[pkg-lighttpd] r296 - in lighttpd/trunk/debian: . patches
madcoder at alioth.debian.org
madcoder at alioth.debian.org
Sun Mar 16 09:23:40 UTC 2008
Author: madcoder
Date: 2008-03-16 09:23:38 +0000 (Sun, 16 Mar 2008)
New Revision: 296
Added:
lighttpd/trunk/debian/patches/02_fastcgi_detach.patch
lighttpd/trunk/debian/patches/03_ldap_leak_bugfix.patch
lighttpd/trunk/debian/patches/04_ldap_build_filter_fix.patch
lighttpd/trunk/debian/patches/05_fdevent_fix.patch
lighttpd/trunk/debian/patches/06_mod_cgi_vuln_fix.patch
lighttpd/trunk/debian/patches/07_ldap-deprecated.patch
lighttpd/trunk/debian/patches/series
Removed:
lighttpd/trunk/debian/patches/00list
lighttpd/trunk/debian/patches/02_fastcgi_detach.dpatch
lighttpd/trunk/debian/patches/03_ldap_leak_bugfix.dpatch
lighttpd/trunk/debian/patches/04_ldap_build_filter_fix.dpatch
lighttpd/trunk/debian/patches/05_fdevent_fix.dpatch
lighttpd/trunk/debian/patches/06_mod_cgi_vuln_fix.dpatch
lighttpd/trunk/debian/patches/ldap-deprecated.dpatch
Modified:
lighttpd/trunk/debian/control
lighttpd/trunk/debian/rules
Log:
Migrating to quilt.
Modified: lighttpd/trunk/debian/control
===================================================================
--- lighttpd/trunk/debian/control 2008-03-16 09:13:42 UTC (rev 295)
+++ lighttpd/trunk/debian/control 2008-03-16 09:23:38 UTC (rev 296)
@@ -8,7 +8,7 @@
Build-Depends: debhelper (>= 5.0.0), cdbs, mime-support, libssl-dev,
zlib1g-dev, libbz2-dev, libattr1-dev, libpcre3-dev, libmysqlclient15-dev,
libfam-dev, libldap2-dev, libfcgi-dev, libgdbm-dev, libmemcache-dev,
- liblua5.1-0-dev, dpatch, patchutils, pkg-config, uuid-dev, libsqlite3-dev,
+ liblua5.1-0-dev, quilt, patchutils, pkg-config, uuid-dev, libsqlite3-dev,
libxml2-dev, libkrb5-dev, perl
XS-Vcs-Svn: svn://svn.debian.org/pkg-lighttpd/lighttpd/trunk
Standards-Version: 3.7.2.1
Deleted: lighttpd/trunk/debian/patches/00list
===================================================================
--- lighttpd/trunk/debian/patches/00list 2008-03-16 09:13:42 UTC (rev 295)
+++ lighttpd/trunk/debian/patches/00list 2008-03-16 09:23:38 UTC (rev 296)
@@ -1,6 +0,0 @@
-02_fastcgi_detach.dpatch
-03_ldap_leak_bugfix.dpatch
-04_ldap_build_filter_fix.dpatch
-05_fdevent_fix.dpatch
-ldap-deprecated.dpatch
-06_mod_cgi_vuln_fix.dpatch
Deleted: lighttpd/trunk/debian/patches/02_fastcgi_detach.dpatch
===================================================================
--- lighttpd/trunk/debian/patches/02_fastcgi_detach.dpatch 2008-03-16 09:13:42 UTC (rev 295)
+++ lighttpd/trunk/debian/patches/02_fastcgi_detach.dpatch 2008-03-16 09:23:38 UTC (rev 296)
@@ -1,36 +0,0 @@
-#! /bin/sh /usr/share/dpatch/dpatch-run
-## 02_fastcgi_detach.dpatch by <fpletz at franz-pletz.org>
-##
-## All lines beginning with `## DP:' are a description of the patch.
-## DP: disconnect stderr/stdout from the terminal.
-
- at DPATCH@
-Index: src/mod_fastcgi.c
-===================================================================
---- trunk/src/mod_fastcgi.c (revision 194)
-+++ trunk/src/mod_fastcgi.c (working copy)
-@@ -922,6 +922,24 @@
- close(fcgi_fd);
- }
-
-+ close(STDERR_FILENO);
-+ if(srv->errorlog_mode == ERRORLOG_FILE)
-+ dup2(srv->errorlog_fd, STDERR_FILENO);
-+ else {
-+ int fd = open("/dev/null", O_RDWR);
-+ dup2(fd, STDERR_FILENO);
-+ close(fd);
-+ }
-+
-+ close(STDOUT_FILENO);
-+ if(srv->errorlog_mode == ERRORLOG_FILE)
-+ dup2(srv->errorlog_fd, STDOUT_FILENO);
-+ else {
-+ int fd = open("/dev/null", O_RDWR);
-+ dup2(fd, STDOUT_FILENO);
-+ close(fd);
-+ }
-+
- /* we don't need the client socket */
- for (i = 3; i < 256; i++) {
- close(i);
Copied: lighttpd/trunk/debian/patches/02_fastcgi_detach.patch (from rev 295, lighttpd/trunk/debian/patches/02_fastcgi_detach.dpatch)
===================================================================
--- lighttpd/trunk/debian/patches/02_fastcgi_detach.patch (rev 0)
+++ lighttpd/trunk/debian/patches/02_fastcgi_detach.patch 2008-03-16 09:23:38 UTC (rev 296)
@@ -0,0 +1,31 @@
+Author: <fpletz at franz-pletz.org>
+
+Index: src/mod_fastcgi.c
+===================================================================
+--- trunk/src/mod_fastcgi.c (revision 194)
++++ trunk/src/mod_fastcgi.c (working copy)
+@@ -922,6 +922,24 @@
+ close(fcgi_fd);
+ }
+
++ close(STDERR_FILENO);
++ if(srv->errorlog_mode == ERRORLOG_FILE)
++ dup2(srv->errorlog_fd, STDERR_FILENO);
++ else {
++ int fd = open("/dev/null", O_RDWR);
++ dup2(fd, STDERR_FILENO);
++ close(fd);
++ }
++
++ close(STDOUT_FILENO);
++ if(srv->errorlog_mode == ERRORLOG_FILE)
++ dup2(srv->errorlog_fd, STDOUT_FILENO);
++ else {
++ int fd = open("/dev/null", O_RDWR);
++ dup2(fd, STDOUT_FILENO);
++ close(fd);
++ }
++
+ /* we don't need the client socket */
+ for (i = 3; i < 256; i++) {
+ close(i);
Deleted: lighttpd/trunk/debian/patches/03_ldap_leak_bugfix.dpatch
===================================================================
--- lighttpd/trunk/debian/patches/03_ldap_leak_bugfix.dpatch 2008-03-16 09:13:42 UTC (rev 295)
+++ lighttpd/trunk/debian/patches/03_ldap_leak_bugfix.dpatch 2008-03-16 09:23:38 UTC (rev 296)
@@ -1,186 +0,0 @@
-#! /bin/sh /usr/share/dpatch/dpatch-run
-## 03_ldap_leak_bugfix.dpatch by yann at pleiades.fr.eu.org
-##
-## All lines beginning with `## DP:' are a description of the patch.
-## DP: The ldap connection is stored is p->conf.ldap->ldap and is not lost between each call.
-
- at DPATCH@
-diff -ur lighttpd-1.4.13/src/http_auth.c lighttpd-1.4.13.new/src/http_auth.c
---- lighttpd-1.4.13/src/http_auth.c 2006-10-04 15:29:17.000000000 +0200
-+++ lighttpd-1.4.13.new/src/http_auth.c 2007-03-03 13:23:58.000000000 +0100
-@@ -736,17 +736,17 @@
-
-
- /* build filter */
-- buffer_copy_string_buffer(p->ldap_filter, p->conf.ldap_filter_pre);
-+ buffer_copy_string_buffer(p->ldap_filter, p->conf.ldap->ldap_filter_pre);
- buffer_append_string_buffer(p->ldap_filter, username);
-- buffer_append_string_buffer(p->ldap_filter, p->conf.ldap_filter_post);
-+ buffer_append_string_buffer(p->ldap_filter, p->conf.ldap->ldap_filter_post);
-
-
- /* 2. */
-- if (p->conf.ldap == NULL ||
-- LDAP_SUCCESS != (ret = ldap_search_s(p->conf.ldap, p->conf.auth_ldap_basedn->ptr, LDAP_SCOPE_SUBTREE, p->ldap_filter->ptr, attrs, 0, &lm))) {
-+ if (p->conf.ldap->ldap == NULL ||
-+ LDAP_SUCCESS != (ret = ldap_search_s(p->conf.ldap->ldap, p->conf.auth_ldap_basedn->ptr, LDAP_SCOPE_SUBTREE, p->ldap_filter->ptr, attrs, 0, &lm))) {
- if (auth_ldap_init(srv, &p->conf) != HANDLER_GO_ON)
- return -1;
-- if (LDAP_SUCCESS != (ret = ldap_search_s(p->conf.ldap, p->conf.auth_ldap_basedn->ptr, LDAP_SCOPE_SUBTREE, p->ldap_filter->ptr, attrs, 0, &lm))) {
-+ if (LDAP_SUCCESS != (ret = ldap_search_s(p->conf.ldap->ldap, p->conf.auth_ldap_basedn->ptr, LDAP_SCOPE_SUBTREE, p->ldap_filter->ptr, attrs, 0, &lm))) {
-
- log_error_write(srv, __FILE__, __LINE__, "sssb",
- "ldap:", ldap_err2string(ret), "filter:", p->ldap_filter);
-@@ -755,7 +755,7 @@
- }
- }
-
-- if (NULL == (first = ldap_first_entry(p->conf.ldap, lm))) {
-+ if (NULL == (first = ldap_first_entry(p->conf.ldap->ldap, lm))) {
- log_error_write(srv, __FILE__, __LINE__, "s", "ldap ...");
-
- ldap_msgfree(lm);
-@@ -763,7 +763,7 @@
- return -1;
- }
-
-- if (NULL == (dn = ldap_get_dn(p->conf.ldap, first))) {
-+ if (NULL == (dn = ldap_get_dn(p->conf.ldap->ldap, first))) {
- log_error_write(srv, __FILE__, __LINE__, "s", "ldap ...");
-
- ldap_msgfree(lm);
-diff -ur lighttpd-1.4.13/src/http_auth.h lighttpd-1.4.13.new/src/http_auth.h
---- lighttpd-1.4.13/src/http_auth.h 2006-10-04 15:29:17.000000000 +0200
-+++ lighttpd-1.4.13.new/src/http_auth.h 2007-03-03 13:25:57.000000000 +0100
-@@ -17,6 +17,15 @@
- AUTH_BACKEND_HTDIGEST
- } auth_backend_t;
-
-+#ifdef USE_LDAP
-+typedef struct {
-+ LDAP *ldap;
-+
-+ buffer *ldap_filter_pre;
-+ buffer *ldap_filter_post;
-+} ldap_plugin_config;
-+#endif
-+
- typedef struct {
- /* auth */
- array *auth_require;
-@@ -43,13 +52,12 @@
- auth_backend_t auth_backend;
-
- #ifdef USE_LDAP
-- LDAP *ldap;
--
-- buffer *ldap_filter_pre;
-- buffer *ldap_filter_post;
-+ ldap_plugin_config *ldap;
- #endif
- } mod_auth_plugin_config;
-
-+
-+
- typedef struct {
- PLUGIN_DATA;
- buffer *tmp_buf;
-diff -ur lighttpd-1.4.13/src/mod_auth.c lighttpd-1.4.13.new/src/mod_auth.c
---- lighttpd-1.4.13/src/mod_auth.c 2006-10-04 15:29:17.000000000 +0200
-+++ lighttpd-1.4.13.new/src/mod_auth.c 2007-03-03 13:33:24.000000000 +0100
-@@ -77,10 +77,11 @@
- buffer_free(s->auth_ldap_cafile);
-
- #ifdef USE_LDAP
-- buffer_free(s->ldap_filter_pre);
-- buffer_free(s->ldap_filter_post);
-+ buffer_free(s->ldap->ldap_filter_pre);
-+ buffer_free(s->ldap->ldap_filter_post);
-
-- if (s->ldap) ldap_unbind_s(s->ldap);
-+ if (s->ldap->ldap) ldap_unbind_s(s->ldap->ldap);
-+ free (s->ldap);
- #endif
-
- free(s);
-@@ -115,8 +116,6 @@
- PATCH(auth_ldap_starttls);
- #ifdef USE_LDAP
- PATCH(ldap);
-- PATCH(ldap_filter_pre);
-- PATCH(ldap_filter_post);
- #endif
-
- /* skip the first, the global context */
-@@ -149,8 +148,6 @@
- PATCH(auth_ldap_hostname);
- #ifdef USE_LDAP
- PATCH(ldap);
-- PATCH(ldap_filter_pre);
-- PATCH(ldap_filter_post);
- #endif
- } else if (buffer_is_equal_string(du->key, CONST_STR_LEN("auth.backend.ldap.base-dn"))) {
- PATCH(auth_ldap_basedn);
-@@ -345,9 +342,10 @@
- s->auth_require = array_init();
-
- #ifdef USE_LDAP
-- s->ldap_filter_pre = buffer_init();
-- s->ldap_filter_post = buffer_init();
-- s->ldap = NULL;
-+ s->ldap = malloc (sizeof(ldap_plugin_config));
