Released 2007-04-13

Changes from 1.4.14¶

• fixed broken Set-Cookie headers

Changes from 1.4.13¶

• fix crash if gethostbyaddr() failed on redirect r1718
• properly handle 206 responses generated by *cgi scripts. (#755) r1716
• added HTTPS=on to the environment of cgi scripts (#861) r1684
• fix handling of 303 (#1045) r1678
• made the configure check for lua more portable r1677
• added mod_extforward module r1665
• references to the fam stat cache engine should be conditional (#1039) r1664
• fix http 500 errors (colin.stephen/at/o2.com) #1041 r1663
• prevent wrong pidfile unlinking on graceful restart (Chris Webb) r1656
• ignore empty packets from STDERR stream. #998
• fix a crash for files with an mtime of 0 reported by cubiq on irc r1519 CVE-2007-1870
• allow empty passwords with ldap (Jörg Sonnenberger) r1516
• mod_scgi.c segfault fix #964 r1501
• Added round-robin support to mod_fastcgi r1500
• Handle DragonFlyBSD the same way as Freebsd (Jörg Sonnenberger) 14921676
• added now and weeks support to mod_expire. #943
• fix cpu hog in certain requests r1473 CVE-2007-1869
• fix for handling hostnames with trailing dot r1406
• fixed header-injection via server.tag (#1106)
• disabled caching of files without a content-type to solve the aggressive caching of FF
• remove trailing white-spaces from HTTP-requests before parsing (#1098)
• fixed accesslog.use-syslog in a conditional and the caching of the accesslog for files (fixes #1064)
• fixed various crashes at startup on broken accesslog.format strings (#1000)
• fixed handling of %% in accesslog.format
• fixed conditional dir-listing.exclude (#930)
• reduced default PATH_MAX to 255 (#826)
• ECONNABORTED is not known on cygwin (#863)
• fixed crash on url.redirect and url.rewrite if %0 is used in a global context (#800)
• fixed possible crash in debug-message in mod_extforward
• fixed compilation of mod_extforward on glibc < 2.3.4
• fixed include of empty in the configfiles (#1076)
• send SIGUSR1 to fastcgi children before SIGTERM. libfcgi wants SIGUSR1. (#737)
• fixed missing AUTH_TYPE entry in the fastcgi environment. (#889)
• fixed compilation in network_writev.c on MacOS X 10.3.9 (#903)
• added kill-signal as another setting for fastcgi backends. See the wiki for more.

Downloads¶

• http://lighttpd.net/download/lighttpd-1.4.15.tar.gz MD5: d2ceaaf242b2b3593ff4d8222d543649
• http://lighttpd.net/download/lighttpd-1.4.15.tar.bz2 MD5: b994b8c359da578dec073cae52c4924f