Commit Graph

18 Commits

Author SHA1 Message Date
Peter Korsgaard
68ec36d9fa package/lighttpd: bump to version 1.4.53
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-01-27 22:14:08 +01:00
Peter Korsgaard
b99b09caee package/lighttpd: adjust hash comment after 1.4.52 bump
Commit ec69d3820f (package/lighttpd: bump to version 1.4.52) bumped the
lighttpd version but forgot to adjust the upstream hash comment.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-01-10 11:06:43 +01:00
Peter Korsgaard
ec69d3820f package/lighttpd: bump to version 1.4.52
Fixes location header parsing regression introduced in 1.4.51:
https://redmine.lighttpd.net/issues/2918

Fixes header setting regression introduced in 1.4.51:
https://redmine.lighttpd.net/issues/2919

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-01-10 08:37:04 +01:00
Peter Korsgaard
15793bc19f lighttpd: security bump to version 1.14.51
Fixes the following security issues:

1.4.50:
[mod_alias] security: potential path traversal with specific configs
[core] security: use-after-free invalid Range req
[mod_alias] security: path traversal in mod_alias (in some use cases) (fixes #2898)
[core] security: use-after-free after invalid Range request (fixes #2899)

1.4.51:
[core,security] process headers after combining folded headers
[mod_userdir] security: skip username “.” and “..”

1.4.51 brings optional pam and wolfssl support.  Explicitly disable these
options for now.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-10-30 21:05:13 +01:00
Baruch Siach
b94ddb8d5d lighttpd: bump to version 1.4.49
Cc: Matt Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-06-12 15:03:15 +02:00
Peter Korsgaard
6ccf6ed9f4 lighttpd: add hash for the license file
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-01-25 21:49:30 +01:00
Petr Kulhavy
fcb71490b1 package: lighttpd: bump to version 1.4.48
Signed-off-by: Petr Kulhavy <brain@jikos.cz>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-01-25 21:33:06 +01:00
Vicente Olivert Riera
77f413b9f2 lighttpd: bump version to 1.4.45
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2017-01-16 15:29:05 +01:00
Gustavo Zacarias
b36b2d023f lighttpd: bump to version 1.4.44
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-12-27 10:35:20 +01:00
Vicente Olivert Riera
b3450a888d lighttpd: bump version to 1.4.43
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-11-01 14:50:51 +01:00
Vicente Olivert Riera
b3c894414a lighttpd: bump version to 1.4.42
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-16 15:11:35 +02:00
Peter Korsgaard
846fd3d0d8 lighttpd: security bump version to 1.4.41
Security fixes and fixes for bugs introduced in 1.4.40.

Drop 0002-autobuild-clock_gettime-lrt-with-glibc-2.17.patch, which is now
upstream.

Due to the patch removal, autoreconf is no longer needed.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Thomas: remove autoreconf, no longer needed.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-08-01 22:24:15 +02:00
Gustavo Zacarias
2d3bac0598 lighttpd: bump to version 1.4.40
Drop upstream patch.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-16 21:03:55 +02:00
Gustavo Zacarias
9773b82867 lighttpd: bump to version 1.4.39
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-01-04 13:51:46 +01:00
Vicente Olivert Riera
373c110738 lighttpd: bump version to 1.4.38
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Reviewed-by: Alexander Dahl <post@lespocky.de>
Acked-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-12-07 17:18:42 +01:00
Gustavo Zacarias
c4d35acc9a lighttpd: bump to version 1.4.37
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Reviewed-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Tested-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-09-04 11:52:01 +02:00
Gustavo Zacarias
a151706155 lighttpd: bump to version 1.4.36
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-07-27 22:52:51 +02:00
Gustavo Zacarias
37d41013f8 lighttpd: add hash file
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-10-01 14:03:41 +02:00