.gear/rules | 2 + .../tags/7d8aa461f38cd7c8d8aec8c4436aed2c09686b3e | 22 + .gear/tags/list | 1 + doc/config/lighttpd.conf | 8 +- doc/config/modules.conf | 1 + doc/systemd/lighttpd.service | 2 +- lighttpd.init | 104 ++++ lighttpd.logrotate | 6 + lighttpd.spec | 572 +++++++++++++++++++++ 9 files changed, 713 insertions(+), 5 deletions(-) diff --git a/.gear/rules b/.gear/rules new file mode 100644 index 00000000..a08cc3d6 --- /dev/null +++ b/.gear/rules @@ -0,0 +1,2 @@ +tar: lighttpd-@version@:. +diff: lighttpd-@version@:. . diff --git a/.gear/tags/7d8aa461f38cd7c8d8aec8c4436aed2c09686b3e b/.gear/tags/7d8aa461f38cd7c8d8aec8c4436aed2c09686b3e new file mode 100644 index 00000000..08900dd4 --- /dev/null +++ b/.gear/tags/7d8aa461f38cd7c8d8aec8c4436aed2c09686b3e @@ -0,0 +1,22 @@ +object a45bc54d182fe097981e365a09f90c47a8f68933 +type commit +tag lighttpd-1.4.71 +tagger Glenn Strauss 1685217525 -0400 + +lighttpd-1.4.71 +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCAAdFiEErKqOyMlwPq6zSSWOhu+1+68W0PAFAmRyYPUACgkQhu+1+68W +0PDzEA//R9Wq1iYZqKMoLsYOwlxgJr0thlyqOH7X35jMmrNAEb3lRsrvfTflBE6e +PQRTL6ZP1gDtnCoI/8Xd1lWdGQBXPb9Yn8t8fMLr0LWEKC4Ly6Xd70qh2oSY/nM8 +tjmSK4RgBXd7Fg6CZLLQTELG3eL2gI4EatqdVqk9gQs9ty0sKxI/ZQYgPRcERV4f +lIJgDdO+1FiZRcc/6G7dhhjw/Cc2JtLr95do/++B0N6tumj1ntzn8USWjzXg6TQ2 +9FsW8BC99nvyQ8dzBUsFBbwHsnAo9DVDWLfNbrFKfpjbGQtBj/oKEBL65xo4XUP0 +wvbCDar1veOkoeKwxNRnL49CH8JCDGzikYKd54ZC5uCEBjcQNpb9Jngqtp+ERh+s +c5mZKHNz1P6ZeAU1rauJmJmoNIe7yW5cqloqw+9HD+AMCW7vVzET2VlSRed+oyli ++qOoHVqHFmIzj+X9vztmvex/HUqKj5reFxCnjY7gYNLaqQ9tWrdEogmsAZHeu/IW +c+S9Mr0RYderDojN7SD6M5Vsw9dzOHbePqdYNk16NPmDlalow1D9e4MpQSxj0GJn +KzoBoOb0tS98zD/e5ryuv79enmbdLFjyJGI7n9XZQ+1Ch7NaOHnD1Cs97+74PxLg +dAD1v+2gTxeEuxFVe1X2nhwhHHa1nHaNnw53we//eX6tWrHaCQg= +=uqov +-----END PGP SIGNATURE----- diff --git a/.gear/tags/list b/.gear/tags/list new file mode 100644 index 00000000..452fd865 --- /dev/null +++ b/.gear/tags/list @@ -0,0 +1 @@ +7d8aa461f38cd7c8d8aec8c4436aed2c09686b3e lighttpd-1.4.71 diff --git a/doc/config/lighttpd.conf b/doc/config/lighttpd.conf index d45a284d..82129705 100644 --- a/doc/config/lighttpd.conf +++ b/doc/config/lighttpd.conf @@ -14,7 +14,7 @@ ## chroot example as well. ## var.log_root = "/var/log/lighttpd" -var.server_root = "/srv/www" +var.server_root = "/var/www" var.state_dir = "/run" var.home_dir = "/var/lib/lighttpd" var.conf_dir = "/etc/lighttpd" @@ -36,7 +36,7 @@ var.conf_dir = "/etc/lighttpd" #var.vhosts_dir = "/vhosts" #var.conf_dir = "/etc" # -#server.chroot = "/srv/www" +#server.chroot = "/var/www" ## ## Some additional variables to make the configuration easier @@ -58,7 +58,7 @@ var.vhosts_dir = server_root + "/vhosts" ## used in: ## conf.d/deflate.conf ## -var.cache_dir = "/var/cache/lighttpd" +var.cache_dir = "/var/spool/lighttpd/tmp/" ## ## Base directory for sockets. @@ -114,7 +114,7 @@ server.groupname = "lighttpd" ## ## Document root ## -server.document-root = server_root + "/htdocs" +server.document-root = server_root + "/webapps" ## ## The value for the "Server:" response field. diff --git a/doc/config/modules.conf b/doc/config/modules.conf index 75235b55..1cf22e34 100644 --- a/doc/config/modules.conf +++ b/doc/config/modules.conf @@ -52,6 +52,7 @@ server.modules = ( # "mod_redirect", # "mod_setenv", # "mod_alias", +# "mod_openssl", ) ## diff --git a/doc/systemd/lighttpd.service b/doc/systemd/lighttpd.service index 6fa622b7..c381ab91 100644 --- a/doc/systemd/lighttpd.service +++ b/doc/systemd/lighttpd.service @@ -7,7 +7,7 @@ Type=simple PIDFile=/run/lighttpd.pid ExecStartPre=/usr/sbin/lighttpd -tt -f /etc/lighttpd/lighttpd.conf ExecStart=/usr/sbin/lighttpd -D -f /etc/lighttpd/lighttpd.conf -ExecReload=/bin/kill -USR1 $MAINPID +ExecReload=/bin/kill -HUP $MAINPID Restart=on-failure [Install] diff --git a/lighttpd.init b/lighttpd.init new file mode 100755 index 00000000..199ad1ba --- /dev/null +++ b/lighttpd.init @@ -0,0 +1,104 @@ +#!/bin/sh +# +# lighttpd Startup script for the lighttpd server +# +# chkconfig: - 85 15 +# description: Lightning fast webserver with light system requirements +# +# processname: lighttpd +# config: /etc/lighttpd/lighttpd.conf +# config: /etc/sysconfig/lighttpd +# pidfile: /var/run/lighttpd.pid +# + +WITHOUT_RC_COMPAT=1 + +# Source function library +. /etc/rc.d/init.d/functions + +SourceIfNotEmpty /etc/sysconfig/lighttpd + +[ -n "$LIGHTTPD_CONF_PATH" ] || LIGHTTPD_CONF_PATH="/etc/lighttpd/lighttpd.conf" + +PIDFILE=/var/run/lighttpd.pid +LOCKFILE=/var/lock/lighttpd +RETVAL=0 + +msg_reopen_logs() +{ + local a + a="$1" + shift + printf "Reopening %s service logfiles: " "$a" +} + +start() { + start_daemon --pidfile "$PIDFILE" --lockfile "$LOCKFILE" \ + --expect-user lighttpd --name lighttpd -- lighttpd -f "$LIGHTTPD_CONF_PATH" + RETVAL=$? + return $RETVAL +} + +stop() { + stop_daemon --pidfile "$PIDFILE" --lockfile "$LOCKFILE" \ + --expect-user lighttpd --name lighttpd -- lighttpd + RETVAL=$? + return $RETVAL +} + +restart() +{ + stop + start +} + +log_reopen() { + msg_reopen_logs lighttpd + stop_daemon --pidfile "$PIDFILE" --expect-user lighttpd --name lighttpd -HUP -- lighttpd + RETVAL=$? + return $RETVAL +} + +case "$1" in + start) + start + ;; + stop) + stop + ;; + restart) + restart + ;; + condstop) + if [ -e "$LOCKFILE" ]; then + stop + fi + ;; + condrestart) + if [ -f "$LOCKFILE" ]; then + stop + start + fi + ;; + condreload) + if [ -e "$LOCKFILE" ]; then + reload + fi + ;; + reload) + restart + ;; + log_reopen) + log_reopen + ;; + status) + status --pidfile "$PIDFILE" --expect-user lighttpd \ + --name lighttpd -- lighttpd + RETVAL=$? + ;; + *) + msg_usage "${0##*/} {start|stop|restart|condstop|condrestart|condreload|reload|log_reopen|status}" + RETVAL=1 +esac + +exit $RETVAL diff --git a/lighttpd.logrotate b/lighttpd.logrotate new file mode 100644 index 00000000..14545e24 --- /dev/null +++ b/lighttpd.logrotate @@ -0,0 +1,6 @@ +/var/log/lighttpd/*.log { + missingok + postrotate + /sbin/service lighttpd reload &>/dev/null + endscript +} diff --git a/lighttpd.spec b/lighttpd.spec new file mode 100644 index 00000000..f7a37d52 --- /dev/null +++ b/lighttpd.spec @@ -0,0 +1,572 @@ +%def_with mysql +%def_with ldap +%def_with gssapi +%def_with ssl +%def_with lua +%def_without gamin +%def_with pgsql +%def_with tests +%def_with maxminddb +%def_with libdeflate + +%define lighttpd_user lighttpd +%define lighttpd_group lighttpd +%define lighttpd_spool %_spooldir/%name + +%define docdir %_docdir/%name-%version-doc + +Name: lighttpd +Version: 1.4.71 +Release: alt1 + +Summary: A fast webserver with minimal memory-footprint +License: BSD +Group: System/Servers + +# git clone https://git.lighttpd.net/lighttpd/lighttpd1.4.git +Url: http://www.lighttpd.net + +Source0: %name-%version.tar +Patch0: %name-%version-%release.patch + +Requires(pre): shadow-utils shadow-groups webserver-common +Provides: webserver + +BuildRequires(pre): rpm-macros-webserver-common +# Automatically added by buildreq on Wed Dec 02 2020 +# optimized out: glibc-kernheaders-generic glibc-kernheaders-x86 libcom_err-devel libcrypt-devel libkrb5-devel libsasl2-3 perl pkg-config python2-base sh4 +BuildRequires: bzlib-devel libbrotli-devel libfcgi-devel libpcre2-devel libxxhash-devel zlib-devel + +%{?_with_maxminddb:BuildPreReq: libmaxminddb-devel} +%{?_with_mysql:BuildPreReq: libmysqlclient-devel} +%{?_with_gssapi:BuildPreReq: libkrb5-devel} +%{?_with_ssl:BuildPreReq: libssl-devel} +%{?_with_ldap:BuildPreReq: libldap-devel} +%{?_with_lua:BuildPreReq: lua-devel} +%{?_with_gamin:BuildPreReq: libgamin-devel} +%{?_with_pgsql:BuildPreReq: libpq5-devel} +%{?_with_libdeflate:BuildPreReq: libdeflate-devel} +%{?_with_tests:BuildPreReq: perl-devel perl-Digest-SHA} + +%description +%name is intented to be a frontend for ad-servers which have to deliver +small files concurrently to many connections. + +%if_with mysql +%package mysql-vhost +Summary: MySQL based vhosting %name module +Group: System/Servers +Requires: %name = %version-%release + +%description mysql-vhost +This module provides virtual hosts (vhosts) based on a MySQL table. +%endif #mysql + +%if_with ldap +%package auth-ldap +Summary: LDAP authentication for %name +Group: System/Servers +Requires: %name = %version-%release + +%description auth-ldap +LDAP authentication