lighttpd (1.4.46~snap-20170813-015739-gdadfb5-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gdadfb5
    + [core] attempt to quiet coverity false positives

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 13 Aug 2017 01:58:20 +0000

lighttpd (1.4.46~snap-20170812-195717-g9bc61f-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g9bc61f
    + [core] attempt to quiet coverity false positives

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 12 Aug 2017 19:57:58 +0000

lighttpd (1.4.46~snap-20170812-171822-g748fc8-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g748fc8
    + [core] get port from sock_addr if AF_INET,AF_INET6
    + [core] server.error_handler_404 X-Sendfile ENOENT (#2474)
    + [core] consolidate fork()/execve() code (#1393)
    + [core] mv log_error_{open,cycle.close} to server.c
    + [core] rename fd_close_on_exec()
    + [core] remove unused includes of stat_cache.h
    + [core] add missing include of stdlib.h
    + [core] reduce exposure of unistd.h, other includes
    + [core] sock_addr_from_str_hints reusable name res
    + [core] continue collecting use of netdb.h
    + [core] continue collecting use of netdb.h
    + [core] continue collecting use of netdb.h
    + [core] fdevent_connect_status() shared code
    + [core] add const to reduce .data segment size
    + [mod_proxy] move data_fastcgi into mod_proxy.c
    + [mod_proxy] store address family at config time
    + [mod_fastcgi] slightly simplify counters
    + [mod_fastcgi] consolidate connect() error handling
    + [mod_fastcgi] set request_id in fcgi_create_env()
    + [mod_fastcgi] move delayed connect() into switch()
    + [mod_fastcgi,mod_scgi] consistent connect() error
    + [mod_scgi] remove unused parse_response member
    + [mod_fastcgi,mod_scgi] struct member consistency
    + [mod_fastcgi,mod_scgi] parse bin_path at startup
    + [mod_fastcgi,mod_scgi] use temp buffer for cgi_env
    + [core] shared code for socket backends
    + [core] spread load on socket backend procs
    + [core] store sockaddr for socket backend procs
    + [core] resolve DNS at startup for socket backends
    + [core] adaptive spawning for socket backend procs (fixes #1162)
    + quell compiler warnings for -Wimplicit-fallthrough
    + [doc] update README
    + [core] fdevent_cycle_logger()
    + [core] reap lighttpd worker pids precisely
    + [core] restart piped loggers if they exit (fixes #1393)
    + [mod_webdav] PROPFIND getetag attr must match GET
    + [core] consistent behavior w/ and w/o SA_SIGINFO
    + [core] do not remove pid-file in test mode
    + [core] add public domain SHA1() if no crypto
    + [mod_wstunnel] websocket tunnel to other protocol
    + [core] forward SIGHUP only to lighttpd workers
    + [mod_dirlisting] treat README and HEADER as paths (fixes #2818)
    + [core] set one-shot mode fd O_NONBLOCK, FD_CLOEXEC
    + [core] remove fdevent fcntl_set hook
    + [mod_extforward] typo in comment
    + [mod_cgi] add missing #include
    + [core] fix invalid sizeof() identified by coverity
    + [core] add missing #include
    + [core] base_decls.h to quiet compiler warnings
    + [core] set socket perms after bind, before listen
    + [core] warn if backend server config contains '_'
    + [mod_extforward] PROXY proto and SSL_CLIENT_VERIFY
    + [core] workaround for AIX mmap define
    + [mod_accesslog] flush access logs every 4 seconds
    + [mod_cgi] fix bug to properly exec interpreter
    + [mod_fastcgi] fix return when streaming min buffer

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 12 Aug 2017 17:19:07 +0000

lighttpd (1.4.46~snap-20170613-130731-gd15ddc-0.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Remove watch file and upstream gpg key 

 -- Stefan Bühler <stbuehler@web.de>  Sat, 29 Jul 2017 13:55:11 +0200

lighttpd (1.4.46~snap-20170613-130731-gd15ddc-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gd15ddc
    + [core] allow earlier plugin init for SSL/TLS
    + [mod_openssl] adjust use of ssl.ca-dn-file
    + [core] fix compiler warnings on Mac OS X
    + [core] server.socket-perms to set perms on unix (fixes #656)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Thu, 15 Jun 2017 07:58:13 +0000

lighttpd (1.4.46~snap-20170521-045244-gfb87ae-0.3) unstable; urgency=medium

  * Non-maintainer upload.
  * package mod_openssl, mod_vhostdb, mod_vhostdb_ldap, mod_vhostdb_mysql