-+ s->ldap->ldap_filter_pre = buffer_init();
-+ s->ldap->ldap_filter_post = buffer_init();
-+ s->ldap->ldap = NULL;
- #endif
-
- cv[0].destination = s->auth_backend_conf;
-@@ -573,19 +571,19 @@
- return HANDLER_ERROR;
- }
-
-- buffer_copy_string_len(s->ldap_filter_pre, s->auth_ldap_filter->ptr, dollar - s->auth_ldap_filter->ptr);
-- buffer_copy_string(s->ldap_filter_post, dollar+1);
-+ buffer_copy_string_len(s->ldap->ldap_filter_pre, s->auth_ldap_filter->ptr, dollar - s->auth_ldap_filter->ptr);
-+ buffer_copy_string(s->ldap->ldap_filter_post, dollar+1);
- }
-
- if (s->auth_ldap_hostname->used) {
-- if (NULL == (s->ldap = ldap_init(s->auth_ldap_hostname->ptr, LDAP_PORT))) {
-+ if (NULL == (s->ldap->ldap = ldap_init(s->auth_ldap_hostname->ptr, LDAP_PORT))) {
- log_error_write(srv, __FILE__, __LINE__, "ss", "ldap ...", strerror(errno));
-
- return HANDLER_ERROR;
- }
-
- ret = LDAP_VERSION3;
-- if (LDAP_OPT_SUCCESS != (ret = ldap_set_option(s->ldap, LDAP_OPT_PROTOCOL_VERSION, &ret))) {
-+ if (LDAP_OPT_SUCCESS != (ret = ldap_set_option(s->ldap->ldap, LDAP_OPT_PROTOCOL_VERSION, &ret))) {
- log_error_write(srv, __FILE__, __LINE__, "ss", "ldap:", ldap_err2string(ret));
-
- return HANDLER_ERROR;
-@@ -604,7 +602,7 @@
- }
- }
-
-- if (LDAP_OPT_SUCCESS != (ret = ldap_start_tls_s(s->ldap, NULL, NULL))) {
-+ if (LDAP_OPT_SUCCESS != (ret = ldap_start_tls_s(s->ldap->ldap, NULL, NULL))) {
- log_error_write(srv, __FILE__, __LINE__, "ss", "ldap startTLS failed:", ldap_err2string(ret));
-
- return HANDLER_ERROR;
-@@ -614,13 +612,13 @@
-
- /* 1. */
- if (s->auth_ldap_binddn->used) {
-- if (LDAP_SUCCESS != (ret = ldap_simple_bind_s(s->ldap, s->auth_ldap_binddn->ptr, s->auth_ldap_bindpw->ptr))) {
-+ if (LDAP_SUCCESS != (ret = ldap_simple_bind_s(s->ldap->ldap, s->auth_ldap_binddn->ptr, s->auth_ldap_bindpw->ptr))) {
- log_error_write(srv, __FILE__, __LINE__, "ss", "ldap:", ldap_err2string(ret));
-
- return HANDLER_ERROR;
- }
- } else {
-- if (LDAP_SUCCESS != (ret = ldap_simple_bind_s(s->ldap, NULL, NULL))) {
-+ if (LDAP_SUCCESS != (ret = ldap_simple_bind_s(s->ldap->ldap, NULL, NULL))) {
- log_error_write(srv, __FILE__, __LINE__, "ss", "ldap:", ldap_err2string(ret));
-
- return HANDLER_ERROR;
Copied: lighttpd/trunk/debian/patches/03_ldap_leak_bugfix.patch (from rev 295, lighttpd/trunk/debian/patches/03_ldap_leak_bugfix.dpatch)
===================================================================
--- lighttpd/trunk/debian/patches/03_ldap_leak_bugfix.patch (rev 0)
+++ lighttpd/trunk/debian/patches/03_ldap_leak_bugfix.patch 2008-03-16 09:23:38 UTC (rev 296)
@@ -0,0 +1,181 @@
+Author: yann at pleiades.fr.eu.org
+
+diff -ur lighttpd-1.4.13/src/http_auth.c lighttpd-1.4.13.new/src/http_auth.c
+--- lighttpd-1.4.13/src/http_auth.c 2006-10-04 15:29:17.000000000 +0200
++++ lighttpd-1.4.13.new/src/http_auth.c 2007-03-03 13:23:58.000000000 +0100
+@@ -736,17 +736,17 @@
+
+
+ /* build filter */
+- buffer_copy_string_buffer(p->ldap_filter, p->conf.ldap_filter_pre);
++ buffer_copy_string_buffer(p->ldap_filter, p->conf.ldap->ldap_filter_pre);
+ buffer_append_string_buffer(p->ldap_filter, username);
+- buffer_append_string_buffer(p->ldap_filter, p->conf.ldap_filter_post);
++ buffer_append_string_buffer(p->ldap_filter, p->conf.ldap->ldap_filter_post);
+
+
+ /* 2. */
+- if (p->conf.ldap == NULL ||
+- LDAP_SUCCESS != (ret = ldap_search_s(p->conf.ldap, p->conf.auth_ldap_basedn->ptr, LDAP_SCOPE_SUBTREE, p->ldap_filter->ptr, attrs, 0, &lm))) {
++ if (p->conf.ldap->ldap == NULL ||
++ LDAP_SUCCESS != (ret = ldap_search_s(p->conf.ldap->ldap, p->conf.auth_ldap_basedn->ptr, LDAP_SCOPE_SUBTREE, p->ldap_filter->ptr, attrs, 0, &lm))) {
+ if (auth_ldap_init(srv, &p->conf) != HANDLER_GO_ON)
+ return -1;
+- if (LDAP_SUCCESS != (ret = ldap_search_s(p->conf.ldap, p->conf.auth_ldap_basedn->ptr, LDAP_SCOPE_SUBTREE, p->ldap_filter->ptr, attrs, 0, &lm))) {
++ if (LDAP_SUCCESS != (ret = ldap_search_s(p->conf.ldap->ldap, p->conf.auth_ldap_basedn->ptr, LDAP_SCOPE_SUBTREE, p->ldap_filter->ptr, attrs, 0, &lm))) {
+
+ log_error_write(srv, __FILE__, __LINE__, "sssb",
+ "ldap:", ldap_err2string(ret), "filter:", p->ldap_filter);
+@@ -755,7 +755,7 @@
+ }
+ }
+
+- if (NULL == (first = ldap_first_entry(p->conf.ldap, lm))) {
++ if (NULL == (first = ldap_first_entry(p->conf.ldap->ldap, lm))) {
+ log_error_write(srv, __FILE__, __LINE__, "s", "ldap ...");
+
+ ldap_msgfree(lm);
+@@ -763,7 +763,7 @@
+ return -1;
+ }
+
+- if (NULL == (dn = ldap_get_dn(p->conf.ldap, first))) {
++ if (NULL == (dn = ldap_get_dn(p->conf.ldap->ldap, first))) {
+ log_error_write(srv, __FILE__, __LINE__, "s", "ldap ...");
+
+ ldap_msgfree(lm);
+diff -ur lighttpd-1.4.13/src/http_auth.h lighttpd-1.4.13.new/src/http_auth.h
+--- lighttpd-1.4.13/src/http_auth.h 2006-10-04 15:29:17.000000000 +0200
++++ lighttpd-1.4.13.new/src/http_auth.h 2007-03-03 13:25:57.000000000 +0100
+@@ -17,6 +17,15 @@
+ AUTH_BACKEND_HTDIGEST
+ } auth_backend_t;
+
++#ifdef USE_LDAP
++typedef struct {
++ LDAP *ldap;
++
++ buffer *ldap_filter_pre;
++ buffer *ldap_filter_post;
++} ldap_plugin_config;
++#endif
++
+ typedef struct {
+ /* auth */
+ array *auth_require;
+@@ -43,13 +52,12 @@
+ auth_backend_t auth_backend;
+
+ #ifdef USE_LDAP
+- LDAP *ldap;
+-
+- buffer *ldap_filter_pre;
+- buffer *ldap_filter_post;
++ ldap_plugin_config *ldap;
+ #endif
+ } mod_auth_plugin_config;
+
++
++
+ typedef struct {
+ PLUGIN_DATA;
+ buffer *tmp_buf;
+diff -ur lighttpd-1.4.13/src/mod_auth.c lighttpd-1.4.13.new/src/mod_auth.c
+--- lighttpd-1.4.13/src/mod_auth.c 2006-10-04 15:29:17.000000000 +0200
++++ lighttpd-1.4.13.new/src/mod_auth.c 2007-03-03 13:33:24.000000000 +0100
+@@ -77,10 +77,11 @@
+ buffer_free(s->auth_ldap_cafile);
+
+ #ifdef USE_LDAP
+- buffer_free(s->ldap_filter_pre);
+- buffer_free(s->ldap_filter_post);
++ buffer_free(s->ldap->ldap_filter_pre);
++ buffer_free(s->ldap->ldap_filter_post);
+
+- if (s->ldap) ldap_unbind_s(s->ldap);
++ if (s->ldap->ldap) ldap_unbind_s(s->ldap->ldap);
++ free (s->ldap);
+ #endif
+
+ free(s);
+@@ -115,8 +116,6 @@
+ PATCH(auth_ldap_starttls);
+ #ifdef USE_LDAP
+ PATCH(ldap);
+- PATCH(ldap_filter_pre);
+- PATCH(ldap_filter_post);
+ #endif
+
+ /* skip the first, the global context */
+@@ -149,8 +148,6 @@
+ PATCH(auth_ldap_hostname);
+ #ifdef USE_LDAP
+ PATCH(ldap);
+- PATCH(ldap_filter_pre);
+- PATCH(ldap_filter_post);
+ #endif
+ } else if (buffer_is_equal_string(du->key, CONST_STR_LEN("auth.backend.ldap.base-dn"))) {
+ PATCH(auth_ldap_basedn);
+@@ -345,9 +342,10 @@
+ s->auth_require = array_init();
+
+ #ifdef USE_LDAP
+- s->ldap_filter_pre = buffer_init();
+- s->ldap_filter_post = buffer_init();
+- s->ldap = NULL;
++ s->ldap = malloc (sizeof(ldap_plugin_config));
++ s->ldap->ldap_filter_pre = buffer_init();
++ s->ldap->ldap_filter_post = buffer_init();
++ s->ldap->ldap = NULL;
+ #endif
+
+ cv[0].destination = s->auth_backend_conf;
+@@ -573,19 +571,19 @@
+ return HANDLER_ERROR;
+ }
+
+- buffer_copy_string_len(s->ldap_filter_pre, s->auth_ldap_filter->ptr, dollar - s->auth_ldap_filter->ptr);
+- buffer_copy_string(s->ldap_filter_post, dollar+1);
++ buffer_copy_string_len(s->ldap->ldap_filter_pre, s->auth_ldap_filter->ptr, dollar - s->auth_ldap_filter->ptr);
++ buffer_copy_string(s->ldap->ldap_filter_post, dollar+1);
+ }
+
+ if (s->auth_ldap_hostname->used) {
+- if (NULL == (s->ldap = ldap_init(s->auth_ldap_hostname->ptr, LDAP_PORT))) {
++ if (NULL == (s->ldap->ldap = ldap_init(s->auth_ldap_hostname->ptr, LDAP_PORT))) {
+ log_error_write(srv, __FILE__, __LINE__, "ss", "ldap ...", strerror(errno));
+
+ return HANDLER_ERROR;
+ }
+
+ ret = LDAP_VERSION3;
+- if (LDAP_OPT_SUCCESS != (ret = ldap_set_option(s->ldap, LDAP_OPT_PROTOCOL_VERSION, &ret))) {
++ if (LDAP_OPT_SUCCESS != (ret = ldap_set_option(s->ldap->ldap, LDAP_OPT_PROTOCOL_VERSION, &ret))) {
+ log_error_write(srv, __FILE__, __LINE__, "ss", "ldap:", ldap_err2string(ret));
+
+ return HANDLER_ERROR;
+@@ -604,7 +602,7 @@
+ }
+ }
+
+- if (LDAP_OPT_SUCCESS != (ret = ldap_start_tls_s(s->ldap, NULL, NULL))) {
++ if (LDAP_OPT_SUCCESS != (ret = ldap_start_tls_s(s->ldap->ldap, NULL, NULL))) {
+ log_error_write(srv, __FILE__, __LINE__, "ss", "ldap startTLS failed:", ldap_err2string(ret));
+
+ return HANDLER_ERROR;
+@@ -614,13 +612,13 @@
+
+ /* 1. */
+ if (s->auth_ldap_binddn->used) {
+- if (LDAP_SUCCESS != (ret = ldap_simple_bind_s(s->ldap, s->auth_ldap_binddn->ptr, s->auth_ldap_bindpw->ptr))) {
++ if (LDAP_SUCCESS != (ret = ldap_simple_bind_s(s->ldap->ldap, s->auth_ldap_binddn->ptr, s->auth_ldap_bindpw->ptr))) {
+ log_error_write(srv, __FILE__, __LINE__, "ss", "ldap:", ldap_err2string(ret));
+
+ return HANDLER_ERROR;
+ }
+ } else {
+- if (LDAP_SUCCESS != (ret = ldap_simple_bind_s(s->ldap, NULL, NULL))) {
++ if (LDAP_SUCCESS != (ret = ldap_simple_bind_s(s->ldap->ldap, NULL, NULL))) {
+ log_error_write(srv, __FILE__, __LINE__, "ss", "ldap:", ldap_err2string(ret));
+
+ return HANDLER_ERROR;
Deleted: lighttpd/trunk/debian/patches/04_ldap_build_filter_fix.dpatch
===================================================================
--- lighttpd/trunk/debian/patches/04_ldap_build_filter_fix.dpatch 2008-03-16 09:13:42 UTC (rev 295)
+++ lighttpd/trunk/debian/patches/04_ldap_build_filter_fix.dpatch 2008-03-16 09:23:38 UTC (rev 296)
@@ -1,23 +0,0 @@
-#! /bin/sh /usr/share/dpatch/dpatch-run
-## 08_ldap_build_filter_fix.dpatch by Peter Colberg <peterco at gmx.net>
-##
-## All lines beginning with `## DP:' are a description of the patch.