for %name + +%package ldap-vhost +Summary: LDAP based vhosting %name module +Group: System/Servers +Requires: %name = %version-%release + +%description ldap-vhost +This module provides virtual hosts (vhosts) based on a LDAP. +%endif #ldap + +%if_with maxminddb +%package maxminddb +Summary: MaxMind GeoIP2 module (plugin) for %name. +Group: System/Servers +Requires: %name = %version-%release + +%description maxminddb +The module loads a geoip database of type "country" or "city" and sets new +ENV vars based on ip record lookups. +%endif #maxminddb + +%if_with gssapi +%package auth-gssapi +Summary: GSSAPI authentication for %name +Group: System/Servers +Requires: %name = %version-%release + +%description auth-gssapi +GSSAPI authentication for %name +%endif #gssapi + +%if_with pgsql +%package pgsql-vhost +Summary: PostgreSQL based vhosting %name module +Group: System/Servers +Requires: %name = %version-%release + +%description pgsql-vhost +This module provides virtual hosts (vhosts) based on a PostgreSQL table. +%endif #pgsql + +%package rrdtool +Summary: rrdtool support %name module +Group: System/Servers +Requires: %name = %version-%release, rrdtool + +%description rrdtool +mod_rrdtool is used to monitor the traffic and load on the webserver. + +%package doc +Summary: %name documentation +Group: Documentation +BuildArch: noarch + +%description doc +Documentation for %name. + +%prep +%setup +%patch0 -p1 + +libtoolize -f -c +%autoreconf + +%build +%configure --libdir=%_libdir/%name \ + --with-brotli \ + --with-zlib \ + --with-bzip2 \ + --with-uuid \ + --with-xxhash \ + %{?_with_mysql: --with-mysql} \ + %{?_with_pgsql: --with-pgsql} \ + %{?_with_ssl: --with-openssl} \ + %{?_with_ldap: --with-ldap} \ + %{?_with_lua: --with-lua} \ + %{?_with_gamin: --with-fam} \ + %{?_with_gssapi: --with-krb5} \ + %{?_with_maxminddb: --with-maxminddb} \ + %{?_with_libdeflate: --with-libdeflate} \ + %{?_with_lua: LUA_CFLAGS="-I/usr/include/" LUA_LIBS="-llua"} + +%make_build + +# run tests for sanity checks +#pushd tests +#./wrapper.sh . .. ./prepare.sh +#./wrapper.sh . .. ./run-tests.pl +#popd + +%install +%makeinstall libdir=%buildroot%_libdir/%name + +mkdir -p %buildroot%_sysconfdir/{rc.d/init.d,sysconfig} +mkdir -p %buildroot%_unitdir +mkdir -p %buildroot{%_spooldir/%name/tmp,%_var/log/%name,%_var/lib/%name} + +# inirscript, sysconfig and unit +install -m755 %name.init %buildroot%_initdir/%name +#install -m644 doc/initscripts/sysconfig.lighttpd %buildroot%_sysconfdir/sysconfig/lighttpd +install -m644 doc/systemd/lighttpd.service %buildroot%_unitdir/lighttpd.service +install -m644 doc/systemd/lighttpd.socket %buildroot%_unitdir/lighttpd.socket + +# configs +cp -rp doc/config %buildroot%_sysconfdir/%name +find %buildroot%_sysconfdir/%name -type f -name "Makefile*" -delete + +# logrotate script +install -pDm644 lighttpd.logrotate %buildroot%_sysconfdir/logrotate.d/%name + +# docs +rm -rf %buildroot%docdir +mkdir -p %buildroot%docdir/outdated +cp -a doc/outdated/*.txt %buildroot%docdir/outdated/ + +%if_with tests +%check +%make -C tests leak-check +%endif #tests + +%pre +%_sbindir/groupadd -r -f %lighttpd_group ||: +%_sbindir/useradd -r -g %lighttpd_group -d /dev/null -s /dev/null -N %lighttpd_user \ + 2> /dev/null > /dev/null ||: +gpasswd -a %lighttpd_user %webserver_group + +%post +%post_service lighttpd + +%preun +%preun_service lighttpd + +%files +%doc README INSTALL COPYING AUTHORS +%config %_initdir/%name +%config(noreplace) %_sysconfdir/logrotate.d/%name +%_unitdir/* +%dir %attr(0750,root,%lighttpd_group) %_sysconfdir/%name +%dir %attr(0750,root,%lighttpd_group) %_sysconfdir/%name/conf.d +%dir %attr(0750,root,%lighttpd_group) %_sysconfdir/%name/vhosts.d +%config(noreplace) %attr(0644,root,%lighttpd_group) %_sysconfdir/%name/*.conf +%config(noreplace) %attr(0644,root,%lighttpd_group) %_sysconfdir/%name/*/*.conf +%_sysconfdir/%name/*/mod.template +%_sysconfdir/%name/vhosts.d/* +%_man8dir/* +%dir %attr(1770,root,%lighttpd_group) %lighttpd_spool +%dir %attr(1770,root,%lighttpd_group) %lighttpd_spool/tmp +%dir %attr(1770,root,%lighttpd_group) %_var/lib/%name +%dir %attr(1770,root,%lighttpd_group) %_var/log/%name +%dir %_libdir/%name +%_libdir/%name/*.so + +%if_with mysql +%exclude %_libdir/%name/*_vhostdb_mysql.so +%endif #mysql + +%if_with pgsql +%exclude %_libdir/%name/*_vhostdb_pgsql.so +%endif #pgsql + +%if_with ldap +%exclude %_libdir/%name/*_authn_ldap.so +%exclude %_libdir/%name/*_vhostdb_ldap.so +%endif ldap + +%if_with gssapi +%exclude %_libdir/%name/*_authn_gssapi.so +%endif gssapi + +%if_with maxminddb +%exclude %_libdir/%name/*_maxminddb.so +%endif #maxminddb + +%exclude %_libdir/%name/*_rrdtool.so +%_sbindir/* +%exclude %_libdir/%name/*.la + +%files doc +%docdir + +%if_with mysql +%files mysql-vhost +%_libdir/%name/*_vhostdb_mysql.so +%endif #mysql + +%if_with ldap +%files auth-ldap +%_libdir/%name/*_authn_ldap.so + +%files ldap-vhost +%_libdir/%name/*_vhostdb_ldap.so +%endif #ldap + +%if_with gssapi +%files auth-gssapi +%_libdir/%name/*_authn_gssapi.so +%endif #gssapi + +%if_with pgsql +%files pgsql-vhost +%_libdir/%name/*_vhostdb_pgsql.so +%endif #pgsql + +%if_with maxminddb +%files maxminddb +%_libdir/%name/*_maxminddb.so +%endif #maxminddb + +%files rrdtool +%_libdir/%name/*rrdtool.so + +%changelog +* Mon May 29 2023 Alexei Takaseev 1.4.71-alt1 +- 1.4.71 + +* Thu May 11 2023 Alexei Takaseev 1.4.70-alt1 +- 1.4.70 + +* Mon Jan 23 2023 Alexei Takaseev 1.4.68-alt1 +- 1.4.68 +- Pack lighttpd.socket + +* Wed Sep 