 -- Stefan Bühler <stbuehler@web.de>  Thu, 08 Jun 2017 16:28:55 +0200

lighttpd (1.4.46~snap-20170521-045244-gfb87ae-0.2) unstable; urgency=medium

  * Non-maintainer upload.
  * add libmariadbclient-dev-compat as alternative due to broken mysql in
    stretch

 -- Stefan Bühler <stbuehler@web.de>  Sun, 21 May 2017 15:24:14 +0200

lighttpd (1.4.46~snap-20170521-045244-gfb87ae-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gfb87ae
    + [mod_extforward] quiet clang compiler warning
    + [mod_dirlisting] sort "../" to top of names
    + [mod_openssl] safer_X509_NAME_oneline() (fixes #2693)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 21 May 2017 04:53:26 +0000

lighttpd (1.4.46~snap-20170517-045635-g21081c-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g21081c
    + [mod_openssl] ignore client verification error if not enforced
    + [mod_openssl] fix compile with openssl 1.1.0

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 17 May 2017 04:57:20 +0000

lighttpd (1.4.46~snap-20170516-040605-g69aeaf-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g69aeaf
    + [mod_proxy] fix typo identified by coverity

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Tue, 16 May 2017 04:06:44 +0000

lighttpd (1.4.46~snap-20170516-033645-g039960-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g039960
    + [core] permit strings,ints,arrays in config array
    + [core] calloc plugin_config for consistent init
    + [mod_proxy] simple host/url mapping in headers (fixes #152)
    + [mod_uploadprogress] handle query str progress ID (fixes #2808)
    + [mod_fastcgi] consolidate backend read code
    + [mod_proxy,mod_scgi] fix truncated error trace
    + [core] skip socket shutdown() if con->fd negative
    + [core] act as transparent proxy after con Upgrade
    + [core] remove redundant resets of fde_ndx
    + [core] configparser: fix resource handling in error cases (fixes #2809)
    + [core] fix crash for invalid syntax in config file (fixes #2810)
    + [core] prep mod transitions to transparent proxy
    + [mod_proxy] basic support for Upgrade: websocket (fixes #2811)
    + [mod_extforward] compile on OSX
    + [core] set server.max-keep-alive-requests = 100 (fixes #2205)
    + [core] perf: skip redundant strlen() if len known
    + [core] optional condition in config "else" clause (fixes #1268)
    + [mod_cgi] basic support for Upgrade: websocket
    + [core] buffer to disk streaming to slow backends
    + [core] silence compiler warnings if !HAVE_FORK
    + [build] -Werror if --enable-extra-warnings=error
    + [build] autotools use AC_PROG_CC_STDC macro
    + [mod_openssl] ssl.ca-crl-file for CRL (fixes #2319)
    + [mod_openssl] ssl.ca-dn-file (fixes #2694)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Tue, 16 May 2017 03:37:33 +0000

lighttpd (1.4.46~snap-20170426-192152-gb23065-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gb23065
    + [mod_accesslog] flag high precision ts for %T (fixes #2807)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 26 Apr 2017 19:22:38 +0000

lighttpd (1.4.46~snap-20170426-045201-g45bb2c-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g45bb2c
    + [core] omit default port from normalized host str
    + [core] fix build issue without ipv6 support
    + [core] permit strings and integers in config array

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 26 Apr 2017 04:52:43 +0000

lighttpd (1.4.46~snap-20170425-051727-g440b37-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g440b37
    + [core] inline simple buffer is empty checks
    + [core] buffer_substr_replace()
    + [core] sys-strings.h abstraction for strings.h
    + [mod_proxy] fix backslash escaping

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Tue, 25 Apr 2017 05:18:12 +0000

lighttpd (1.4.46~snap-20170415-215628-g8641d1-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g8641d1
    + [core] no SOCK_CLOEXEC on Linux kernel < 2.6.27

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 15 Apr 2017 21:57:11 +0000

lighttpd (1.4.46~snap-20170415-165637-g9e46b8-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g9e46b8
    + [core] extend mimetype search w/o leading '.'