-## DP: No description.
-
- at DPATCH@
-diff -urNad lighttpd-stable~/src/http_auth.c lighttpd-stable/src/http_auth.c
---- lighttpd-stable~/src/http_auth.c 2007-03-27 22:50:16.000000000 +0200
-+++ lighttpd-stable/src/http_auth.c 2007-03-27 22:50:17.000000000 +0200
-@@ -747,6 +747,12 @@
- LDAP_SUCCESS != (ret = ldap_search_s(p->conf.ldap->ldap, p->conf.auth_ldap_basedn->ptr, LDAP_SCOPE_SUBTREE, p->ldap_filter->ptr, attrs, 0, &lm))) {
- if (auth_ldap_init(srv, &p->conf) != HANDLER_GO_ON)
- return -1;
-+
-+ /* build filter */
-+ buffer_copy_string_buffer(p->ldap_filter, p->conf.ldap->ldap_filter_pre);
-+ buffer_append_string_buffer(p->ldap_filter, username);
-+ buffer_append_string_buffer(p->ldap_filter, p->conf.ldap->ldap_filter_post);
-+
- if (LDAP_SUCCESS != (ret = ldap_search_s(p->conf.ldap->ldap, p->conf.auth_ldap_basedn->ptr, LDAP_SCOPE_SUBTREE, p->ldap_filter->ptr, attrs, 0, &lm))) {
-
- log_error_write(srv, __FILE__, __LINE__, "sssb",
Copied: lighttpd/trunk/debian/patches/04_ldap_build_filter_fix.patch (from rev 295, lighttpd/trunk/debian/patches/04_ldap_build_filter_fix.dpatch)
===================================================================
--- lighttpd/trunk/debian/patches/04_ldap_build_filter_fix.patch (rev 0)
+++ lighttpd/trunk/debian/patches/04_ldap_build_filter_fix.patch 2008-03-16 09:23:38 UTC (rev 296)
@@ -0,0 +1,18 @@
+Author: Peter Colberg <peterco at gmx.net>
+
+diff -urNad lighttpd-stable~/src/http_auth.c lighttpd-stable/src/http_auth.c
+--- lighttpd-stable~/src/http_auth.c 2007-03-27 22:50:16.000000000 +0200
++++ lighttpd-stable/src/http_auth.c 2007-03-27 22:50:17.000000000 +0200
+@@ -747,6 +747,12 @@
+ LDAP_SUCCESS != (ret = ldap_search_s(p->conf.ldap->ldap, p->conf.auth_ldap_basedn->ptr, LDAP_SCOPE_SUBTREE, p->ldap_filter->ptr, attrs, 0, &lm))) {
+ if (auth_ldap_init(srv, &p->conf) != HANDLER_GO_ON)
+ return -1;
++
++ /* build filter */
++ buffer_copy_string_buffer(p->ldap_filter, p->conf.ldap->ldap_filter_pre);
++ buffer_append_string_buffer(p->ldap_filter, username);
++ buffer_append_string_buffer(p->ldap_filter, p->conf.ldap->ldap_filter_post);
++
+ if (LDAP_SUCCESS != (ret = ldap_search_s(p->conf.ldap->ldap, p->conf.auth_ldap_basedn->ptr, LDAP_SCOPE_SUBTREE, p->ldap_filter->ptr, attrs, 0, &lm))) {
+
+ log_error_write(srv, __FILE__, __LINE__, "sssb",
Deleted: lighttpd/trunk/debian/patches/05_fdevent_fix.dpatch
===================================================================
--- lighttpd/trunk/debian/patches/05_fdevent_fix.dpatch 2008-03-16 09:13:42 UTC (rev 295)
+++ lighttpd/trunk/debian/patches/05_fdevent_fix.dpatch 2008-03-16 09:23:38 UTC (rev 296)
@@ -1,43 +0,0 @@
-#! /bin/sh /usr/share/dpatch/dpatch-run
-#
-## DP: From 6b77fd21b58b6bfc10bd01fd0ce4e5f4ced0d5d9 Mon Sep 17 00:00:00 2001
-## DP: From: =?utf-8?q?Stefan=20B=C3=BChler?= <stbuehler at web.de>
-## DP: Date: Wed, 13 Feb 2008 00:07:22 +0100
-## DP: Subject: [PATCH] Fix #372 + #1562
-## DP:
-## DP: ---
-## DP: src/fdevent_solaris_devpoll.c | 2 +-
-## DP: src/server.c | 3 ---
-## DP: 2 files changed, 1 insertions(+), 4 deletions(-)
-## DP:
- at DPATCH@
-diff --git a/src/fdevent_solaris_devpoll.c b/src/fdevent_solaris_devpoll.c
-index f77daef..76414a4 100644
---- a/src/fdevent_solaris_devpoll.c
-+++ b/src/fdevent_solaris_devpoll.c
-@@ -67,7 +67,7 @@ static int fdevent_solaris_devpoll_poll(fdevents *ev, int timeout_ms) {
- int ret;
-
- dopoll.dp_timeout = timeout_ms;
-- dopoll.dp_nfds = ev->maxfds;
-+ dopoll.dp_nfds = ev->maxfds - 1;
- dopoll.dp_fds = ev->devpollfds;
-
- ret = ioctl(ev->devpoll_fd, DP_POLL, &dopoll);
-diff --git a/src/server.c b/src/server.c
-index 052130a..585a973 100644
---- a/src/server.c
-+++ b/src/server.c
-@@ -697,9 +697,6 @@ int main (int argc, char **argv) {
- }
- }
-
-- /* #372: solaris need some fds extra for devpoll */
-- if (rlim.rlim_cur > 10) rlim.rlim_cur -= 10;
--
- if (srv->event_handler == FDEVENT_HANDLER_SELECT) {
- srv->max_fds = rlim.rlim_cur < FD_SETSIZE - 200 ? rlim.rlim_cur : FD_SETSIZE - 200;
- } else {
---
-1.5.3.8
-
Copied: lighttpd/trunk/debian/patches/05_fdevent_fix.patch (from rev 295, lighttpd/trunk/debian/patches/05_fdevent_fix.dpatch)
===================================================================
--- lighttpd/trunk/debian/patches/05_fdevent_fix.patch (rev 0)
+++ lighttpd/trunk/debian/patches/05_fdevent_fix.patch 2008-03-16 09:23:38 UTC (rev 296)
@@ -0,0 +1,40 @@
+From 6b77fd21b58b6bfc10bd01fd0ce4e5f4ced0d5d9 Mon Sep 17 00:00:00 2001
+From: =?utf-8?q?Stefan=20B=C3=BChler?= <stbuehler at web.de>
+Date: Wed, 13 Feb 2008 00:07:22 +0100
+Subject: [PATCH] Fix #372 + #1562
+
+---
+ src/fdevent_solaris_devpoll.c | 2 +-
+ src/server.c | 3 ---
+ 2 files changed, 1 insertions(+), 4 deletions(-)
+
+diff --git a/src/fdevent_solaris_devpoll.c b/src/fdevent_solaris_devpoll.c
+index f77daef..76414a4 100644
+--- a/src/fdevent_solaris_devpoll.c
++++ b/src/fdevent_solaris_devpoll.c
+@@ -67,7 +67,7 @@ static int fdevent_solaris_devpoll_poll(fdevents *ev, int timeout_ms) {
+ int ret;
+
+ dopoll.dp_timeout = timeout_ms;
+- dopoll.dp_nfds = ev->maxfds;
++ dopoll.dp_nfds = ev->maxfds - 1;
+ dopoll.dp_fds = ev->devpollfds;
+
+ ret = ioctl(ev->devpoll_fd, DP_POLL, &dopoll);
+diff --git a/src/server.c b/src/server.c
+index 052130a..585a973 100644
+--- a/src/server.c
++++ b/src/server.c
+@@ -697,9 +697,6 @@ int main (int argc, char **argv) {
+ }
+ }
+
+- /* #372: solaris need some fds extra for devpoll */
+- if (rlim.rlim_cur > 10) rlim.rlim_cur -= 10;
+-
+ if (srv->event_handler == FDEVENT_HANDLER_SELECT) {
+ srv->max_fds = rlim.rlim_cur < FD_SETSIZE - 200 ? rlim.rlim_cur : FD_SETSIZE - 200;
+ } else {
+--
+1.5.3.8
+
Deleted: lighttpd/trunk/debian/patches/06_mod_cgi_vuln_fix.dpatch
===================================================================
--- lighttpd/trunk/debian/patches/06_mod_cgi_vuln_fix.dpatch 2008-03-16 09:13:42 UTC (rev 295)
+++ lighttpd/trunk/debian/patches/06_mod_cgi_vuln_fix.dpatch 2008-03-16 09:23:38 UTC (rev 296)
@@ -1,768 +0,0 @@
-#! /bin/sh /usr/share/dpatch/dpatch-run
-## 06_mod_cgi_vuln_fix.dpatch by Pierre Habouzit <madcoder at debian.org>
-##
-## All lines beginning with `## DP:' are a description of the patch.
-## DP: No description.
-
- at DPATCH@
-diff -urNad pkg~/NEWS pkg/NEWS
---- pkg~/NEWS 2008-01-30 10:29:10.000000000 +0100
-+++ pkg/NEWS 2008-03-08 17:23:43.000000000 +0100
-@@ -45,6 +45,7 @@
- - 1.4.16 - 2007-07-25
-
- * added static-file.etags, etag.use-inode, etag.use-mtime, etag.use-size
-+ * fix sending source of cgi script instead of 500 error if fork fails
- to customize the generation of ETags for static files. (#1209)
- (patch by <Yusufg at gmail.com>)
- * fixed typecast of NULL on execl() (#1235)
-diff -urNad pkg~/NEWS.orig pkg/NEWS.orig
---- pkg~/NEWS.orig 1970-01-01 01:00:00.000000000 +0100
-+++ pkg/NEWS.orig 2008-01-30 10:29:10.000000000 +0100
-@@ -0,0 +1,735 @@
-+
-+====
-+NEWS
-+====
-+
-+- 1.4.18 - 2007-09-09
-+
-+ * fixed compile error on IRIX 6.5.x on prctl() (#1333)
-+ * fixed forwarding a SIGINT and SIGHUP when using max-workers (#902)
-+ * fixed FastCGI header overrun in mod_fastcgi (reported by mattias at secweb.se)
-+ * fixed hanging redirects with keep-alive due to missing
-+ "Content-Length: 0" headers
-+ * fixed crashing when using undefined environment variables in the config
-+ * fixed compilation of mod_mysql_vhost on irix (#1341)
-+
-+- 1.4.17 - 2007-08-29
-+
-+ * added dir-listing.set-footer in mod_dirlisting (#1277)
-+ * added sending UID and PID for SIGTERM and SIGINT to the logs
-+ * fixed hardcoded font-sizes in mod_dirlisting (#1267)
-+ * fixed different ETag length on 32/64 platforms (#1279)
-+ * fixed compression of files < 128 bytes by disabling compression (#1241)
-+ * fixed mysql server reconnects (#518)
-+ * fixed disabled keep-alive for dynamic content with HTTP/1.0 (#1166)
-+ * fixed crash on mixed EOL sequences in mod_cgi
-+ * fixed key compare (#1287)
-+ * fixed invalid char in header values (#1286)
-+ * fixed invalid "304 Not Modified" on broken timestamps
-+ * fixed endless loop on shrinked files with sendfile() on BSD (#1289)
-+ * fixed counter overrun in ?auto in mod_status (#909)
-+ * fixed too aggresive caching of nested conditionals (#41)
-+ * fixed possible overflow in unix-socket path checks on BSD (#713)
-+ * fixed extra Content-Length header on 1xx, 204 and 304 (#1002)
-+ * fixed handling of duplicate If-Modified-Since to return 304
-+ * fixed extracting status code from NPH scripts (#1125)
-+ * fixed prctl() usage (#1310)
-+ * removed config-check if passwd files exist (#1188)
-+ * fixed crash when etags are disabled but the client sends one (#1322)
-+ * fixed crash when freeing the config in mod_alias
-+ * fixed server.error-handler-404 breakage from 1.4.16 (#1270)
-+ * fixed entering 404-handler from dynamic content (#948)
-+ * added more debug infos for FAM based stat-cache
-+ * use more LSB like paths in the sample config (#1242)
-+
-+- 1.4.16 - 2007-07-25
-+
-+ * added static-file.etags, etag.use-inode, etag.use-mtime, etag.use-size
-+ to customize the generation of ETags for static files. (#1209)
-+ (patch by <Yusufg at gmail.com>)
-+ * fixed typecast of NULL on execl() (#1235)
-+ (patch by F. Denis)
-+ * fixed circumventing url.access-deny by trailing slash (#1230)
-+ * fixed crash on duplicate headers with trailing WS (#1232)
-+ * fixed accepting more connections then requested (#1216)
-+ * fixed mem-leak in mod_auth (reported by Stefan Esser)
-+ * fixed crash with md5-sess and cnonce not set in mod_auth (reported by Stefan Esser)
-+ * fixed missing check for base64 encoded string in mod_auth and Basic auth
-+ (reported by Stefan Esser)
-+ * fixed possible crash in Auth-Digest header parser on trailing WS in
-+ mod_auth (reported by Stefan Esser)
-+ * fixed check on stale errno values, which broke handling of broken fastcgi
-+ applications. (#1245)
-+ * fixed crash on 32bit archs when debug-msgs are printed in mod_scgi, mod_fastcgi
-+ and mod_webdav (#1263)
-+
-+- 1.4.15 - 2007-04-13
-+
-+ * fixed broken Set-Cookie headers
-+
-+- 1.4.14 - 2007-04-13
-+
-+ * fix crash if gethostbyaddr() failed on redirect [1718]
-+ * properly handle 206 responses generated by *cgi scripts. (#755) [1716]
-+ * added HTTPS=on to the environment of cgi scripts (#861) [1684]
-+ * fix handling of 303 (#1045) [1678]
-+ * made the configure check for lua more portable [1677]
-+ * added mod_extforward module [1665]
-+ * references to the fam stat cache engine should be conditional (#1039) [1664]
-+ * fix http 500 errors (colin.stephen/at/o2.com) #1041 [1663]
-+ * prevent wrong pidfile unlinking on graceful restart (Chris Webb) [1656]
-+ * ignore empty packets from STDERR stream. #998
-+ * fix a crash for files with an mtime of 0 reported by cubiq on irc [1519]
-+ CVE-2007-1870
-+ * allow empty passwords with ldap (Jörg Sonnenberger) [1516]
-+ * mod_scgi.c segfault fix #964 [1501]
-+ * Added round-robin support to mod_fastcgi [1500]
-+ * Handle DragonFlyBSD the same way as Freebsd (Jörg Sonnenberger) [1492,1676]
-+ * added now and weeks support to mod_expire. #943
-+ * fix cpu hog in certain requests [1473] CVE-2007-1869
-+ * fix for handling hostnames with trailing dot [1406]
-+ * fixed header-injection via server.tag (#1106)
-+ * disabled caching of files without a content-type to solve the
-+ aggressive caching of FF
-+ * remove trailing white-spaces from HTTP-requests before parsing (#1098)
-+ * fixed accesslog.use-syslog in a conditional and the caching of the
-+ accesslog for files (fixes #1064)
-+ * fixed various crashes at startup on broken accesslog.format strings (#1000)
-+ * fixed handling of %% in accesslog.format
-+ * fixed conditional dir-listing.exclude (#930)
-+ * reduced default PATH_MAX to 255 (#826)
-+ * ECONNABORTED is not known on cygwin (#863)
-+ * fixed crash on url.redirect and url.rewrite if %0 is used in a global context
-+ (#800)
-+ * fixed possible crash in debug-message in mod_extforward
-+ * fixed compilation of mod_extforward on glibc < 2.3.4
-+ * fixed include of empty in the configfiles (#1076)
-+ * send SIGUSR1 to fastcgi children before SIGTERM. libfcgi wants SIGUSR1. (#737)
-+ * fixed missing AUTH_TYPE entry in the fastcgi environment. (#889)
-+ * fixed compilation in network_writev.c on MacOS X 10.3.9 (#903)
-+ * added kill-signal as another setting for fastcgi backends. See the wiki for more.
