Changeset 1764

Timestamp:

04/13/2007 03:24:09 PM (17 months ago)

Author:

darix

Message:

- updated NEWS file

Files:

• branches/lighttpd-1.4.x/NEWS (modified) (4 diffs)

branches/lighttpd-1.4.x/NEWS

@@ -4 +4 @@
 ====
 
-- 1.4.14 - ???
+- 1.4.14 - 2007-04-13
+
   * fix crash if gethostbyaddr() failed on redirect [1718]
   * properly handle 206 responses generated by *cgi scripts. (#755) [1716]
@@ -16 +17 @@
   * ignore empty packets from STDERR stream. #998
   * fix a crash for files with an mtime of 0 reported by cubiq on irc [1519]
+    CVE-2007-1870
   * allow empty passwords with ldap (J�Sonnenberger) [1516]
   * mod_scgi.c segfault fix #964 [1501]
@@ -21 +23 @@
   * Handle DragonFlyBSD the same way as Freebsd (J�Sonnenberger) [1492,1676]
   * added now and weeks support to mod_expire. #943
-  * fix cpu hog in certain requests [1473]
+  * fix cpu hog in certain requests [1473] CVE-2007-1869
   * fix for handling hostnames with trailing dot [1406]
   * fixed header-injection via server.tag (#1106)
@@ -42 +44 @@
   * fixed missing AUTH_TYPE entry in the fastcgi environment. (#889)
   * fixed compilation in network_writev.c on MacOS X 10.3.9 (#903)
+  * added kill-signal as another setting for fastcgi backends. See the wiki for more.
 
 - 1.4.13 - 2006-10-09