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 15 Apr 2017 16:57:19 +0000

lighttpd (1.4.46~snap-20170415-075716-ga434a3-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot ga434a3
    + [core] perf: stat_cache_mimetype_by_ext()
    + [core] inet_ntop_cache now 4-element cache
    + [mod_openssl] free local_send_buffer at exit

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 15 Apr 2017 07:58:01 +0000

lighttpd (1.4.46~snap-20170411-222856-g8e97c8-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g8e97c8
    + [core] fix stat_cache initialization error

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Tue, 11 Apr 2017 22:29:41 +0000

lighttpd (1.4.46~snap-20170409-170718-gbd0b25-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gbd0b25
    + [mod_extforward] fix typos in Forwarded handling

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 09 Apr 2017 17:08:08 +0000

lighttpd (1.4.46~snap-20170407-065756-g78cc72-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g78cc72
    + [mod_proxy] set Content-Length, if available
    + [mod_proxy] set X-Forwarded-Host (fixes #418)
    + [core] remove redundant Content-Length digit check
    + [core] remove some unused header includes
    + [core] use con->dst_addr_buf instead of ip recalc
    + [core] include "fdevent.h" where needed
    + [core] make stat_cache private to stat_cache.c
    + [core] collect ioctl FIONREAD code
    + [core] include <netdb.h> where needed
    + [core] report file path when mkstemp() fails (fixes #2802)
    + [core] export http_request_host_policy() for reuse
    + [mod_extforward] simplify header search
    + [mod_extforward] consolidate ipstr_to_sockaddr()
    + [mod_extforward] upd scheme after ipstr validated
    + [mod_extforward] rearrange code; prep Forwarded
    + [mod_extforward] support Forwarded HTTP Extension (#2703)
    + [mod_proxy] support Forwarded HTTP Extension (fixes #2703)
    + [core] inet_pton(), inet_ntop() on (sock_addr *)
    + [core] save connection-level proto in con->proto
    + [mod_extforward] support HAProxy "PROXY" protocol (fixes #2804)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 07 Apr 2017 06:58:45 +0000

lighttpd (1.4.46~snap-20170323-053645-g367e62-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g367e62
    + [core] server.syslog-facility (use -1 for unset) (#2800)
    + [core] allow overriding prior config values (fixes #2799)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Thu, 23 Mar 2017 05:37:31 +0000

lighttpd (1.4.46~snap-20170320-040701-ga85614-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot ga85614
    + [core] remove unused member con->in_joblist
    + [mod_proxy] remove use of con->got_response
    + [core] consolidate dynamic handler response parse
    + [core] remove now-unused buffer_search_string_len
    + [mod_cgi] eliminate warning when compiled -Os
    + [mod_scgi] do not reconnect after connect succeeds
    + [tests] reduce time waiting for backends to start
    + [core] server.syslog-facility (fixes #2800)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 20 Mar 2017 04:07:46 +0000

lighttpd (1.4.46~snap-20170313-234135-g1485cb-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g1485cb
    + [core] fix crash if invalid config file (fixes #2798)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 13 Mar 2017 23:42:16 +0000

lighttpd (1.4.46~snap-20170313-181636-g46ff97-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g46ff97
    + [mod_authn_gssapi] needs -lcom_err under cygwin
    + [mod_cgi,fastcgi,scgi,proxy] fix streaming response (fixes #2796)
    + [mod_auth] Digest nonce on system with time <=1978
    + [doc] simple-vhost.debug takes an integer value (fixes #2797)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 13 Mar 2017 18:17:21 +0000

lighttpd (1.4.46~snap-20170308-170134-gbd77ab-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gbd77ab
    + [core] default server.max-fds=4096 if unspecified (#2789)
    + update .gitignore, add .gitattributes
    + [core] reduce con allocation for small max_conns
    + [config] more specific checks for array lists

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 08 Mar 2017 17:02:22 +0000

lighttpd (1.4.46~snap-20170227-172658-g8ddb72-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g8ddb72
    + [mod_cgi] cgi.local-redir = [enable|disable] (#2108, #2793)
    + [core] $REQUEST_HEADER[...] subsumes other config (#1556)
    + [mod_usertrack] usertrack.cookie-attrs config opt (fixes #2795)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 27 Feb 2017 17:27:48 +0000

lighttpd (1.4.46~snap-20170226-160122-gd56957-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gd56957
    + [mod_vhostdb_ldap] fix inverted logic (coverity)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 26 Feb 2017 16:02:07 +0000