-+
-+- 1.4.13 - 2006-10-09
-+
-+ * added initgroups in spawn-fcgi (#871)
-+ * added apr1 support htpasswd in mod-auth (#870)
-+ * added lighty.stat() to mod_magnet
-+ * fixed segfault in splitted CRLF CRLF sequences
-+ (introduced in 1.4.12) (#876)
-+ * fixed compilation of LOCK support in mod-webdav
-+ * fixed fragments in request-URLs (#869)
-+ * fixed pkg-config check for lua5.1 on debian
-+ * fixed Content-Length = 0 on HEAD requests without
-+ a known Content-Length (#119)
-+ * fixed mkdir() forcing 0700 (#884)
-+ * fixed writev() on FreeBSD 4.x and older (#875)
-+ * removed warning about a 404-error-handler
-+ returned 404
-+ * backported and fixed the buildsystem changes for
-+ webdav locks
-+ * fixed plugin loading so we can finally load lua
-+ extensions in mod_magnet scripts
-+ * fixed large uploads if xattr is enabled
-+
-+- 1.4.12 - 2006-09-23
-+
-+ * added experimental LOCK support for webdav
-+ * added Content-Range support for PUT in webdav
-+ * added support for += on empty arrays in config-files
-+ * added ssl.cipher-list and ssl.use-sslv2
-+ * added $HTTP["querystring"] conditional
-+ * added mod_magnet as long-term replacement for mod_cml
-+ * added work-around for a Opera Bug with SSL + Chunked-Encoding
-+ * changed --print-config to print to stdout instead of stderr
-+ * changed no longer use 0600 for new files with webdav. umask is
-+ honored. Make sure you have set a proper umask.
-+ * fixed upload hangs with SSL
-+ * fixed connection drops with SSL (aka bad retry)
-+ * fixed path traversal with \ on cygwin
-+ * fixed mem-leak in mod_flv_streaming
-+ * fixed required trailing newline in configfiles (#142)
-+ * fixed quoting the autoconf files (#466)
-+ * fixed empty Host: + $HTTP["host"] handling (#458)
-+ * fixed handling of If-Modified-Since if ETag is not set
-+ * fixed default-shell if SHELL is not set (#441)
-+ * fixed appending and assigning of env.* vars
-+ * fixed empty FCGI_STDERR packets
-+ * fixed conditional server.allow-http-11
-+ * fixed handling of follow-symlink + lstat()
-+ * fixed SIGHUP handling if max-workers is used
-+ * fixed "Software caused connection abort" messages on FreeBSD
-+
-+- 1.4.11 - 2006-03-09
-+
-+ * added ability to specify which ip address spawn-fci listens on
-+ (agkr/at/pobox.com)
-+ * added mod_flv_streaming to streaming Flash Movies efficiently
-+ * fixed handling of error codes returned by mod_dav_svn behing a
-+ mod_proxy
-+ * fixed error-messages in mod_auth and mod_fastcgi
-+ * fixed re-enabling overloaded local fastcgi backends
-+ * fixed handling of deleted files in linux-sendfile
-+ * fixed compilation on BSD and MacOSX
-+ * fixed $SERVER["socket"] on a already bound socket
-+ * fixed local source retrieval on windows
-+ (secunia)
-+ * fixed hanging cgi if remote side is dieing while reading
-+ from the pipe (sandy/at/meebo.com)
-+
-+- 1.4.10 - 2006-02-08
-+
-+ * added docs for mod_dirlisting
-+ * added fastcgi.map-extensions to mod_fastcgi
-+ * fixed load balancing for mod_fastcgi
-+ * fixed extra newline for syslog() in mod_accesslog
-+ * fixed user-track cookie for IE in mod_usertrack
-+ * fixed crash in digest handling in mod_auth
-+ * fixed handling of 301 response-bodies from a mod_proxy backend
-+ * fixed loading of base modules if server.modules is not set
-+ * fixed broken cgi if mod_scgi is loaded
-+
-+- 1.4.9 - 2006-01-14
-+
-+ * added server.core-files option (sandy <sandy/at/meebo.com>)
-+ * added docs for mod_status
-+ * added mod_evasive to limit the number of connections by IP (<w1zzard/at/techpowerup.com>)
-+ * added the power-magnet to mod_cml
-+ * added internal statistics to mod_fastcgi
-+ * added server.statistics-url to get internal statistics from mod_status
-+ * added support for conditional range-requests through If-Range
-+ * added static building via scons
-+ * fixed 100% cpu loops in mod_cgi ("sandy" <sjen/at/cs.stanford.edu>)
-+ * fixed handling for secure-download.timeout (jamis/at/37signals.com)
-+ * fixed IE bug in content-charset in the output of mod_dirlisting (sniper/at/php.net)
-+ * fixed typos and language in the docs (ryan-2005/at/ryandesign.com)
-+ * fixed assertion in mod_cgi on HEAD request is Content-Length (<sandy/at/meebo.com>)
-+ * fixed handling if equal but duplicate If-Modified-Since request headers
-+ * fixed endless loops in mod_fastcgi if backend is dead
-+ * fixed Depth: 1 handling in PROPFIND requests on empty dirs
-+ * fixed encoding of UTF8 encoded dirlistings (Jani Taskinen <sniper/at/iki.fi>)
-+ * fixed initial bind to a unix-domain socket through server.bind
-+ * fixed handling of lowercase filesystems
-+ * fixed duplicate request headers cause by mod_setenv
-+
-+- 1.4.8 - 2005-11-23
-+
-+ * added auto-reconnect to ldap-server in mod_auth
-+ (joerg/at/netbsd.org)
-+ * changed auth.ldap-cafile to be optional
-+ (joerg/at/netbsd.org)
-+ * added strip_request_uri in mod_fastcgi
-+ * added more X-* headers to mod_proxy
-+ (Ben Grimm <bengrimm/at/gmail.com>)
-+ * added 'debug' to simple-vhost to suppress the
-+ (mod_simple_vhost.c.157) No such file or directory /servers/ww.lighttpd.net/pages/
-+ messages by default
-+ * added support to let the server listen on UNIX-socket
-+ * changed default stat-cache-engine to 'simple'
-+ * removed debian/ dir from source package on request by packager
-+ * fixed max-age timestamps in mod_expire
-+ * fixed encoding the filenames in PROPFIND in mod_webdav
-+ * fixed range request handling in network_writev
-+ * fixed retry on connect error in mod_fastcgi
-+ (Robert G. Jakabosky <bobby/at/alphatrade.com>)
-+ * fixed possible crash in mod_webdav if sqlite3 support
-+ is available but not use
-+ * fixed fdvent-handler init if server.max-worker was used
-+ (Siddharth Vijayakrishnan <mail/at/bluefireworks.net>)
-+ * fixed missing cleanup in mysql_vhost
-+ * fixed assert() in "connections.c:962:
-+ connection_handle_read_state: Assertion 'c->mem->used' failed."