21 2022 Alexei Takaseev 1.4.67-alt1 +- 1.4.67 + +* Thu Jun 09 2022 Alexei Takaseev 1.4.65-alt1 +- 1.4.65 + +* Fri Jan 21 2022 Alexei Takaseev 1.4.64-alt1 +- 1.4.64 +- BR: libpcre -> libpcre2 +- Remove deprecated modules + +* Tue Dec 07 2021 Alexei Takaseev 1.4.63-alt1 +- 1.4.63 + +* Fri Dec 03 2021 Alexei Takaseev 1.4.62-alt1 +- 1.4.62 + +* Fri Oct 29 2021 Alexei Takaseev 1.4.61-alt1 +- 1.4.61 + +* Tue Oct 05 2021 Alexei Takaseev 1.4.60-alt1 +- 1.4.60 + +* Fri Feb 05 2021 Alexei Takaseev 1.4.59-alt1 +- 1.4.59 + +* Tue Dec 29 2020 Alexei Takaseev 1.4.58-alt1 +- 1.4.58 + +* Fri Dec 18 2020 Alexei Takaseev 1.4.57-alt1 +- 1.4.57 + +* Wed Dec 02 2020 Alexei Takaseev 1.4.56-alt1 +- 1.4.56 + +* Mon May 25 2020 Alexei Takaseev 1.4.55-alt2 +- Disable gamin support + +* Sat Feb 01 2020 Alexei Takaseev 1.4.55-alt1 +- 1.4.55 + +* Wed May 29 2019 Alexei Takaseev 1.4.54-alt1 +- 1.4.54 + +* Sun Jan 27 2019 Alexei Takaseev 1.4.53-alt1 +- 1.4.53 + +* Fri Nov 30 2018 Alexei Takaseev 1.4.52-alt1 +- 1.4.52 + +* Mon Oct 15 2018 Alexei Takaseev 1.4.51-alt1 +- 1.4.51 +- Enable internal tests + +* Tue Sep 04 2018 Alexei Takaseev 1.4.50-alt2 +- Rebuild with OpenSSL 1.1.x + +* Tue Aug 21 2018 Alexei Takaseev 1.4.50-alt1 +- 1.4.50 + +* Mon Mar 12 2018 Alexei Takaseev 1.4.49-alt1 +- 1.4.49 + +* Wed Mar 07 2018 Alexei Takaseev 1.4.48-alt1 +- 1.4.48 + +* Tue Nov 07 2017 Alexei Takaseev 1.4.47-alt2 +- Build with gssapi support (closes: #34134) +- Build with pgsql vhosting +- Split base package to auth-mysql, auth-ldap, ldap-vhost, + auth-gssapi, pgsql-vhost subpackages + +* Mon Oct 23 2017 Alexei Takaseev 1.4.47-alt1 +- 1.4.47 + +* Sun Oct 22 2017 Alexei Takaseev 1.4.46-alt1 +- 1.4.46 + +* Fri Aug 11 2017 Alexei Takaseev 1.4.45-alt1 +- 1.4.45 + +* Tue Feb 07 2017 Igor Vlasenko 1.4.43-alt1.1 +- rebuild with new lua 5.3 + +* Tue Nov 01 2016 Alexei Takaseev 1.4.43-alt1 +- 1.4.43 + +* Mon Oct 17 2016 Alexei Takaseev 1.4.42-alt1 +- 1.4.42 + +* Wed Jan 06 2016 Alexei Takaseev 1.4.39-alt1 +- 1.4.39 + +* Sun Dec 06 2015 Alexei Takaseev 1.4.38-alt1 +- 1.4.38 + +* Mon Aug 31 2015 Alexei Takaseev 1.4.37-alt1 +- 1.4.37 + +* Tue Jul 28 2015 Alexei Takaseev 1.4.36-alt1 +- 1.4.36 + +* Wed Apr 29 2015 Alexei Takaseev 1.4.35-alt2 +- update to svn2986 + +* Wed Apr 02 2014 Alexei Takaseev 1.4.35-alt1 +- 1.4.35 + +* Tue Jan 21 2014 Alexei Takaseev 1.4.34-alt1 +- 1.4.34 + +* Mon Sep 30 2013 Alexei Takaseev 1.4.33-alt1 +- 1.4.33 + +* Wed Apr 03 2013 Alexei Takaseev 1.4.32-alt4 +- change buildreq 'libMySQL-devel' to 'libmysqlclient-devel' + +* Mon Nov 26 2012 Alexei Takaseev 1.4.32-alt3 +- Add systemd unit + +* Thu Nov 22 2012 Alexei Takaseev 1.4.32-alt2 +- fix DoS in Connection header value split (CVE-2012-5533) + +* Wed Nov 07 2012 Alexei Takaseev 