lighttpd (1.4.46~snap-20170226-093546-gab0777-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gab0777
    + [TLS] mark code that uses -lcrypto but not -lssl
    + remove redundant calls to end-of-request hooks
    + [mod_mysql_vhost] remove dev debug code
    + [core] con interface for read/write; isolate SSL
    + [core] new plugin hooks to help isolate SSL
    + [mod_openssl] new module (preliminary layout)
    + [core] move network_open_file_chunk() to chunk.c
    + [mod_openssl] move openssl code into mod_openssl
    + [mod_openssl] move openssl config into mod_openssl
    + [core] move connection_read_cq() to connections.c
    + [mod_geoip] call from handle_request_env hook
    + [build] only mod_openssl depends on -lssl
    + [mod_auth] enable optional authz if extern authn (fixes #2481)
    + [mod_openssl] allow ssl.verifyclient on url paths (fixes #2245)
    + [core] do not emit req/response hdrs w/ blank val
    + [mod_setenv] directives to overwrite/remove hdrs (fixes #650, fixes #2295)
    + [mod_secdownload] new directives modify hash path (fixes #646, fixes #1904)
    + [core] move con throttling to connections-glue.c
    + [core] support Expect: 100-continue with HTTP/1.1 (fixes #377, #1017, #1953, #2438)
    + [mod_openssl] use TLS SNI to set host-based certs
    + [mod_ssi] send #exec cmd="..." output to temp file
    + [mod_scgi] tests/mod-scgi.t unit tests
    + [mod_auth] support LDAP groups for HTTP auth (fixes #1817)
    + [core] use getaddrinfo,inet_pton vs gethostbyname (fixes #2783)
    + [mod_auth] LDAP escape username in DN and filters
    + mod_vhostdb* (dbi,mysql,pgsql,ldap) (fixes #485, fixes #1936, fixes #2297)
    + [mod_auth] have LDAP template replace '?'
    + apply debian/patches/spelling.patch
    + [core] permit connection-level state in modules
    + [TLS] include <openssl/opensslv.h> in rand.c
    + [core] config match w/ arbitrary HTTP request hdrs (fixes #1556)
    + [mod_flv_streaming] add end pos param (fixes #1887)
    + [core] X-LIGHTTPD-KBytes-per-second from backends (fixes #954)
    + [core] improve accuracy of bandwidth write limits
    + [core] quicker graceful shutdown
    + [tests] remove unused file depending on CGI.pm
    + [doc] doc/initscripts.txt (fixes #2782)
    + [core] check issetugid() early in main()
    + [core] combine duplicated getrlimit, network_init
    + [core] move interval timer near worker event loop
    + [core] initialize globals at top of main()
    + [core] graceful restart with SIGUSR1 (fixes #2785)
    + [mod_authn_mysql] fix minor memleak at shutdown
    + [mod_rrdtool] no error if loaded but no config
    + [doc] SIGUSR1 doc and lighttpd-angel SIGUSR1
    + [mime.conf] add text/markdown to utf-8 list, regenerate mime.conf
    + [mod_cgi] RFC3875 CGI local-redir strict adherence (#2108)
    + [mod_cgi] do not send "Status" back to client
    + [core] add label for 308 Permanent Redirect
    + [mod_openssl] inherit ssl.* from global scope
    + [core] handle if backend sends Transfer-Encoding (#2786)
    + [core] use kqueue in level-triggered mode (fixes #2788)
    + [mod_fastcgi,mod_scgi] backend spawn EINTR retry (#2788)
    + [core] config opt to intercept dynamic handler err (fixes #974)
    + [core] set default server_tag in server.c
    + [core] include lighttpd vers in server started msg
    + [core] move version.h logic into server.c
    + [core] issue trace if max-fds too large (fixes #2789)
    + [mod_fastcgi,mod_scgi] consistent waitpid handling (fixes #2791)
    + [mod_cgi] fix CGI local-redir w/ url.rewrite-once (fixes #2793)
    + [mod_scgi] fix unused_procs bidirectional-links
    + [mod_scgi] fix potential repeated use of proc->id
    + [mod_fastcgi,mod_scgi] consolidate backend process accounting (#2788)
    + [mod_cgi] status 200 OK if no hdrs (deprecated) (#2786)
    + [core] fix regex condition subst w/ mod_extforward (fixes #2794)
    + [tests] correct skip count for mod-scgi.t

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 26 Feb 2017 09:36:32 +0000

lighttpd (1.4.46~snap-20170114-113657-gb0d63e-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gb0d63e
    + - next is 1.4.46

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 14 Jan 2017 11:37:31 +0000

lighttpd (1.4.45~snap-20170114-050715-gf9b391-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gf9b391
    + [mod_cgi] check cgi fd for num bytes ready to read

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 14 Jan 2017 05:08:01 +0000

lighttpd (1.4.45~snap-20170111-002651-g83b2b7-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g83b2b7
    + [mod_cgi] skip local-redir handling if to self (fixes #2779, #2108)
    + [mod_webdav] fix crash when plugin_ctx cleaned up (fixes #2780)
    + [mod_fastcgi] detect child exit, restart proactively
    + [mod_scgi] detect child exit, restart proactively
    + [TLS] ssl.read-ahead = "disable" for low mem (fixes #2778)
    + [doc] NEWS
    + [tests] update test skip count for !fcgi-responder
    + [tests] FCGI_Finish() final request before exit
    + [tests] give time for periodic jobs to detect exit