-+ * fixed 64bit issue in md5
-+ * fixed crash in mod_status
-+ * fixed duplicate headers in mod_proxy
-+ * fixed Content-Length in HEAD request in mod_proxy
-+ * fixed unsigned/signed comparisions
-+ * fixed streaming in mod_cgi
-+ * fixed possible overflow in password-salt handling
-+ (reported on slashdot by james-web/at/and.org)
-+ * fixed server-traffic-limit if connection limit is not set
-+
-+- 1.4.7 - 2005-11-02
-+
-+ * added FD_CLOEXEC to fds which are kept open for a longer time
-+ * added smaller, moving mmaped windows to network_writev
-+ * added madvise() to instruct the kernel the do proper read-ahead in network_writev
-+ * added support for %I in mod_accesslog
-+ * added better compat to Apache for ?auto in mod_status
-+ * added support for userdirs without a entry in /etc/passwd in mod_userdir
-+ (rob/at/inversepath.com)
-+ * added startup-time selectable network-backend
-+ * added location of upload-files to config as array
-+ * added webdav.log-xml for logging xml-content in mod_webdav
-+ * added Cache-Control: max-age to mod_expire
-+ * workaround missing client-bug by assuming we received a close-notify on
-+ non-keep-alive requests in SSL request
-+ * disabled kerberos5 support by default to fix compilation on RHEL
-+ * fixed order of library checks to fix compilation on Solaris 9
-+ * fixed open file-descriptors on read-error
-+ * fixed crash if /var/tmp is not writable
-+
-+- 1.4.6 - 2005-10-09
-+
-+ * fixed compilation on MacOS X and cygwin
-+ * fixed compressed output if caching was disabled (seen in IE and Opera)
-+ * fixed range-request option
-+ * fixed mysql-vhost module (was broken in 1.4.5)
-+ * fixed false positive in the detection of case-insensitive FS
-+
-+- 1.4.5 - 2005-10-02
-+
-+ * added all DeltaV methods as known methods
-+ * added buffer-to-disk of request content
-+ * added warning for unused variables in conditionals
-+ * added global index-generators to mod_indexfile
-+ * fixed caching for remote-ip conditionals with keep-alive
-+ * fixed redirects with content
-+ * fixed infinite loop in exec-cmd in mod_ssi
-+ * fixed segfault in config handling for mod_mysql_vhost
-+ * fixed segfault on FIFOs/Sockets
-+ * fixed possible crash on uninit memory if If-Modified-Since was too long
-+ * fixed accounting of mem-chunks
-+ * fixed starving of connections on high load
-+ * fixed crc errors in mod_compress on 64bit platforms
-+ * fixed handling of overlapping fastcgi packets (bug added in 1.4.4)
-+ * fixed logic of conditionals if a header was not set
-+ * fixed a segfault in mod_rewrite if %1 references were used
-+ * fixed handling of empty request URIs in HTTP requests
-+
-+- 1.4.4 - 2005-09-16
-+ * added support for %V in mod_accesslog
-+ * added a option for a FastCGI responser to send static files
-+ * added md5 and blowfish hashes to htpasswd
-+ * fixed METHOD in mod_accesslog of WebDAV methods
-+ * fixed check for permission before files in sent
-+ * fixed mod-proxy and content for non-POST requests
-+ * fixed compilation of mod_cml on MacOS X
-+ * fixed SSL errmsg after accept()
-+ * fixed memleak in stat-cache
-+ * fixed aborted connections if file was moved while in transfer
-+ * fixed mem-usage for large FastCGI transfers
-+
-+- 1.4.3 - 2005-09-01
-+
-+ * added gracefull shutdown
-+ * added server.max-connections
-+ * fixed compilation on all BSD platforms
-+ * fixed init of kqueue and /dev/poll after daemonize
-+ * fixed segfault if select() is event-handler and more than FD_SETSIZE
-+ fds are opened
-+ * fixed compilation of mod_cml
-+ * fixed bin-copy-env in mod_fastcgi
-+
-+- 1.4.2 - 2005-08-29
-+
-+ * fixed mimetype detection on uppercase extensions
-+ * fixed memleak in stat-cache
-+ * fixed infinite loop in mod_cgi
-+ * fixed alignment crashes on sparc64 and alpha64
-+ * fixed test system for gentoo ebuild
-+ * fixed infinite loop in SSL
-+ * fixed range request for files > 2Gb
-+
-+- 1.4.1 - 2005-08-22
-+
-+ * added a complete Class 1 complient mod_webdav
-+ * fixed ssl support (especially on OpenBSD)
-+ * fixed response header in body problem in mod_cgi
-+ * fixed numbers before body problem
-+ * fixed compilation on Solaris and FreeBSD
-+ * fixed conditional options in mod_dirlisting
-+ * fixed segfault in mod_dirlisting for NFS directories
-+ * fixed check for docroot in change-root environments
-+
-+- 1.4.0 - 2005-08-17
-+
-+ * added nested conditionals
-+ * added remote-ip to $HTTP
-+ * added support for stat-cache via FAM
-+ * added a read-only WebDAV module
-+ * fixed cleanup in mod_proxy and mod_fastcgi
-+ * fixed handling of filenames on case-insensitive filesystems
-+
-+- 1.3.16 - 2005-07-31
-+
-+ * added Date: headers to dynamic HTTP/1.0 requests
-+ * added support for OPTION * HTTP/1.1
-+ * added support for accesslog to syslog
-+ * added support for PATH_INFO guessing if check-local is disabled in
-+ mod_fastcgi
-+ * added switch to disable range-requests
-+ * added valid-user option for mod_auth (tigger at gentoo.org)
-+ * added JavaScript based sorting to mod_status (erik)
-+ * added selective TCP_CORK (Christian von Roques)
-+ * break up endless loops with Status: 500
-+ * fixed endless loops in mod_rewrite
-+ * mapped url.rewrite and url.rewrite-final to uri.rewrite-once
-+ * fixed compilation for mod_trigger_b4_dl
-+ * fixed 'can't reach host' in mod_proxy
-+ * error-handler-404 defaults to Status: 200 and static files work now
-+
-+- 1.3.15 - 2005-07-15
-+
-+ * added mod_cml
-+ * added mod_trigger_b4_dl
-+ * added encoding to mod_dirlisting
-+ * added ?auto to mod_status
-+ * relaxed handling of characters in URIs even more
-+ * fixed detection of sendfile() on Linux 2.4.x
-+ * fixed comparision of buffers for short strings
-+ * server.errorfile-prefix is now conditional
-+ * fixed mod_rrdtool to close STDERR
-+
-+- 1.3.14 - 2005-06-15
-+
-+ * added SCGI support via mod_scgi
-+ * added hash-based and round-robin load balancing to mod_proxy
-+ * fixed range requests larger than 2Gb
-+ * fixed compilation on Solaris
-+ * fixed endless loops in mod_fastcgi, mod_cgi and mod_proxy
-+ * fixed handling of URIs for '+' and characters > 127
-+
-+- 1.3.13 - 2005-03-06
-+
-+ * added customizable directory listings
-+ * fixed compile error on all BSD unixes
-+ * fixed PATHINFO handling for FastCGI
-+ * fixed handling of remote-close on FreeBSD and OpenSSL
-+
-+- 1.3.12 - 2005-03-02
-+
-+ * added ssl.ca-file
-+ * added support for \n\n as terminator
-+ * rewrote test-framework and added more tests
-+ * fixed cgi.assign with empty handler
-+ * fixed segfault in debug-code
-+ * fixed mod_expire if modification-timestamps are used
-+ * fixed segfault on duplication Host-headers
-+ * fixed endless loop in mod_fastcgi
-+ * fixed handling of dead fastcgi-processes
-+
-+- 1.3.11 - 2005-02-20
-+
-+ * added REMOTE_PORT and SERVER_ADDR to CGI-env
-+ * relaxed handling of newlines before keep-alive requests
-+ * relaxed uri-parser again
-+ * fixed PHP_SELF for php
-+ * fixed compilation on MacOS X
-+ * fixed handling of EPIPE and ECONNRESET
-+ * fixed crash in mod_auth if config-options are missing
-+ * fixed handling of missing trailing / in mod_userdir
-+ * fixed conditional secdownload.secret
-+ * fixed REPORT ME error due to failed reconnects in mod_fastcgi
-+ * fixed cmdline handling in mod_fastcgi
-+
-+- 1.3.10 - 2005-02-06
-+
-+ * added support for full commandline in spawn-fcgi
-+ * fixed missing check for IP-address in mod_fastcgi
-+ * fixed compile error with openssl in mod_fastcgi
-+ * removed a debug-message from network-functions
-+
-+- 1.3.9 - 2005-02-06
-+
-+ * added a stricter URI parser
-+ * added a check to the CGI spawner if the cgi-handler exists
-+ * added documentation for SSL and mod_status
-+ * added handling of startup environment to FastCGI
-+ * improved performance in FastCGI in buildind the FastCGI header
-+ * fixed min-procs and max-procs in FastCGI on PowerPC
-+ * fixed crash in setenv.add-response-header
-+ * fixed handling of nph-scripts in CGI
-+ * fixed accidently sending out physical file in CGI on error
-+ * fixed cygwin support
-+ * fixed handling of missing files
-+ * fixed HEAD requests for dynamic requests
-+
-+- 1.3.8 - 2005-01-30
-+
-+ * added traffic shaping by remote host and virtual server
-+ * added auto-spawning of FastCGI process on demand
-+ * added virtual host based on MySQL
-+ * added mod_setenv to add envirnoment and http headers on the fly
-+ * added support for syslog in mod_accesslog
-+ * improved output of mod_status
-+ * improved debug output in request handling
-+ * fixed build problems on netbsd 1.4.x and 1.5.x
-+ * fixed status.url configuration
-+ * fixed handling of != and !~ in configutation
-+ * fixed special cases in keep-alive handling
-+ * fixed timeout handling in handling POST requests
-+ * fixed mode AUTHORIZER in FastCGI
-+ * fixed handling if internal redirects if no Host: is supplied
-+ * fixed mod_alias + pathinfo
-+ * fixed directory indexes and permissions
-+ * enabled sending errorlog to syslog again
-+
-+- 1.3.7 - 2004-12-11
-+
-+ * added retries for a fastcgi connect if a php-childs
-+ dies at startup
-+ * update the debian directory
-+ * added setgroups() to drop all group-privs
-+ * added native port to windows via mingw32
-+ * added server.tag = '...'
-+ * added support for ${...} in mod_ssi
-+ * ported all plugins to conditional support
-+ * fixed multipart handling in cgi
-+ * fixed kqueue event-handler
-+ * fixed wrap-around in mod_status
-+ * fixed crash with SSL + FastCGI
-+ * fixed detection of SSL headers
-+ * fixed handling of dangling SSL_shutdown
-+ * fixed detection of keep-alive of Firefox
-+
-+- 1.3.6 - 2004-11-03
-+
-+ * added spawn-fcgi to the distribution
-+ * added support in fastcgi module to spawn fastcgi
-+ processes itself
-+ * fixed logfile cycling if external logging is used
-+ * fixed connection handling in fastcgi if no chunk
-+ encoding is used
-+ * fixed internal redirects on directories if a query
-+ string is supplied
-+ * fixed cgi-module for POST request above 4k
-+ * fixed mod_alias and follow-symlink
-+
-+- 1.3.5 - 2004-10-31
-+
-+ * added mod_alias
-+ * added mod_userdir
-+ * added the exec command to the SSI handler
-+ * added a switch to disable follow-symlinks
-+ * added a switch to disable IPv6 at compile-time
-+ * fixed compilation on FreeBSD and NetBSD 1.3.x
-+ * fixed segfault in pipelining
-+ * fixed a segfault in writev() handler if LFS is used
-+
-+- 1.3.4 - 2004-10-24
-+
-+ * added limiter for open files
-+ * added logging of user supplied data to accesslogs
-+ * added build target for OpenWRT
-+ * added plain backend support for auth-digest
-+ * fixed handling the external accesslog processes
-+ * fixed SERVER_NAME in CGI and FastCGI
-+
-+- 1.3.3 - 2004-10-16
-+
-+ * added support for NL terminators in CGI-scripts
-+ * added support for conditionals in mod_auth,
-+ mod_simple_vhost and mod_evhost
-+ * added a error-handler for 404 codes
-+ * fixed request counter in the rrdtool module
-+ * fixed log-file cycling
-+ * fixed seg-fault
-+
-+- 1.3.2 - 2004-09-30
-+
-+ * fixed file-cache
-+
-+- 1.3.1 - 2004-09-30
-+
-+ * fixed file-cache
-+ * fixed parsing of IPv6 adresses
-+ * fixed cgi for cygwin
-+ * fixed test-suite for FreeBSD and IRIX
-+ * fixed handling of shrinked files
-+ * fixed handling of REQUEST_URI after rewrite
-+
-+- 1.3.0 - 2004-09-17
-+
-+ * added build for MacOS X and Cygwin
-+ * added handling of more than one socket
-+ * added config-conditions for User-Agent and Referer
-+ * added final rewrite-rules
-+
-+- 1.2.8 - 2004-09-11
-+
-+ * added a cache for mimetypes
-+ * added X-Forwarded-For for mod_proxy
-+ * fixed handling of comments in If-Modified-Since
-+ * fixed error handling in FastCGI code
-+ * fixed expire plugin for second Expire header
-+
-+- 1.2.7 - 2004-09-04
-+
-+ * added mod_rrdtool for internal statistics
-+ * added xattr support
-+ * added user-controlable timeouts
-+ * improved documentation for many plugins
-+ * fixed POST requests for mod_proxy
-+ * fixed rare hang with CGI
-+ * fixed seg-fault if no configfile is specified
-+ * fixed rare problem in FastCGI header generation
-+
-+- 1.2.6 - 2004-08-26
-+
-+ * added apache-like accesslog definition
-+ * enabled timestamp cache again
-+ * improved performance in the string compare functions
-+ * fixed double-free in fastcgi handler
-+ * fixed error-handling in cgi handler
-+
-+- 1.2.5 - 2004-08-10
-+
-+ * added skeleton for solaris 10 port-API
-+ * added compression support even if no cachedir is set
-+ * added conditional configoptions
-+ * fixed compilation on OpenBSD
-+ * fixed kqueue support
-+ * fixed pipelining bug
-+ * fixed parallel build (triggered by Gentoo)
-+ * updated debian postinst
-+
-+- 1.2.4 - 2004-07-31
-+
-+ * added kqueue support
-+ * added server-side includes (mod_ssi)
-+ * fixed large post uploads in fastcgi
-+ * fixed rt-signals handling of delayed events
-+
-+- 1.2.3 - 2004-07-10
-+
-+ * added a proxy module for Java and friends
-+ * added support to pass accesslog through an external programm
-+ * added mimetypes for text/css and text/javascript
-+ * fixed index-files for FastCGI if webserver is in chroot
-+ * fixed error messages of CGI process fails to exec()
-+ * fixed detection of pcre on IRIX and FreeBSD
-+ * fixed timestamps in Last-Modified checks
-+ * fixed 64bit builds
-+ * fixed mmap-caching of large files
-+ * relaxed the HTTP parser on empty headerfields
-+
-+- 1.2.2 - 2004-06-15
-+
-+ * added support for unix domain sockets in FastCGI
-+ * fixed mmap caching
-+ * fixed compile-time check for linux sendfile()
-+ * fixed check for pcre.h on Fedora Core 2
-+
-+- 1.2.1 - 2004-05-30
-+
-+ * added experimental support for AIX send_file()
-+ * added an mmap cache to the filehandle cache
-+ * enabled FreeBSD sendfile support again
-+ * added support for calling CGI binaries directly
-+ * fixed pipelining for POST requests
-+ * fixed some seg-faults if no configfile is used
-+
-+- 1.2.0 - 2004-05-17
-+
-+ * added conforming Expect: handling
-+ * added a module for secure and fast downloading
-+ * rewrote the event handling interface
-+ * fixed array handling which might lead to 'missing header'
-+ * fixed pipelining support
-+ * fixed build of the localizer extension
-+ * fixed cgi handling for headers which are flushed to often
-+ * fixed compilation on Solaris 2.5
-+
-+- 1.1.9 - 2004-04-29
-+
-+ * added AUTHORIZER mode to the FastCGI module
-+ * added 'check-local' option to disable local stat() in the FastCGI module
-+ * added prefix-notation for FastCGI module
-+ * added 'mod_usertrack'
-+ * improved CGI/FastCGI spec conformance
-+ * more code cleanup
-+ * fixed HTTP/1.1 chunk headers
-+ * fixed POST handling
-+ * fixed SSL network handler
-+ * fixed writev() network handler
-+
-+- 1.1.8 - 2004-04-16
-+
-+ * code cleanup
-+ * limiting the size of the request-body and the request-header
-+ * minor speed improvements
-+ * tightend the HTTP-Parser again
-+
-+- 1.1.7 - 2004-04-12
-+
-+ * added REMOTE_USER to the Server->FastCGI parameters
-+ * added bzip2 compression
-+ * improved the error-messages from the new configfile parser
-+ * fixed accesslog writing for errornous requests
-+ * fixed LFS (64bit filesizes) handling
-+ * fixed Content-Length for HEAD requests
-+ * fixed some memory leaks in the configfile parser
-+
-+- 1.1.6 - 2004-04-10
-+
-+ * tightend the HTTP-Parser
-+ * rewrote the configfile parser (based on lemon)
-+ * fixed openssl support
-+ * fixed mmap+write support
-+ * use localtime in accesslog if possible
-+
-+- 1.1.5 - 2004-04-07
-+
-+ * added ldap backend to the auth
-+ * added a mod_expire
-+ * added debian packaging structure
-+ * merged redhat and suse spec-file
-+ * fixed eventhandler for solaris
-+ * fixed 64bit fileoffsets
-+ * fixed permissions of the PID-file
-+
-+- 1.1.4 - 2004-04-04
-+
-+ * added server.pid-file
-+ * added support for solaris /dev/poll and solaris sendfilev()
-+ * added support for writev()
-+ * added PATHINFO support (again)
-+ * fixed CLF logfile writing
-+
-+- 1.1.3 - 2004-03-25
-+
-+ * set default event-handler to 'poll'
-+ * fixed logcycling in chroot()
-+ * fixed hostname detection
-+ * added syslog() as fallback for error-logging
-+
-+- 1.1.2 - 2004-03-22
-+
-+ * added a "docroot" setting for fastcgi processes
-+ * performance improvements
-+ * improved configure script
-+ * rewrote the fastcgi config parser
-+ * added a rc-script for RedHat
-+ * added epoll() support for Linux 2.6.x
-+
-+- 1.1.1 - 2004-03-15
-+
-+ * added localizer module
-+ * performance improvements
-+ * code cleanup
-+
-+- 1.1.0 - 2004-03-06
-+
-+ * changed some configuration keys for better readability
-+ * moved the virtual-host code to mod_simple_vhost
-+ * added enhanced virtual host plugin from Christian Kruse
-+ * added two new auth-backends (htpasswd, htdigest)
-+ * fixed and improved authentification
-+ * stricter parsing of the Host: field
-+ * added a warning for unused configuration keys
-+ * improved FastCGI documentation
-+
-+- 1.0.3 - 2004-02-13
-+
-+ * a startup script has been added (LSB compliant)
-+ * HEAD requests were submitting the content like a GET request
-+ * the virtual directory listing got a face-lifting and fixes
-+ * request-headers are now handled case-in-sensitive as required
-+ by the standard. this fixes POST requests for w3m and some Proxies.
