Age | Commit message (Collapse) | Author |
|
|
|
This release addresses the following security problems:
http://www.lighttpd.net/security/lighttpd_sa_2008_04.txt
http://www.lighttpd.net/security/lighttpd_sa_2008_05.txt
http://www.lighttpd.net/security/lighttpd_sa_2008_06.txt
http://www.lighttpd.net/security/lighttpd_sa_2008_07.txt
Also note that libpcre is now explicitly enabled
|
|
Version 1.4.19 includes fixes to the following minor security issues:
http://www.lighttpd.net/security/lighttpd_sa_2008_01.txt
http://www.lighttpd.net/security/lighttpd_sa_2008_02.txt
http://www.lighttpd.net/security/lighttpd_sa_2008_03.txt
Also note that it is now explicitely built without libpcre
(mostly used by mod_cache)
|
|
Fixes a remote vulnerability with fastcgi, see:
http://www.lighttpd.net/assets/2007/9/9/lighttpd_sa_2007_12.txt
http://secweb.se/en/advisories/lighttpd-fastcgi-remote-vulnerability/
|
|
|
|
1.4.14 contains fixes for one local and one remote vulnerabilties:
http://lighttpd.net/2007/4/13/lighttpd-1-4-14-released
|
|
|
|
|
|
|
|
|
|
|