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 11 Jan 2017 00:27:45 +0000

lighttpd (1.4.45~snap-20161224-104222-g656f9e-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g656f9e
    + - next is 1.4.45

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 24 Dec 2016 10:43:00 +0000

lighttpd (1.4.44-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot 1.4.44

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 24 Dec 2016 08:50:48 +0000

lighttpd (1.4.44~snap-20161224-053213-g367bc5-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g367bc5
    + [doc] NEWS

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 24 Dec 2016 05:32:57 +0000

lighttpd (1.4.44~snap-20161224-005224-g38d00a-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g38d00a
    + [TLS] openssl 1.1.0 makes SSL_OP_NO_SSLv2 no-op

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 24 Dec 2016 00:53:11 +0000

lighttpd (1.4.44~snap-20161223-072715-ga09d80-0.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Merge packaging changes from debian

 -- Stefan Bühler <stbuehler@web.de>  Fri, 23 Dec 2016 11:36:38 +0100

lighttpd (1.4.44~snap-20161223-072715-ga09d80-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot ga09d80
    + [mod_dirlisting] render dirlisting as HTML (fixes #2767)
    + [mod_proxy] replace HTTP Host sent to backend (fixes #2770)
    + [mod_ssi] basic recursive SSI include virtual (fixes #536)
    + [mod_ssi] implement, ignore <!--#comment ... -->
    + [core] consolidate duplicated read-to-close code
    + [core] fix segfault when parsing a bad config file
    + [core] support Transfer-Encoding: chunked req body (fixes #2156)
    + [autobuild] set NO_RDYNAMIC=yes for midipix
    + [mod_proxy] proxy.balance = "sticky" option (fixes #2117)
    + [mod_secdownload] warn if SHA used w/o SSL crypto
    + [build] compile fixes for AIX
    + [build] check for pipe2() at configure time
    + [mod_evhost] fix an incorrect error trace
    + [tests] mark tests/docroot/www/*.pl scripts a+x
    + [mod_proxy] proxy.replace-http-host enable/disable
    + [mod_cgi] fall back to pipe() if pipe2() fails
    + fix SCons fullstatic build with glibc pthreads

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 23 Dec 2016 07:28:02 +0000

lighttpd (1.4.44~snap-20161209-075200-gda86a5-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gda86a5
    + [mod_authn_gssapi] fix missing error ret, coverity
    + [core] rename li_rand() to li_rand_pseudo_bytes()
    + remove #include "stream.h" where not used
    + [mod_cml] include lua headers before base.h
    + [core] combine duplicated connection reset code
    + [mod_ssi] produce content in subrequest hook
    + [core] remove srv->entropy[]
    + [core] defer li_rand_init() until first use
    + [core] permit connection-level state in modules

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 09 Dec 2016 07:52:46 +0000

lighttpd (1.4.44~snap-20161205-080717-g1584c5-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g1584c5
    + load mod_auth & mod_authn_file in sample/test.conf
    + comment out auth.backend.ldap.* in tests/*.conf
    + [mod_fastcgi,mod_scgi] warn if invalid "bin-path"
    + RAND_pseudo_bytes() is deprecated in openssl 1.1.0
    + openssl 1.1.0 init and cleanup
    + [mod_cgi] remove direct calls to network_backend*
    + [build] build network_*.c into lighttpd executable
    + suggest inclusion of mod_geoip... before mod_ssi.
    + set systemd settings similar to lighttpd2
    + [doc] remove reference to Linux rt-signals

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 05 Dec 2016 08:08:04 +0000

lighttpd (1.4.44~snap-20161128-225220-gd5f64c-0.3) unstable; urgency=medium

  * Non-maintainer upload.
  * Add "Multi-Arch: foreign" for lighttpd-doc (fixes lintian warning)
  * Pass {CPPFLAGS,CFLAGS,LDFLAGS}_FOR_BUILD buildflags (fixes hardening
    warnings)

 -- Stefan Bühler <stbuehler@web.de>  Sun, 04 Dec 2016 12:10:48 +0100

lighttpd (1.4.44~snap-20161128-225220-gd5f64c-0.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Pull some packaging changes from debian