-+
-+- 1.0.2 - 2004-02-07
-+
-+ * rearrangement of the default configfile
-+ * some updates in the documentation
-+ * a entry in the error-log for a 404
-+ * stdout is no longer the default for the accesslog
-diff -urNad pkg~/src/mod_cgi.c pkg/src/mod_cgi.c
---- pkg~/src/mod_cgi.c 2008-01-30 10:29:10.000000000 +0100
-+++ pkg/src/mod_cgi.c 2008-03-08 17:23:43.000000000 +0100
-@@ -1004,6 +1004,7 @@
- case -1:
- /* error */
- log_error_write(srv, __FILE__, __LINE__, "ss", "fork failed:", strerror(errno));
-+ return -1;
- break;
- default: {
- handler_ctx *hctx;
Copied: lighttpd/trunk/debian/patches/06_mod_cgi_vuln_fix.patch (from rev 295, lighttpd/trunk/debian/patches/06_mod_cgi_vuln_fix.dpatch)
===================================================================
--- lighttpd/trunk/debian/patches/06_mod_cgi_vuln_fix.patch (rev 0)
+++ lighttpd/trunk/debian/patches/06_mod_cgi_vuln_fix.patch 2008-03-16 09:23:38 UTC (rev 296)
@@ -0,0 +1,763 @@
+Author: Pierre Habouzit <madcoder at debian.org>
+
+diff -urNad pkg~/NEWS pkg/NEWS
+--- pkg~/NEWS 2008-01-30 10:29:10.000000000 +0100
++++ pkg/NEWS 2008-03-08 17:23:43.000000000 +0100
+@@ -45,6 +45,7 @@
+ - 1.4.16 - 2007-07-25
+
+ * added static-file.etags, etag.use-inode, etag.use-mtime, etag.use-size
++ * fix sending source of cgi script instead of 500 error if fork fails
+ to customize the generation of ETags for static files. (#1209)
+ (patch by <Yusufg at gmail.com>)
+ * fixed typecast of NULL on execl() (#1235)
+diff -urNad pkg~/NEWS.orig pkg/NEWS.orig
+--- pkg~/NEWS.orig 1970-01-01 01:00:00.000000000 +0100
++++ pkg/NEWS.orig 2008-01-30 10:29:10.000000000 +0100
+@@ -0,0 +1,735 @@
++
++====
++NEWS
++====
++
++- 1.4.18 - 2007-09-09
++
++ * fixed compile error on IRIX 6.5.x on prctl() (#1333)
++ * fixed forwarding a SIGINT and SIGHUP when using max-workers (#902)
++ * fixed FastCGI header overrun in mod_fastcgi (reported by mattias at secweb.se)
++ * fixed hanging redirects with keep-alive due to missing
++ "Content-Length: 0" headers
++ * fixed crashing when using undefined environment variables in the config
++ * fixed compilation of mod_mysql_vhost on irix (#1341)
++
++- 1.4.17 - 2007-08-29
++
++ * added dir-listing.set-footer in mod_dirlisting (#1277)
++ * added sending UID and PID for SIGTERM and SIGINT to the logs
++ * fixed hardcoded font-sizes in mod_dirlisting (#1267)
++ * fixed different ETag length on 32/64 platforms (#1279)
++ * fixed compression of files < 128 bytes by disabling compression (#1241)
++ * fixed mysql server reconnects (#518)
++ * fixed disabled keep-alive for dynamic content with HTTP/1.0 (#1166)
++ * fixed crash on mixed EOL sequences in mod_cgi
++ * fixed key compare (#1287)
++ * fixed invalid char in header values (#1286)
++ * fixed invalid "304 Not Modified" on broken timestamps
++ * fixed endless loop on shrinked files with sendfile() on BSD (#1289)
++ * fixed counter overrun in ?auto in mod_status (#909)
++ * fixed too aggresive caching of nested conditionals (#41)
++ * fixed possible overflow in unix-socket path checks on BSD (#713)
++ * fixed extra Content-Length header on 1xx, 204 and 304 (#1002)
++ * fixed handling of duplicate If-Modified-Since to return 304
++ * fixed extracting status code from NPH scripts (#1125)
++ * fixed prctl() usage (#1310)
++ * removed config-check if passwd files exist (#1188)
++ * fixed crash when etags are disabled but the client sends one (#1322)
++ * fixed crash when freeing the config in mod_alias
++ * fixed server.error-handler-404 breakage from 1.4.16 (#1270)
++ * fixed entering 404-handler from dynamic content (#948)
++ * added more debug infos for FAM based stat-cache
++ * use more LSB like paths in the sample config (#1242)
++
++- 1.4.16 - 2007-07-25
++
++ * added static-file.etags, etag.use-inode, etag.use-mtime, etag.use-size
++ to customize the generation of ETags for static files. (#1209)
++ (patch by <Yusufg at gmail.com>)
++ * fixed typecast of NULL on execl() (#1235)
++ (patch by F. Denis)
++ * fixed circumventing url.access-deny by trailing slash (#1230)
++ * fixed crash on duplicate headers with trailing WS (#1232)
++ * fixed accepting more connections then requested (#1216)
++ * fixed mem-leak in mod_auth (reported by Stefan Esser)
++ * fixed crash with md5-sess and cnonce not set in mod_auth (reported by Stefan Esser)
++ * fixed missing check for base64 encoded string in mod_auth and Basic auth
++ (reported by Stefan Esser)
++ * fixed possible crash in Auth-Digest header parser on trailing WS in
++ mod_auth (reported by Stefan Esser)
++ * fixed check on stale errno values, which broke handling of broken fastcgi
++ applications. (#1245)
++ * fixed crash on 32bit archs when debug-msgs are printed in mod_scgi, mod_fastcgi
++ and mod_webdav (#1263)
++
++- 1.4.15 - 2007-04-13
++
++ * fixed broken Set-Cookie headers
++
++- 1.4.14 - 2007-04-13
++
++ * fix crash if gethostbyaddr() failed on redirect [1718]
++ * properly handle 206 responses generated by *cgi scripts. (#755) [1716]
++ * added HTTPS=on to the environment of cgi scripts (#861) [1684]
++ * fix handling of 303 (#1045) [1678]
++ * made the configure check for lua more portable [1677]
++ * added mod_extforward module [1665]
++ * references to the fam stat cache engine should be conditional (#1039) [1664]
++ * fix http 500 errors (colin.stephen/at/o2.com) #1041 [1663]
++ * prevent wrong pidfile unlinking on graceful restart (Chris Webb) [1656]
++ * ignore empty packets from STDERR stream. #998
++ * fix a crash for files with an mtime of 0 reported by cubiq on irc [1519]
++ CVE-2007-1870
++ * allow empty passwords with ldap (Jörg Sonnenberger) [1516]
++ * mod_scgi.c segfault fix #964 [1501]
++ * Added round-robin support to mod_fastcgi [1500]
++ * Handle DragonFlyBSD the same way as Freebsd (Jörg Sonnenberger) [1492,1676]
++ * added now and weeks support to mod_expire. #943
++ * fix cpu hog in certain requests [1473] CVE-2007-1869
++ * fix for handling hostnames with trailing dot [1406]
++ * fixed header-injection via server.tag (#1106)
++ * disabled caching of files without a content-type to solve the
++ aggressive caching of FF
++ * remove trailing white-spaces from HTTP-requests before parsing (#1098)
++ * fixed accesslog.use-syslog in a conditional and the caching of the
++ accesslog for files (fixes #1064)
++ * fixed various crashes at startup on broken accesslog.format strings (#1000)
++ * fixed handling of %% in accesslog.format
++ * fixed conditional dir-listing.exclude (#930)
++ * reduced default PATH_MAX to 255 (#826)
++ * ECONNABORTED is not known on cygwin (#863)
++ * fixed crash on url.redirect and url.rewrite if %0 is used in a global context
++ (#800)
++ * fixed possible crash in debug-message in mod_extforward
++ * fixed compilation of mod_extforward on glibc < 2.3.4
++ * fixed include of empty in the configfiles (#1076)
++ * send SIGUSR1 to fastcgi children before SIGTERM. libfcgi wants SIGUSR1. (#737)
++ * fixed missing AUTH_TYPE entry in the fastcgi environment. (#889)
++ * fixed compilation in network_writev.c on MacOS X 10.3.9 (#903)
++ * added kill-signal as another setting for fastcgi backends. See the wiki for more.
++
++- 1.4.13 - 2006-10-09
++
++ * added initgroups in spawn-fcgi (#871)
++ * added apr1 support htpasswd in mod-auth (#870)
++ * added lighty.stat() to mod_magnet
++ * fixed segfault in splitted CRLF CRLF sequences
++ (introduced in 1.4.12) (#876)
++ * fixed compilation of LOCK support in mod-webdav
++ * fixed fragments in request-URLs (#869)
++ * fixed pkg-config check for lua5.1 on debian
++ * fixed Content-Length = 0 on HEAD requests without
++ a known Content-Length (#119)
++ * fixed mkdir() forcing 0700 (#884)
++ * fixed writev() on FreeBSD 4.x and older (#875)
++ * removed warning about a 404-error-handler
++ returned 404
++ * backported and fixed the buildsystem changes for
++ webdav locks
++ * fixed plugin loading so we can finally load lua
++ extensions in mod_magnet scripts
++ * fixed large uploads if xattr is enabled
++
++- 1.4.12 - 2006-09-23
++
++ * added experimental LOCK support for webdav
++ * added Content-Range support for PUT in webdav
++ * added support for += on empty arrays in config-files
++ * added ssl.cipher-list and ssl.use-sslv2
++ * added $HTTP["querystring"] conditional
++ * added mod_magnet as long-term replacement for mod_cml
++ * added work-around for a Opera Bug with SSL + Chunked-Encoding
++ * changed --print-config to print to stdout instead of stderr
++ * changed no longer use 0600 for new files with webdav. umask is
++ honored. Make sure you have set a proper umask.
