip2 compression
706  * improved the error-messages from the new configfile parser
707  * fixed accesslog writing for errornous requests
708  * fixed LFS (64bit filesizes) handling
709  * fixed Content-Length for HEAD requests
710  * fixed some memory leaks in the configfile parser
711
712- 1.1.6 - 2004-04-10
713
714  * tightend the HTTP-Parser
715  * rewrote the configfile parser (based on lemon)
716  * fixed openssl support
717  * fixed mmap+write support
718  * use localtime in accesslog if possible
719
720- 1.1.5 - 2004-04-07
721
722  * added ldap backend to the auth
723  * added a mod_expire
724  * added debian packaging structure
725  * merged redhat and suse spec-file
726  * fixed eventhandler for solaris
727  * fixed 64bit fileoffsets
728  * fixed permissions of the PID-file
729
730- 1.1.4 - 2004-04-04
731
732  * added server.pid-file
733  * added support for solaris /dev/poll and solaris sendfilev()
734  * added support for writev()
735  * added PATHINFO support (again)
736  * fixed CLF logfile writing
737
738- 1.1.3 - 2004-03-25
739
740  * set default event-handler to 'poll'
741  * fixed logcycling in chroot()
742  * fixed hostname detection
743  * added syslog() as fallback for error-logging
744
745- 1.1.2 - 2004-03-22
746
747  * added a "docroot" setting for fastcgi processes
748  * performance improvements
749  * improved configure script
750  * rewrote the fastcgi config parser
751  * added a rc-script for RedHat
752  * added epoll() support for Linux 2.6.x
753
754- 1.1.1 - 2004-03-15
755
756  * added localizer module
757  * performance improvements
758  * code cleanup
759
760- 1.1.0 - 2004-03-06
761
762  * changed some configuration keys for better readability
763  * moved the virtual-host code to mod_simple_vhost
764  * added enhanced virtual host plugin from Christian Kruse
765  * added two new auth-backends (htpasswd, htdigest)
766  * fixed and improved authentification
767  * stricter parsing of the Host: field
768  * added a warning for unused configuration keys
769  * improved FastCGI documentation
770
771- 1.0.3 - 2004-02-13
772
773  * a startup script has been added (LSB compliant)
774  * HEAD requests were submitting the content like a GET request
775  * the virtual directory listing got a face-lifting and fixes
776  * request-headers are now handled case-in-sensitive as required
777    by the standard. this fixes POST requests for w3m and some Proxies.
778
779- 1.0.2 - 2004-02-07
780
781  * rearrangement of the default configfile
782  * some updates in the documentation
783  * a entry in the error-log for a 404
784  * stdout is no longer the default for the accesslog
Note: See TracBrowser for help on using the browser.