Release Info¶

• Version: 1.4.44
• Previous version: 1.4.43
• Branch: 1.4
• Status: stable
• Release Purpose: bug fixes
• Release manager: gstrauss
• Released date: 2016-12-24

Important changes from 1.4.43¶

• support HTTP/1.1 'Transfer-Encoding: chunked' request body
• bug fixes

Downloads¶

• http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.44.tar.gz
  • GPG signature: http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.44.tar.gz.asc
  • SHA256: e67dd1255320ed93ea13320d0a8a9bd133a4c5e5cb3f1e951b530bda69467236
• http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.44.tar.xz
  • GPG signature: http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.44.tar.xz.asc
  • SHA256: adb66ca985651957feb209c91c55ebbf917d23630bfc3a216a2f70043c7b5422
• SHA256 checksums: http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.44.sha256sum

Highlights¶

• improvements
  • support HTTP/1.1 'Transfer-Encoding: chunked' request body
  • mod_dirlisting: render dirlisting as HTML
  • mod_proxy: option to replace HTTP Host sent to backend
  • mod_proxy: proxy.balance = "sticky" option
  • mod_ssi: basic recursive SSI include virtual
  • various code portability and build fixes for older platforms
• bug fixes
  • fix race in dynamic handler configs (reentrancy)
  • mod_cgi: fix out of sockets error for POST to CGI (1.4.43)
  • mod_scgi: fix segfault (1.4.43)
  • mod_magnet: fix magnet_cgi_set() set of env vars
  • mod_fastcgi: fix segfault if all backends down (1.4.43)

Changes from 1.4.43¶

• [mod_scgi] fix segfault (fixes #2762)
• [mod_authn_gssapi] fix memory leak
• [config] warn if mod_authn_ldap,mysql not listed
• [mod_magnet] fix magnet_cgi_set() set of env vars (fixes #2763)
• [mod_cgi] FreeBSD 9.3/MacOSX does not have pipe2() (fixes #2765)
• [mod_extforward] fix crash on invalid IP (fixes #2766)
• [mod_fastcgi] fix segfault if all backends down (fixes #2768)
• [mod_cgi] fix out of sockets error for POST to CGI (fixes #2771)
• [mod_auth] compile fix for Mac OS X XCode (fixes #2772)
• [mod_authn_gssapi] better resource cleanup
• [core] compile fix for Mac OS X 10.6 (old) (fixes #2773)
• fix race in dynamic handler configs (reentrancy) (fixes #2774)
• [mod_authn_mysql] close mysql_conn in cleanup
• [mod_webdav] compile fix when locking not enabled
• load mod_auth & mod_authn_file in sample/test.conf
• comment out auth.backend.ldap.* in tests/*.conf
• [mod_fastcgi,mod_scgi] warn if invalid "bin-path"
• RAND_pseudo_bytes() is deprecated in openssl 1.1.0
• openssl 1.1.0 init and cleanup
• [mod_cgi] remove direct calls to network_backend*
• [build] build network_*.c into lighttpd executable
• suggest inclusion of mod_geoip... before mod_ssi.
• set systemd settings similar to lighttpd2
• [doc] remove reference to Linux rt-signals
• [mod_authn_gssapi] fix missing error ret, coverity
• [core] rename li_rand() to li_rand_pseudo_bytes()
• remove #include "stream.h" where not used
• [mod_cml] include lua headers before base.h
• [core] combine duplicated connection reset code
• [mod_ssi] produce content in subrequest hook
• [core] remove srv->entropy[]
• [core] defer li_rand_init() until first use
• [core] permit connection-level state in modules
• [mod_dirlisting] render dirlisting as HTML (fixes #2767)
• [mod_proxy] replace HTTP Host sent to backend (fixes #2770)
• [mod_ssi] basic recursive SSI include virtual (fixes #536)
• [mod_ssi] implement, ignore
• [core] consolidate duplicated read-to-close code
• [core] fix segfault when parsing a bad config file
• [core] support Transfer-Encoding: chunked req body (fixes #2156)
• [autobuild] set NO_RDYNAMIC=yes for midipix
• [mod_proxy] proxy.balance = "sticky" option (fixes #2117)
• [mod_secdownload] warn if SHA used w/o SSL crypto
• [build] compile fixes for AIX
• [build] check for pipe2() at configure time
• [mod_evhost] fix an incorrect error trace
• [tests] mark tests/docroot/www/*.pl scripts a+x
• [mod_cgi] fall back to pipe() if pipe2() fails
• fix SCons fullstatic build with glibc pthreads
• [TLS] openssl 1.1.0 makes SSL_OP_NO_SSLv2 no-op

External references¶

• http://www.lighttpd.net/2016/12/24/1.4.44