++ * fixed upload hangs with SSL
++ * fixed connection drops with SSL (aka bad retry)
++ * fixed path traversal with \ on cygwin
++ * fixed mem-leak in mod_flv_streaming
++ * fixed required trailing newline in configfiles (#142)
++ * fixed quoting the autoconf files (#466)
++ * fixed empty Host: + $HTTP["host"] handling (#458)
++ * fixed handling of If-Modified-Since if ETag is not set
++ * fixed default-shell if SHELL is not set (#441)
++ * fixed appending and assigning of env.* vars
++ * fixed empty FCGI_STDERR packets
++ * fixed conditional server.allow-http-11
++ * fixed handling of follow-symlink + lstat()
++ * fixed SIGHUP handling if max-workers is used
++ * fixed "Software caused connection abort" messages on FreeBSD
++
++- 1.4.11 - 2006-03-09
++
++ * added ability to specify which ip address spawn-fci listens on
++ (agkr/at/pobox.com)
++ * added mod_flv_streaming to streaming Flash Movies efficiently
++ * fixed handling of error codes returned by mod_dav_svn behing a
++ mod_proxy
++ * fixed error-messages in mod_auth and mod_fastcgi
++ * fixed re-enabling overloaded local fastcgi backends
++ * fixed handling of deleted files in linux-sendfile
++ * fixed compilation on BSD and MacOSX
++ * fixed $SERVER["socket"] on a already bound socket
++ * fixed local source retrieval on windows
++ (secunia)
++ * fixed hanging cgi if remote side is dieing while reading
++ from the pipe (sandy/at/meebo.com)
++
++- 1.4.10 - 2006-02-08
++
++ * added docs for mod_dirlisting
++ * added fastcgi.map-extensions to mod_fastcgi
++ * fixed load balancing for mod_fastcgi
++ * fixed extra newline for syslog() in mod_accesslog
++ * fixed user-track cookie for IE in mod_usertrack
++ * fixed crash in digest handling in mod_auth
++ * fixed handling of 301 response-bodies from a mod_proxy backend
++ * fixed loading of base modules if server.modules is not set
++ * fixed broken cgi if mod_scgi is loaded
++
++- 1.4.9 - 2006-01-14
++
++ * added server.core-files option (sandy <sandy/at/meebo.com>)
++ * added docs for mod_status
++ * added mod_evasive to limit the number of connections by IP (<w1zzard/at/techpowerup.com>)
++ * added the power-magnet to mod_cml
++ * added internal statistics to mod_fastcgi
++ * added server.statistics-url to get internal statistics from mod_status
++ * added support for conditional range-requests through If-Range
++ * added static building via scons
++ * fixed 100% cpu loops in mod_cgi ("sandy" <sjen/at/cs.stanford.edu>)
++ * fixed handling for secure-download.timeout (jamis/at/37signals.com)
++ * fixed IE bug in content-charset in the output of mod_dirlisting (sniper/at/php.net)
++ * fixed typos and language in the docs (ryan-2005/at/ryandesign.com)
++ * fixed assertion in mod_cgi on HEAD request is Content-Length (<sandy/at/meebo.com>)
++ * fixed handling if equal but duplicate If-Modified-Since request headers
++ * fixed endless loops in mod_fastcgi if backend is dead
++ * fixed Depth: 1 handling in PROPFIND requests on empty dirs
++ * fixed encoding of UTF8 encoded dirlistings (Jani Taskinen <sniper/at/iki.fi>)
++ * fixed initial bind to a unix-domain socket through server.bind
++ * fixed handling of lowercase filesystems
++ * fixed duplicate request headers cause by mod_setenv
++
++- 1.4.8 - 2005-11-23
++
++ * added auto-reconnect to ldap-server in mod_auth
++ (joerg/at/netbsd.org)
++ * changed auth.ldap-cafile to be optional
++ (joerg/at/netbsd.org)
++ * added strip_request_uri in mod_fastcgi
++ * added more X-* headers to mod_proxy
++ (Ben Grimm <bengrimm/at/gmail.com>)
++ * added 'debug' to simple-vhost to suppress the
++ (mod_simple_vhost.c.157) No such file or directory /servers/ww.lighttpd.net/pages/
++ messages by default
++ * added support to let the server listen on UNIX-socket
++ * changed default stat-cache-engine to 'simple'
++ * removed debian/ dir from source package on request by packager
++ * fixed max-age timestamps in mod_expire
++ * fixed encoding the filenames in PROPFIND in mod_webdav
++ * fixed range request handling in network_writev
++ * fixed retry on connect error in mod_fastcgi
++ (Robert G. Jakabosky <bobby/at/alphatrade.com>)
++ * fixed possible crash in mod_webdav if sqlite3 support
++ is available but not use
++ * fixed fdvent-handler init if server.max-worker was used
++ (Siddharth Vijayakrishnan <mail/at/bluefireworks.net>)
++ * fixed missing cleanup in mysql_vhost
++ * fixed assert() in "connections.c:962:
++ connection_handle_read_state: Assertion 'c->mem->used' failed."
++ * fixed 64bit issue in md5
++ * fixed crash in mod_status
++ * fixed duplicate headers in mod_proxy
++ * fixed Content-Length in HEAD request in mod_proxy
++ * fixed unsigned/signed comparisions
++ * fixed streaming in mod_cgi
++ * fixed possible overflow in password-salt handling
++ (reported on slashdot by james-web/at/and.org)
++ * fixed server-traffic-limit if connection limit is not set
++
++- 1.4.7 - 2005-11-02
++
++ * added FD_CLOEXEC to fds which are kept open for a longer time
++ * added smaller, moving mmaped windows to network_writev
++ * added madvise() to instruct the kernel the do proper read-ahead in network_writev
++ * added support for %I in mod_accesslog
++ * added better compat to Apache for ?auto in mod_status
++ * added support for userdirs without a entry in /etc/passwd in mod_userdir
++ (rob/at/inversepath.com)
++ * added startup-time selectable network-backend
++ * added location of upload-files to config as array
++ * added webdav.log-xml for logging xml-content in mod_webdav
++ * added Cache-Control: max-age to mod_expire
++ * workaround missing client-bug by assuming we received a close-notify on
++ non-keep-alive requests in SSL request
++ * disabled kerberos5 support by default to fix compilation on RHEL
++ * fixed order of library checks to fix compilation on Solaris 9
++ * fixed open file-descriptors on read-error
++ * fixed crash if /var/tmp is not writable
++
++- 1.4.6 - 2005-10-09
++
++ * fixed compilation on MacOS X and cygwin
++ * fixed compressed output if caching was disabled (seen in IE and Opera)
++ * fixed range-request option
++ * fixed mysql-vhost module (was broken in 1.4.5)
++ * fixed false positive in the detection of case-insensitive FS
++
++- 1.4.5 - 2005-10-02
++
++ * added all DeltaV methods as known methods
++ * added buffer-to-disk of request content
++ * added warning for unused variables in conditionals
++ * added global index-generators to mod_indexfile
++ * fixed caching for remote-ip conditionals with keep-alive
++ * fixed redirects with content
++ * fixed infinite loop in exec-cmd in mod_ssi
++ * fixed segfault in config handling for mod_mysql_vhost
++ * fixed segfault on FIFOs/Sockets
++ * fixed possible crash on uninit memory if If-Modified-Since was too long
++ * fixed accounting of mem-chunks
++ * fixed starving of connections on high load
++ * fixed crc errors in mod_compress on 64bit platforms
++ * fixed handling of overlapping fastcgi packets (bug added in 1.4.4)
++ * fixed logic of conditionals if a header was not set
++ * fixed a segfault in mod_rewrite if %1 references were used
++ * fixed handling of empty request URIs in HTTP requests
++
++- 1.4.4 - 2005-09-16
++ * added support for %V in mod_accesslog
++ * added a option for a FastCGI responser to send static files
++ * added md5 and blowfish hashes to htpasswd
++ * fixed METHOD in mod_accesslog of WebDAV methods
++ * fixed check for permission before files in sent
++ * fixed mod-proxy and content for non-POST requests
++ * fixed compilation of mod_cml on MacOS X
++ * fixed SSL errmsg after accept()
++ * fixed memleak in stat-cache
++ * fixed aborted connections if file was moved while in transfer
++ * fixed mem-usage for large FastCGI transfers
++
++- 1.4.3 - 2005-09-01
++
++ * added gracefull shutdown
++ * added server.max-connections
++ * fixed compilation on all BSD platforms
++ * fixed init of kqueue and /dev/poll after daemonize
++ * fixed segfault if select() is event-handler and more than FD_SETSIZE
++ fds are opened
++ * fixed compilation of mod_cml
++ * fixed bin-copy-env in mod_fastcgi
++
++- 1.4.2 - 2005-08-29
++
++ * fixed mimetype detection on uppercase extensions
++ * fixed memleak in stat-cache
++ * fixed infinite loop in mod_cgi
++ * fixed alignment crashes on sparc64 and alpha64
++ * fixed test system for gentoo ebuild
++ * fixed infinite loop in SSL
++ * fixed range request for files > 2Gb
++
++- 1.4.1 - 2005-08-22
++
++ * added a complete Class 1 complient mod_webdav
++ * fixed ssl support (especially on OpenBSD)
++ * fixed response header in body problem in mod_cgi
++ * fixed numbers before body problem
++ * fixed compilation on Solaris and FreeBSD
++ * fixed conditional options in mod_dirlisting
++ * fixed segfault in mod_dirlisting for NFS directories
++ * fixed check for docroot in change-root environments
++
++- 1.4.0 - 2005-08-17
++
++ * added nested conditionals
++ * added remote-ip to $HTTP
++ * added support for stat-cache via FAM
++ * added a read-only WebDAV module
++ * fixed cleanup in mod_proxy and mod_fastcgi
++ * fixed handling of filenames on case-insensitive filesystems
++
++- 1.3.16 - 2005-07-31
++
++ * added Date: headers to dynamic HTTP/1.0 requests
++ * added support for OPTION * HTTP/1.1
++ * added support for accesslog to syslog
++ * added support for PATH_INFO guessing if check-local is disabled in
++ mod_fastcgi
++ * added switch to disable range-requests
++ * added valid-user option for mod_auth (tigger at gentoo.org)
++ * added JavaScript based sorting to mod_status (erik)
++ * added selective TCP_CORK (Christian von Roques)
++ * break up endless loops with Status: 500
++ * fixed endless loops in mod_rewrite
++ * mapped url.rewrite and url.rewrite-final to uri.rewrite-once
++ * fixed compilation for mod_trigger_b4_dl
++ * fixed 'can't reach host' in mod_proxy
++ * error-handler-404 defaults to Status: 200 and static files work now
++
++- 1.3.15 - 2005-07-15
++
++ * added mod_cml
++ * added mod_trigger_b4_dl
++ * added encoding to mod_dirlisting
++ * added ?auto to mod_status
++ * relaxed handling of characters in URIs even more
++ * fixed detection of sendfile() on Linux 2.4.x
++ * fixed comparision of buffers for short strings
++ * server.errorfile-prefix is now conditional
++ * fixed mod_rrdtool to close STDERR
++
++- 1.3.14 - 2005-06-15
++
++ * added SCGI support via mod_scgi
++ * added hash-based and round-robin load balancing to mod_proxy
++ * fixed range requests larger than 2Gb
++ * fixed compilation on Solaris
++ * fixed endless loops in mod_fastcgi, mod_cgi and mod_proxy
++ * fixed handling of URIs for '+' and characters > 127
++
++- 1.3.13 - 2005-03-06
++
++ * added customizable directory listings
++ * fixed compile error on all BSD unixes
++ * fixed PATHINFO handling for FastCGI
++ * fixed handling of remote-close on FreeBSD and OpenSSL
++
++- 1.3.12 - 2005-03-02
++
++ * added ssl.ca-file
++ * added support for \n\n as terminator
++ * rewrote test-framework and added more tests
++ * fixed cgi.assign with empty handler
++ * fixed segfault in debug-code
++ * fixed mod_expire if modification-timestamps are used
++ * fixed segfault on duplication Host-headers
++ * fixed endless loop in mod_fastcgi
++ * fixed handling of dead fastcgi-processes
++
++- 1.3.11 - 2005-02-20
++
++ * added REMOTE_PORT and SERVER_ADDR to CGI-env
++ * relaxed handling of newlines before keep-alive requests
++ * relaxed uri-parser again
++ * fixed PHP_SELF for php
++ * fixed compilation on MacOS X
++ * fixed handling of EPIPE and ECONNRESET
++ * fixed crash in mod_auth if config-options are missing
++ * fixed handling of missing trailing / in mod_userdir
++ * fixed conditional secdownload.secret
++ * fixed REPORT ME error due to failed reconnects in mod_fastcgi
++ * fixed cmdline handling in mod_fastcgi
++
++- 1.3.10 - 2005-02-06
++
++ * added support for full commandline in spawn-fcgi
++ * fixed missing check for IP-address in mod_fastcgi
++ * fixed compile error with openssl in mod_fastcgi
++ * removed a debug-message from network-functions
++
++- 1.3.9 - 2005-02-06
++
++ * added a stricter URI parser
++ * added a check to the CGI spawner if the cgi-handler exists
++ * added documentation for SSL and mod_status
++ * added handling of startup environment to FastCGI
++ * improved performance in FastCGI in buildind the FastCGI header
++ * fixed min-procs and max-procs in FastCGI on PowerPC
++ * fixed crash in setenv.add-response-header
++ * fixed handling of nph-scripts in CGI
++ * fixed accidently sending out physical file in CGI on error
++ * fixed cygwin support
++ * fixed handling of missing files
++ * fixed HEAD requests for dynamic requests
++
++- 1.3.8 - 2005-01-30
++
++ * added traffic shaping by remote host and virtual server
++ * added auto-spawning of FastCGI process on demand
++ * added virtual host based on MySQL
++ * added mod_setenv to add envirnoment and http headers on the fly
++ * added support for syslog in mod_accesslog
++ * improved output of mod_status
++ * improved debug output in request handling
++ * fixed build problems on netbsd 1.4.x and 1.5.x
++ * fixed status.url configuration
++ * fixed handling of != and !~ in configutation
++ * fixed special cases in keep-alive handling
++ * fixed timeout handling in handling POST requests
++ * fixed mode AUTHORIZER in FastCGI
++ * fixed handling if internal redirects if no Host: is supplied
++ * fixed mod_alias + pathinfo
++ * fixed directory indexes and permissions
++ * enabled sending errorlog to syslog again
++
++- 1.3.7 - 2004-12-11
++
++ * added retries for a fastcgi connect if a php-childs
++ dies at startup
++ * update the debian directory
++ * added setgroups() to drop all group-privs
++ * added native port to windows via mingw32
++ * added server.tag = '...'