1.4.32-alt1 +- 1.4.32 + +* Mon Oct 18 2010 Vladimir V. Kamarzin 1.4.28-alt2 +- Rebuild with libssl.so.10 and libcrypto.so.10. + +* Fri Oct 01 2010 Vladimir V. Kamarzin 1.4.28-alt1 +- 1.4.28. +- New config scheme introduced by upstream: small main config which + includes configs for modules and vhosts (Closes: #23233). +- Add lighttpd pseudouser to %%webserver_group according to WebPolicy + (Closes: #23232). +- Don't create docdir when starting lighttpd service. + +* Thu Feb 04 2010 Vladimir V. Kamarzin 1.4.25-alt1.svn.2710 +- Update to 2710 revision of 1.4.x branch. +- Security fix: CVE-2010-0295 (lighttpd Slow Request Denial of Service + Vulnerability). + +* Thu Dec 31 2009 Vladimir V. Kamarzin 1.4.23-alt3 +- Properly create all docroots specified in config file, patch by + Nikolay A. Fetisov (Closes: #22652). + +* Fri Oct 16 2009 Vladimir V. Kamarzin 1.4.23-alt2 +- Fix building with fresh liblua + +* Wed Sep 02 2009 Vladimir V. Kamarzin 1.4.23-alt1 +- 1.4.23 +- Move spawn-fcgi package to separate git repository because spawn-fcgi + was removed from lighttpd main tree, see + http://blog.lighttpd.net/articles/2009/04/03/spawn-fcgi-removed-from-lighttpd-1-4 +- Rebuilt with libldap2.4 + +* Thu Mar 19 2009 Vladimir V. Kamarzin 1.4.22-alt1 +- 1.4.22 +- Fix+add cond* actions in spawn-fcgi initscript + +* Tue Dec 09 2008 Vladimir V. Kamarzin 1.4.20-alt2.svn.2364 +- Updated to 2364 revision of 1.4.x branch +- Add condrestart action for spawn-fcgi initscript + +* Tue Sep 30 2008 Vladimir V. Kamarzin 1.4.20-alt1 +- 1.4.20 release +- Security fix: duplicate Request Headers Memory Leak Vulnerability + http://secunia.com/advisories/32069/ + +* Tue Sep 09 2008 Vladimir V. Kamarzin 1.4.19-alt6.svn.2299 +- Updated to 2299 revision of 1.4.x branch +- Move spawn-fcgi to separate subpackage (thresh, vvk) + +* Wed Aug 27 2008 Vladimir V Kamarzin 1.4.19-alt5.svn.2296 +- Updated to 2296 revision of 1.4.x branch +- initscript: add restart() (Closes: #16417) +- logrotate-script: redirect output to /dev/null + +* Fri Apr 04 2008 Vladimir V Kamarzin 1.4.19-alt4.svn.2142 +- Updated to 2142 revision of 1.4.x branch +- Security fixes: + + CVE-2008-1531 lighttpd OpenSSL Error Queue Denial of Service Vulnerability +- Enable memcache support + +* Fri Mar 14 2008 Vladimir V Kamarzin 1.4.19-alt3 +- Add logrotate script +- Initscript changes: + + Check docdir existance and create it if it doesn't exist (Closes: #12725) + + Introduce log_reopen() function for sending SIGHUP to daemon - needed for + log rotation + +* Tue Mar 11 2008 Vladimir V Kamarzin 1.4.19-alt2 +- There is an error in previous package version: real version was 1.4.18, not + 1.4.19! +- This is real 1.4.19 release. Security fixes: + + CVE-2008-0983: remote DoS + + CVE-2008-1111: exposure of sensitive information (Fix sending source of cgi + script instead of 500 error if fork fails) + +* Tue Sep 11 2007 Vladimir V Kamarzin 1.4.19-alt1 +- Real version is 1.4.18 - there is error in package version!!! +- Security fix: CVE-2007-4727: FastCGI header overrun in mod_fastcgi + +* Tue Sep 04 2007 Vladimir V Kamarzin 1.4.18-alt1.svn.1981 +- Updated to 1981 revision of 1.4.x branch: + + many bugs fixed (see HISTORY) +- Fixed ALT Security Policy violation (spooldir permissions) + +* Mon Jul 16 2007 Vladimir V Kamarzin 1.4.15-alt2.svn.1881 +- Updated to 1881 revision of 1.4.x branch +- Security fixes: + + Remote crash on duplicate header keys with line-wrapping (fixes #1230) + + Missing check for base64 encoded string in mod_auth and Basic + auth (reported by Stefan Esser) + + Crash with md5-sess and cnonce not set in mod_auth (reported + by Stefan Esser) + + Possible crash in Auth-Digest header parser on trailing WS in + mod_auth (reported by Stefan Esser) + + mem-leak in mod_auth (reported by Stefan Esser) + + URL Access restrictions bypass in mod_access + + Local DOS with broken FastCGI applications + +* Mon Apr 16 2007 Vladimir V Kamarzin 1.4.15-alt1 +- Updated to 1.4.15 release + +* Thu Apr 12 2007 Vladimir V Kamarzin 1.4.13-alt3.1745 +- Updated to 1745 revision of 1.4.x branch +- Added sis/sisx mime types (Closes: #11462) + +* Thu Apr 05 2007 Vladimir V Kamarzin 1.4.13-alt2.1719 +- Updated to 1719 revision of 1.4.x branch + + Fix crash if gethostbyaddr() fails on redirect + +* Sat Mar 24 2007 Vladimir V Kamarzin 1.4.13-alt2.1716 +- Build without memcache + +* Tue Mar 20 2007 Vladimir V Kamarzin 1.4.13-alt1.1716 +- Updated to 1716 revision of 1.4.x branch + +* Thu Feb 08 2007 Vladimir V Kamarzin 1.4.13-alt1.1607 +- Updated to 1.4.x branch svn revision 1607 +- Security fix: + + Fix remote DOS in CRLF parsing (CVE-2007-1869) + + Fix a crash for files with an mtime of 0 reported by cubiq on irc + (CVE-2007-1870) +- Integrate lighttpd-1.4.3-config.patch + +* Mon Jan 30 2006 LAKostis 1.4.9-alt1 +- 1.4.9; +- change fam support to gamin; +- pack ChangeLog and move it to -doc subpackage. + +* Sat Jan 07 2006 LAKostis 1.4.8-alt1 +- 1.4.8; +- fix #8431. + +* Sat Oct 29 2005 LAKostis 1.4.6-alt1 +- 1.4.6. +- fix config dir permissions. +- fix requires. +- add libfcgi-devel to BuildRequires. +- add lua,memcache,fam,ldap support. +- split out to many packages. + +* Sun Sep 11 2005 LAKostis 1.4.3-alt1 +- first build for ALTLinux Sisyphus. + +* Thu Sep 30 2004 12:41 1.3.1 +- upgraded to 1.3.1 + +* Tue Jun 29 2004 17:26 1.2.3 +- rpmlint'ed the package +- added URL +- added (noreplace) to start-script +- change group to Networking/Daemon (like apache) + +* Sun Feb 23 2003 15:04 +- initial version