Changelog for lighttpd-mod_webdav-1.4.x+git.20240318T124514~4ebc8af-3.12.x86_64.rpm :

* Wed Apr 03 2024 obs-service-tar-scmAATTinvalid- Update to version 1.4.x+git.20240318T124514~4ebc8af:
* [core] disable MPTCP support by default
* [core] add MPTCP support
* [core] add default to builtin mimetype.assign
* - next is 1.4.76
* [doc] NEWS
* [doc] update TLS comment in sample lighttpd.conf
* [mod_wolfssl] faster ASN1_TIME parse
* [mod_openssl] faster ASN1_TIME parse
* [mod_openssl] use internal asn1_time fn on 32-bit (fixes #3244)
* [mod_dirlisting] fix suffix display of \'/\' on file (fixes #3242)
* Tue Jun 21 2022 Dirk Müller - update to 1.4.65:
* WebSockets over HTTP/2
* RFC 8441 Bootstrapping WebSockets with HTTP/2
* HTTP/2 PRIORITY_UPDATE
* RFC 9218 Extensible Prioritization Scheme for HTTP
* prefix/suffix conditions in lighttpd.conf
* mod_webdav safe partial-PUT
* webdav.opts += (“partial-put-copy-modify” => “enable”)
* mod_accesslog option: accesslog.escaping = “json”
* mod_deflate libdeflate build option
* speed up request body uploads via HTTP/2
* Behavior Changes
* change default server.max-keep-alive-requests = 1000 to adjust
* to increasing HTTP/2 usage and to web2/web3 application usage
* (prior default was 100)
* mod_status HTML now includes HTTP/2 control stream id 0 in the output
* which contains aggregate counts for the HTTP/2 connection
* (These lines can be identified with URL ‘
*’, part of “PRI
*” preface)
* alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
* MIME type application/javascript is translated to text/javascript (RFC 9239)
* Thu Feb 03 2022 Johannes Segitz - Set ProtectHome to read-only, otherwise access to the users public_html can break (bsc#1195465)
* Sat Jan 22 2022 Andreas Stieger - update to 1.4.64:
* CVE-2022-22707: off-by-one stack overflow in the mod_extforward plugin (boo#1194376)
* graceful restart/shutdown timeout changed from 0 (disabled) to 8 seconds. configure an alternative with: server.feature-flags += (“server.graceful-shutdown-timeout” => 8)
* deprecated modules (previously announced) have been removed: mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming, mod_geoip, mod_trigger_b4_dl
* Sat Dec 04 2021 Andreas Stieger - update to 1.4.63:
* import xxHash v0.8.1
* fix reqpool mem corruption in 1.4.62- includes changes in 1.4.62:
* [mod_alias] fix use-after-free bug
* many developer visible bug fixes- build with pcre2 and without libev, as per upcoming deprecation
* Sun Nov 21 2021 Andreas Stieger - update to 1.4.61:
* mod_dirlisting: sort \"../\" to top
* fix HTTP/2 upload > 64k w/ max-request-size
* code level and developer visible bug fixes
* Sun Oct 24 2021 Andreas Stieger - update to 1.4.60:
* HTTP/2 smoother and lower memory use (in general)
* HTTP/2 tuning to better handle aggressive client initial requests
* reduce memory footprint; workaround poor glibc behavior; jemalloc is better
* mod_magnet lua performance improvements
* mod_dirlisting performance improvements and new caching option
* memory constraints for extreme edge cases in mod_dirlisting, mod_ssi, mod_webdav
* connect(), write(), read() time limits on backends (separate from client timeouts)
* lighttpd restarts if large discontinuity in time occurs (embedded systems)
* RFC7233 Range support for all non-streaming responses, not only static files
* connect() to backend now has default 8 second timeout (configurable)
* Tue Oct 05 2021 Johannes Segitz - Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_lighttpd.service.patch
* Tue Sep 21 2021 Jan Engelhardt - Fix squatted descriptions.
* Sun Jul 18 2021 Andreas Stieger - update to 1.4.59:
* HTTP/2 enabled by default
* mod_deflate zstd suppport
* new mod_ajp13