 -- Stefan Bühler <stbuehler@web.de>  Sun, 04 Dec 2016 11:00:54 +0100

lighttpd (1.4.44~snap-20161128-225220-gd5f64c-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gd5f64c
    + [mod_auth] compile fix for Mac OS X XCode (fixes #2772)
    + [mod_authn_gssapi] better resource cleanup
    + [core] compile fix for Mac OS X 10.6 (old) (fixes #2773)
    + fix race in dynamic handler configs (reentrancy) (fixes #2774)
    + [mod_authn_mysql] close mysql_conn in cleanup
    + [mod_webdav] compile fix when locking not enabled

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 28 Nov 2016 22:53:17 +0000

lighttpd (1.4.44~snap-20161124-144822-g999252-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g999252
    + [config] warn if mod_authn_ldap,mysql not listed
    + [mod_magnet] fix magnet_cgi_set() set of env vars (fixes #2763)
    + [mod_cgi] FreeBSD 9.3/MacOSX does not have pipe2() (fixes #2765)
    + [mod_extforward] fix crash on invalid IP (fixes #2766)
    + [mod_fastcgi] fix segfault if all backends down (fixes #2768)
    + [mod_cgi] fix out of sockets error for POST to CGI (fixes #2771)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Thu, 24 Nov 2016 14:49:18 +0000

lighttpd (1.4.44~snap-20161102-083210-gd35279-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gd35279
    + [mod_authn_gssapi] fix memory leak

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 02 Nov 2016 08:32:48 +0000

lighttpd (1.4.44~snap-20161102-072225-g5e3653-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g5e3653
    + [mod_scgi] fix segfault (fixes #2762)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 02 Nov 2016 07:23:12 +0000

lighttpd (1.4.44~snap-20161031-140714-g33e350-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g33e350
    + - next is 1.4.44

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 31 Oct 2016 14:07:52 +0000

lighttpd (1.4.43~snap-20161031-131444-g7349aa-0.2) unstable; urgency=low

  * Non-maintainer upload.
  * Package rebuild

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 31 Oct 2016 13:24:36 +0000

lighttpd (1.4.43~snap-20161031-131444-g7349aa-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g7349aa
    + [autotools] fix configure.ac for opensuse 13.2
    + [build] fix warning for (potentially) unused func

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 31 Oct 2016 13:15:21 +0000

lighttpd (1.4.43~snap-20161030-211415-g3d04bc-0.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Package new modules

 -- Stefan Bühler <stbuehler@web.de>  Mon, 31 Oct 2016 11:38:33 +0100

lighttpd (1.4.43~snap-20161030-211415-g3d04bc-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g3d04bc
    + [mod_cgi] FreeBSD 9.3 does not have pipe2()
    + [build] move some build scripts to scripts/

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 30 Oct 2016 21:15:00 +0000

lighttpd (1.4.43~snap-20161029-183030-gca074b-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gca074b
    + [scons] workaround FreeBSD11 fullstatic link error
    + [scons] only apply FreeBSD11 workaround on FreeBSD

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 29 Oct 2016 18:31:21 +0000

lighttpd (1.4.43~snap-20161029-161254-g8e6786-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g8e6786
    + build: use CC_FOR_BUILD for lemon when cross-compiling
    + [lemon] standalone; remove #include "first.h"
    + [mod_dirlisting] config header and readme files
    + [config] warn if mod_authn_ldap,mysql not listed
    + fix FastCGI, SCGI, proxy reconnect on failure
    + [core] network_open_file_chunk() temp file opt
    + [mod_rewrite] add more info in error log msg
    + [core] fix fd leak when using libev (fixes #2761)
    + [core] fix potential streaming tempfile corruption (fixes #2760)
    + minor: coverity comments
    + [mod_scgi] fix prefix matching to always match url
    + move script to doc/scripts/ax_prog_cc_for_build.m4
    + [autobuild] adjust Makefile.am for FreeBSD
    + [core] check fcntl O_APPEND succeeds w/ mkstemp()
    + [doc] NEWS
    + [autobuild] add lemon.c to src/Makefile.am
    + [autobuild] build fix for lemon.c
    + [autobuild] put ax_prog_cc_for_build.m4 in top directory