++ * added support for ${...} in mod_ssi
++ * ported all plugins to conditional support
++ * fixed multipart handling in cgi
++ * fixed kqueue event-handler
++ * fixed wrap-around in mod_status
++ * fixed crash with SSL + FastCGI
++ * fixed detection of SSL headers
++ * fixed handling of dangling SSL_shutdown
++ * fixed detection of keep-alive of Firefox
++
++- 1.3.6 - 2004-11-03
++
++ * added spawn-fcgi to the distribution
++ * added support in fastcgi module to spawn fastcgi
++ processes itself
++ * fixed logfile cycling if external logging is used
++ * fixed connection handling in fastcgi if no chunk
++ encoding is used
++ * fixed internal redirects on directories if a query
++ string is supplied
++ * fixed cgi-module for POST request above 4k
++ * fixed mod_alias and follow-symlink
++
++- 1.3.5 - 2004-10-31
++
++ * added mod_alias
++ * added mod_userdir
++ * added the exec command to the SSI handler
++ * added a switch to disable follow-symlinks
++ * added a switch to disable IPv6 at compile-time
++ * fixed compilation on FreeBSD and NetBSD 1.3.x
++ * fixed segfault in pipelining
++ * fixed a segfault in writev() handler if LFS is used
++
++- 1.3.4 - 2004-10-24
++
++ * added limiter for open files
++ * added logging of user supplied data to accesslogs
++ * added build target for OpenWRT
++ * added plain backend support for auth-digest
++ * fixed handling the external accesslog processes
++ * fixed SERVER_NAME in CGI and FastCGI
++
++- 1.3.3 - 2004-10-16
++
++ * added support for NL terminators in CGI-scripts
++ * added support for conditionals in mod_auth,
++ mod_simple_vhost and mod_evhost
++ * added a error-handler for 404 codes
++ * fixed request counter in the rrdtool module
++ * fixed log-file cycling
++ * fixed seg-fault
++
++- 1.3.2 - 2004-09-30
++
++ * fixed file-cache
++
++- 1.3.1 - 2004-09-30
++
++ * fixed file-cache
++ * fixed parsing of IPv6 adresses
++ * fixed cgi for cygwin
++ * fixed test-suite for FreeBSD and IRIX
++ * fixed handling of shrinked files
++ * fixed handling of REQUEST_URI after rewrite
++
++- 1.3.0 - 2004-09-17
++
++ * added build for MacOS X and Cygwin
++ * added handling of more than one socket
++ * added config-conditions for User-Agent and Referer
++ * added final rewrite-rules
++
++- 1.2.8 - 2004-09-11
++
++ * added a cache for mimetypes
++ * added X-Forwarded-For for mod_proxy
++ * fixed handling of comments in If-Modified-Since
++ * fixed error handling in FastCGI code
++ * fixed expire plugin for second Expire header
++
++- 1.2.7 - 2004-09-04
++
++ * added mod_rrdtool for internal statistics
++ * added xattr support
++ * added user-controlable timeouts
++ * improved documentation for many plugins
++ * fixed POST requests for mod_proxy
++ * fixed rare hang with CGI
++ * fixed seg-fault if no configfile is specified
++ * fixed rare problem in FastCGI header generation
++
++- 1.2.6 - 2004-08-26
++
++ * added apache-like accesslog definition
++ * enabled timestamp cache again
++ * improved performance in the string compare functions
++ * fixed double-free in fastcgi handler
++ * fixed error-handling in cgi handler
++
++- 1.2.5 - 2004-08-10
++
++ * added skeleton for solaris 10 port-API
++ * added compression support even if no cachedir is set
++ * added conditional configoptions
++ * fixed compilation on OpenBSD
++ * fixed kqueue support
++ * fixed pipelining bug
++ * fixed parallel build (triggered by Gentoo)
++ * updated debian postinst
++
++- 1.2.4 - 2004-07-31
++
++ * added kqueue support
++ * added server-side includes (mod_ssi)
++ * fixed large post uploads in fastcgi
++ * fixed rt-signals handling of delayed events
++
++- 1.2.3 - 2004-07-10
++
++ * added a proxy module for Java and friends
++ * added support to pass accesslog through an external programm
++ * added mimetypes for text/css and text/javascript
++ * fixed index-files for FastCGI if webserver is in chroot
++ * fixed error messages of CGI process fails to exec()
++ * fixed detection of pcre on IRIX and FreeBSD
++ * fixed timestamps in Last-Modified checks
++ * fixed 64bit builds
++ * fixed mmap-caching of large files
++ * relaxed the HTTP parser on empty headerfields
++
++- 1.2.2 - 2004-06-15
++
++ * added support for unix domain sockets in FastCGI
++ * fixed mmap caching
++ * fixed compile-time check for linux sendfile()
++ * fixed check for pcre.h on Fedora Core 2
++
++- 1.2.1 - 2004-05-30
++
++ * added experimental support for AIX send_file()
++ * added an mmap cache to the filehandle cache
++ * enabled FreeBSD sendfile support again
++ * added support for calling CGI binaries directly
++ * fixed pipelining for POST requests
++ * fixed some seg-faults if no configfile is used
++
++- 1.2.0 - 2004-05-17
++
++ * added conforming Expect: handling
++ * added a module for secure and fast downloading
++ * rewrote the event handling interface
++ * fixed array handling which might lead to 'missing header'
++ * fixed pipelining support
++ * fixed build of the localizer extension
++ * fixed cgi handling for headers which are flushed to often
++ * fixed compilation on Solaris 2.5
++
++- 1.1.9 - 2004-04-29
++
++ * added AUTHORIZER mode to the FastCGI module
++ * added 'check-local' option to disable local stat() in the FastCGI module
++ * added prefix-notation for FastCGI module
++ * added 'mod_usertrack'
++ * improved CGI/FastCGI spec conformance
++ * more code cleanup
++ * fixed HTTP/1.1 chunk headers
++ * fixed POST handling
++ * fixed SSL network handler
++ * fixed writev() network handler
++
++- 1.1.8 - 2004-04-16
++
++ * code cleanup
++ * limiting the size of the request-body and the request-header
++ * minor speed improvements
++ * tightend the HTTP-Parser again
++
++- 1.1.7 - 2004-04-12
++
++ * added REMOTE_USER to the Server->FastCGI parameters
++ * added bzip2 compression
++ * improved the error-messages from the new configfile parser
++ * fixed accesslog writing for errornous requests
++ * fixed LFS (64bit filesizes) handling
++ * fixed Content-Length for HEAD requests
++ * fixed some memory leaks in the configfile parser
++
++- 1.1.6 - 2004-04-10
++
++ * tightend the HTTP-Parser
++ * rewrote the configfile parser (based on lemon)
++ * fixed openssl support
++ * fixed mmap+write support
++ * use localtime in accesslog if possible
++
++- 1.1.5 - 2004-04-07
++
++ * added ldap backend to the auth
++ * added a mod_expire
++ * added debian packaging structure
++ * merged redhat and suse spec-file
++ * fixed eventhandler for solaris
++ * fixed 64bit fileoffsets
++ * fixed permissions of the PID-file
++
++- 1.1.4 - 2004-04-04
++
++ * added server.pid-file
++ * added support for solaris /dev/poll and solaris sendfilev()
++ * added support for writev()
++ * added PATHINFO support (again)
++ * fixed CLF logfile writing
++
++- 1.1.3 - 2004-03-25
++
++ * set default event-handler to 'poll'
++ * fixed logcycling in chroot()
++ * fixed hostname detection
++ * added syslog() as fallback for error-logging
++
++- 1.1.2 - 2004-03-22
++
++ * added a "docroot" setting for fastcgi processes
++ * performance improvements
++ * improved configure script
++ * rewrote the fastcgi config parser
++ * added a rc-script for RedHat
++ * added epoll() support for Linux 2.6.x
++
++- 1.1.1 - 2004-03-15
++
++ * added localizer module
++ * performance improvements
++ * code cleanup
++
++- 1.1.0 - 2004-03-06
++
++ * changed some configuration keys for better readability
++ * moved the virtual-host code to mod_simple_vhost
++ * added enhanced virtual host plugin from Christian Kruse
++ * added two new auth-backends (htpasswd, htdigest)
++ * fixed and improved authentification
++ * stricter parsing of the Host: field
++ * added a warning for unused configuration keys
++ * improved FastCGI documentation
++
++- 1.0.3 - 2004-02-13
++
++ * a startup script has been added (LSB compliant)
++ * HEAD requests were submitting the content like a GET request
++ * the virtual directory listing got a face-lifting and fixes
++ * request-headers are now handled case-in-sensitive as required
++ by the standard. this fixes POST requests for w3m and some Proxies.
++
++- 1.0.2 - 2004-02-07
++
++ * rearrangement of the default configfile
++ * some updates in the documentation
++ * a entry in the error-log for a 404
++ * stdout is no longer the default for the accesslog
+diff -urNad pkg~/src/mod_cgi.c pkg/src/mod_cgi.c
+--- pkg~/src/mod_cgi.c 2008-01-30 10:29:10.000000000 +0100
++++ pkg/src/mod_cgi.c 2008-03-08 17:23:43.000000000 +0100
+@@ -1004,6 +1004,7 @@
+ case -1:
+ /* error */
+ log_error_write(srv, __FILE__, __LINE__, "ss", "fork failed:", strerror(errno));
++ return -1;
+ break;
+ default: {
+ handler_ctx *hctx;
Copied: lighttpd/trunk/debian/patches/07_ldap-deprecated.patch (from rev 295, lighttpd/trunk/debian/patches/ldap-deprecated.dpatch)
===================================================================
--- lighttpd/trunk/debian/patches/07_ldap-deprecated.patch (rev 0)
+++ lighttpd/trunk/debian/patches/07_ldap-deprecated.patch 2008-03-16 09:23:38 UTC (rev 296)
@@ -0,0 +1,13 @@
+Author: Pierre Habouzit <madcoder at debian.org>
+
+diff -urNad pkg~/src/http_auth.h pkg/src/http_auth.h
+--- pkg~/src/http_auth.h 2007-07-28 22:25:30.000000000 +0200
++++ pkg/src/http_auth.h 2008-03-04 12:13:22.000000000 +0100
+@@ -6,6 +6,7 @@
+
+ #if defined(HAVE_LDAP_H) && defined(HAVE_LBER_H) && defined(HAVE_LIBLDAP) && defined(HAVE_LIBLBER)
+ # define USE_LDAP
++# define LDAP_DEPRECATED 1
+ # include <ldap.h>
+ #endif
+
Deleted: lighttpd/trunk/debian/patches/ldap-deprecated.dpatch
===================================================================
--- lighttpd/trunk/debian/patches/ldap-deprecated.dpatch 2008-03-16 09:13:42 UTC (rev 295)
+++ lighttpd/trunk/debian/patches/ldap-deprecated.dpatch 2008-03-16 09:23:38 UTC (rev 296)
@@ -1,18 +0,0 @@
-#! /bin/sh /usr/share/dpatch/dpatch-run
-## ldap-deprecated.dpatch by Pierre Habouzit <madcoder at debian.org>
-##
-## All lines beginning with `## DP:' are a description of the patch.
-## DP: No description.
-
- at DPATCH@
-diff -urNad pkg~/src/http_auth.h pkg/src/http_auth.h
---- pkg~/src/http_auth.h 2007-07-28 22:25:30.000000000 +0200
-+++ pkg/src/http_auth.h 2008-03-04 12:13:22.000000000 +0100
-@@ -6,6 +6,7 @@
-
- #if defined(HAVE_LDAP_H) && defined(HAVE_LBER_H) && defined(HAVE_LIBLDAP) && defined(HAVE_LIBLBER)
- # define USE_LDAP
-+# define LDAP_DEPRECATED 1
- # include <ldap.h>
- #endif
-
Copied: lighttpd/trunk/debian/patches/series (from rev 295, lighttpd/trunk/debian/patches/00list)
===================================================================
--- lighttpd/trunk/debian/patches/series (rev 0)
+++ lighttpd/trunk/debian/patches/series 2008-03-16 09:23:38 UTC (rev 296)
@@ -0,0 +1,6 @@
+02_fastcgi_detach.patch
+03_ldap_leak_bugfix.patch
+04_ldap_build_filter_fix.patch
+05_fdevent_fix.patch
+06_mod_cgi_vuln_fix.patch
+07_ldap-deprecated.patch
Modified: lighttpd/trunk/debian/rules
===================================================================
--- lighttpd/trunk/debian/rules 2008-03-16 09:13:42 UTC (rev 295)
+++ lighttpd/trunk/debian/rules 2008-03-16 09:23:38 UTC (rev 296)
@@ -2,10 +2,8 @@
include /usr/share/cdbs/1/rules/debhelper.mk
include /usr/share/cdbs/1/class/autotools.mk
-include /usr/share/cdbs/1/rules/dpatch.mk
+include /usr/share/cdbs/1/rules/patchsys-quilt.mk
-include /usr/share/dpatch/dpatch.make
-
DEB_CONFIGURE_EXTRA_FLAGS += --libdir=/usr/lib/lighttpd --with-openssl \
--with-kerberos5 --with-pcre --with-bz2 \
--with-ldap --with-mysql --with-memcache \
More information about the pkg-lighttpd-maintainers
mailing list