lighttpd 1.4.30 released http://www.lighttpd.net/2011/12/18/1-4-30-faster-than-santa-your-first-present-this-year http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.30.tar.xz Changes: Always use our ‘own’ md5 implementation, fixes linking issues on MacOS (fixes #2331) Limit amount of bytes we send in one go; fixes stalling in one connection and timeouts on slow systems. [ssl] fix build errors when Elliptic-Curve Diffie-Hellman is disabled Add static-file.disable-pathinfo option to prevent handling of urls like …/secret.php/image.jpg as static file Don’t overwrite 401 (auth required) with 501 (unknown method) (fixes #2341) Fix mod_status bug: always showed “0/0” in the “Read” column for uploads (fixes #2351) [mod_auth] Fix signedness error in http_auth (fixes #2370, CVE-2011-4362) [ssl] count renegotiations to prevent client renegotiations [ssl] add option to honor server cipher order (fixes #2364, BEAST attack) [core] accept dots in ipv6 addresses in host header (fixes #2359) [ssl] fix ssl connection aborts if files are larger than the MAX_WRITE_LIMIT (256kb) [libev/cgi] fix waitpid ECHILD errors in cgi with libev (fixes #2324)
*** This bug has been marked as a duplicate of bug 392581 ***