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 29 Oct 2016 16:13:37 +0000

lighttpd (1.4.43~snap-20161020-183404-g75040e-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g75040e
    + [mod_expire] expire by mimetype (fixes #423)
    + [mod_evhost] partial matching patterns (fixes #1194)
    + [mod_evhost] mod-evhost.t tests (#1194)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Thu, 20 Oct 2016 18:34:46 +0000

lighttpd (1.4.43~snap-20161019-204905-g1f3ad4-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g1f3ad4
    + [mod_accesslog] %{ratio}n logs compression ratio (fixes #2133)
    + [mod_deflate] skip deflate if loadavg too high (fixes #1505)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 19 Oct 2016 20:49:45 +0000

lighttpd (1.4.43~snap-20161018-220312-gb11d05-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gb11d05
    + [TLS] remote IP conditions are valid for TLS SNI (fixes #2272)
    + [doc] lighttpd-angel.8 (fixes #2254)
    + [cmake] build fcgi-auth, fcgi-responder for tests

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Tue, 18 Oct 2016 22:03:54 +0000

lighttpd (1.4.43~snap-20161018-113304-gbad5f6-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gbad5f6
    + [core] use paccept() on NetBSD (replace accept4())

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Tue, 18 Oct 2016 11:33:47 +0000

lighttpd (1.4.43~snap-20161017-194316-gab07c7-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gab07c7
    + [mod_deflate] ignore '*' in deflate.mimetypes
    + minor: make packdist.sh more convenient for me
    + [autobuild] omit module stubs when missing deps
    + [autobuild] rm module stub code for missing deps
    + [TLS] openssl 1.1.0 hides struct bignum_st
    + [autobuild] move http_cgi_ssl_env() for Mac OS X (fixes #2757)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 17 Oct 2016 19:44:01 +0000

lighttpd (1.4.43~snap-20161016-130709-g5feb26-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g5feb26
    + - next is 1.4.43
    + [autobuild] remove mod_authn_gssapi dep on resolv

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 16 Oct 2016 13:07:45 +0000

lighttpd (1.4.42~snap-20161016-092305-g032772-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g032772
    + [doc] NEWS
    + quiet coverity warning
    + add random() to list of rand() fallbacks

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 16 Oct 2016 09:23:41 +0000

lighttpd (1.4.42~snap-20161016-064815-ge82b98-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot ge82b98
    + [core] rand.[ch] to use better RNGs when available
    + [mod_cgi] fix pipe_cloexec() when no O_CLOEXEC
    + ignore return value from fcntl() FD_CLOEXEC
    + silence warnings from clang ccc-analyzer
    + fix SCons build
    + build w/o compiler warnings if no zlib or bz2lib
    + parallelize dist package build (packdist.sh)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 16 Oct 2016 06:49:00 +0000

lighttpd (1.4.42~snap-20161011-093741-gb8b38f-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gb8b38f
    + [TLS] set SSL_CLIENT_M_SERIAL w/ client cert SN (fixes #2268)
    + [TLS] set SSL_CLIENT_VERIFY w/ client cert (#1288, #2693)
    + [TLS] set SSL_PROTOCOL, SSL_CIPHER* (fixes #2511)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Tue, 11 Oct 2016 09:38:25 +0000

lighttpd (1.4.42~snap-20161011-012658-gd3ac56-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gd3ac56
    + [TLS] replace env entries in https_add_ssl_entries

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Tue, 11 Oct 2016 01:27:36 +0000

lighttpd (1.4.42~snap-20161010-175742-g7fa5bf-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g7fa5bf
    + silence warnings from clang ccc-analyzer
    + consistent, shared code to create CGI env

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 10 Oct 2016 17:58:25 +0000

lighttpd (1.4.42~snap-20161009-133159-gce2452-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gce2452
    + [core] restrict where config "else" clauses occur (#1268)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 09 Oct 2016 13:32:33 +0000

lighttpd (1.4.42~snap-20161009-123235-g79fb75-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g79fb75
    + [core] optional condition in config "else" clause (fixes #1268)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 09 Oct 2016 12:33:17 +0000

lighttpd (1.4.42~snap-20161006-042718-g1018ff-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g1018ff
    + [core] make server.max-request-size scopeable (#1901)
    + [core] server.max-request-field-size (fixes #2130)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Thu, 06 Oct 2016 04:28:04 +0000

lighttpd (1.4.42~snap-20161005-101735-g145ddc-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g145ddc
    + quiet coverity warning
    + [mod_mysql_vhost] support multiple '?' replacement (fixes #2163)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 05 Oct 2016 10:18:22 +0000

lighttpd (1.4.42~snap-20161004-091739-g28d121-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g28d121
    + [mod_auth] refactor LDAP code into smaller funcs
    + [mod_auth] HTTP Basic auth backends also do authz (#1817)
    + [mod_auth] ldap filter subst user for multiple '$' (fixes #1508)
    + [mod_auth] permit specifying ldap DN; skip search (fixes #1248)
    + [autobuild] update module/feature report
    + [cmake] build mod_authn_gssapi if WITH_KRB5
    + DragonFlyBSD defines __DragonFly__ (#2746)
    + [mod_auth] fix printing of IP in error trace

