Package lighttpd

- 1.4.64
- BR: libpcre -> libpcre2
- Remove deprecated modules

- 1.4.63

- 1.4.62

- 1.4.61

- 1.4.60

- 1.4.59

- 1.4.58

- 1.4.57

- 1.4.56

- Disable gamin support

- 1.4.55

- 1.4.54

- 1.4.53

- 1.4.52

- 1.4.51
- Enable internal tests

- Rebuild with OpenSSL 1.1.x

- 1.4.50

- 1.4.49

- 1.4.48

- Build with gssapi support (closes: #34134)
- Build with pgsql vhosting
- Split base package to auth-mysql, auth-ldap, ldap-vhost,
  auth-gssapi, pgsql-vhost subpackages

- 1.4.47

- 1.4.46

- 1.4.45

- rebuild with new lua 5.3

- 1.4.43

- 1.4.42

- 1.4.39

- 1.4.38

- 1.4.37

- 1.4.36

- update to svn2986

- 1.4.35

- 1.4.34

- 1.4.33

- change buildreq 'libMySQL-devel' to 'libmysqlclient-devel'

- Add systemd unit

- fix DoS in Connection header value split (CVE-2012-5533)

- 1.4.32

- Rebuild with libssl.so.10 and libcrypto.so.10.

- 1.4.28.
- New config scheme introduced by upstream: small main config which
  includes configs for modules and vhosts (Closes: #23233).
- Add lighttpd pseudouser to %webserver_group according to WebPolicy
  (Closes: #23232).
- Don't create docdir when starting lighttpd service.

- Update to 2710 revision of 1.4.x branch.
- Security fix: CVE-2010-0295 (lighttpd Slow Request Denial of Service
  Vulnerability).

- Properly create all docroots specified in config file, patch by
  Nikolay A. Fetisov (Closes: #22652).

- Fix building with fresh liblua

- 1.4.23
- Move spawn-fcgi package to separate git repository because spawn-fcgi
  was removed from lighttpd main tree, see
  http://blog.lighttpd.net/articles/2009/04/03/spawn-fcgi-removed-from-lighttpd-1-4
- Rebuilt with libldap2.4

- 1.4.22
- Fix+add cond* actions in spawn-fcgi initscript

- Updated to 2364 revision of 1.4.x branch
- Add condrestart action for spawn-fcgi initscript

- 1.4.20 release
- Security fix: duplicate Request Headers Memory Leak Vulnerability
  http://secunia.com/advisories/32069/

- Updated to 2299 revision of 1.4.x branch
- Move spawn-fcgi to separate subpackage (thresh, vvk)

- Updated to 2296 revision of 1.4.x branch
- initscript: add restart() (Closes: #16417)
- logrotate-script: redirect output to /dev/null

- Updated to 2142 revision of 1.4.x branch
- Security fixes:
  + CVE-2008-1531 lighttpd OpenSSL Error Queue Denial of Service Vulnerability
- Enable memcache support

- Add logrotate script
- Initscript changes:
  + Check docdir existance and create it if it doesn't exist (Closes: #12725)
  + Introduce log_reopen() function for sending SIGHUP to daemon - needed for
  log rotation

- There is an error in previous package version: real version was 1.4.18, not
  1.4.19!
- This is real 1.4.19 release. Security fixes:
  + CVE-2008-0983: remote DoS
  + CVE-2008-1111: exposure of sensitive information (Fix sending source of cgi
  script instead of 500 error if fork fails)

- Real version is 1.4.18 - there is error in package version!!!
- Security fix: CVE-2007-4727: FastCGI header overrun in mod_fastcgi

- Updated to 1981 revision of 1.4.x branch:
  + many bugs fixed (see HISTORY)
- Fixed ALT Security Policy violation (spooldir permissions)

- Updated to 1881 revision of 1.4.x branch
- Security fixes:
  + Remote crash on duplicate header keys with line-wrapping (fixes #1230)
  + Missing check for base64 encoded string in mod_auth and Basic
    auth (reported by Stefan Esser)
  + Crash with md5-sess and cnonce not set in mod_auth (reported
    by Stefan Esser)
  + Possible crash in Auth-Digest header parser on trailing WS in
    mod_auth (reported by Stefan Esser)
  + mem-leak in mod_auth (reported by Stefan Esser)
  + URL Access restrictions bypass in mod_access
  + Local DOS with broken FastCGI applications

- Updated to 1.4.15 release

- Updated to 1745 revision of 1.4.x branch
- Added sis/sisx mime types (Closes: #11462)

- Updated to 1719 revision of 1.4.x branch
  + Fix crash if gethostbyaddr() fails on redirect

- Build without memcache

- Updated to 1716 revision of 1.4.x branch

- Updated to 1.4.x branch svn revision 1607
- Security fix:
  + Fix remote DOS in CRLF parsing (CVE-2007-1869)
  + Fix a crash for files with an mtime of 0 reported by cubiq on irc
  (CVE-2007-1870)
- Integrate lighttpd-1.4.3-config.patch

- 1.4.9;
- change fam support to gamin;
- pack ChangeLog and move it to -doc subpackage.

- 1.4.8;
- fix #8431.

- 1.4.6.
- fix config dir permissions.
- fix requires.
- add libfcgi-devel to BuildRequires.
- add lua,memcache,fam,ldap support.
- split out to many packages.

- first build for ALTLinux Sisyphus.

- upgraded to 1.3.1

- rpmlint'ed the package
- added URL
- added (noreplace) to start-script
- change group to Networking/Daemon (like apache)

- initial version