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Tue, 04 Oct 2016 09:18:22 +0000

lighttpd (1.4.42~snap-20160925-084809-ga66194-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot ga66194
    + [mod_scgi] add uwsgi protocol support

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 25 Sep 2016 08:48:53 +0000

lighttpd (1.4.42~snap-20160924-063736-g93afda-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g93afda
    + performance: use Linux extended syscalls and flags

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 24 Sep 2016 06:38:18 +0000

lighttpd (1.4.42~snap-20160923-133202-g8047c2-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g8047c2
    + fix errors detected by Coverity Scan

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 23 Sep 2016 13:32:38 +0000

lighttpd (1.4.42~snap-20160923-083201-gd2b7c7-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gd2b7c7
    + remove excess initializers (fix compiler warnings)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 23 Sep 2016 08:32:34 +0000

lighttpd (1.4.42~snap-20160923-063200-ged3065-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot ged3065
    + [CMake] fix clang -Wcast-align warnings in lemon.c

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 23 Sep 2016 06:32:34 +0000

lighttpd (1.4.42~snap-20160923-052206-g177f55-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g177f55
    + [mod_geoip] add to default build (fixes #2705, fixes #2101, fixes #2092, fixes #2025, fixes #1962, fixes #1938)
    + [mod_fastcgi] Authorizer support with Responder (fixes #321, fixes #322)
    + [tests] test coverage for issues (#321, #322)
    + dynamic handlers store debug flag in handler_ctx
    + [mod_fastcgi] allow authorizer, responder for same path/ext (#321)
    + backport mod_deflate to lighttpd 1.4 (fixes #1824, fixes #2753)
    + [autobuild] test_configfile might need vector.c (fixes #2752)
    + remove unused sys-mmap.h from stat_cache.c
    + [mod_deflate] fix longjmp clobber compiler warning
    + remove unused array type TYPE_COUNT data_count
    + [mod_auth] structured data, register auth schemes
    + [mod_auth] mod_authn_gssapi Kerberos auth backend (fixes #1899)
    + silence warnings from clang ccc-analyzer
    + [autobuild] skip two new tests if no fcgi-auth
    + [SCons] define with_krb5 for SCons build
    + [SCons] fix syntax error in SConstruct
    + [SCons] define with_geoip for SCons build

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 23 Sep 2016 05:22:50 +0000

lighttpd (1.4.42~snap-20160912-071245-gab935a-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gab935a
    + [mod_auth] http_auth_md5_hex2bin()
    + [mod_auth] remove empty mod_auth.h
    + [mod_auth] mod_authn_mysql.c MySQL auth backend (fixes #752, fixes #1845)
    + [mod_cgi] permit CGI exec of unreadable files (fixes #2374)
    + [mod_uploadprogress] add to default build

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 12 Sep 2016 07:13:29 +0000

lighttpd (1.4.42~snap-20160825-061658-gede5ea-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gede5ea
    + fix mis-cast in unused code

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Thu, 25 Aug 2016 06:17:36 +0000

lighttpd (1.4.42~snap-20160824-195726-g40f16d-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g40f16d
    + [core] fix crash if ready events on abandoned fd (fixes #2748)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 24 Aug 2016 19:58:08 +0000

lighttpd (1.4.42~snap-20160822-032155-g3c24ec-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g3c24ec
    + [mod_auth] terminate salt for CRYPT-MD5-NTLM

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 22 Aug 2016 03:22:34 +0000

lighttpd (1.4.42~snap-20160821-060205-g65efc2-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g65efc2
    + [mod_auth] support CRYPT-MD5-NTLM algorithm (fixes #1743)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 21 Aug 2016 06:02:42 +0000

lighttpd (1.4.42~snap-20160821-004656-g9e7083-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g9e7083
    + [mod_auth] include base.h for USE_OPENSSL def

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 21 Aug 2016 00:47:30 +0000

lighttpd (1.4.42~snap-20160820-182728-g6ec66c-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g6ec66c
    + [mod_auth] refactor out auth backend code
    + [mod_auth] refactor out auth backend code
    + [mod_auth] refactor out auth backend code
    + [mod_auth] extensible interface for auth backends
    + [mod_auth] extensible interface for auth backends
    + [core] better DragonFlyBSD support (fixes #2746)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 20 Aug 2016 18:28:08 +0000

lighttpd (1.4.42~snap-20160813-181720-gcb2495-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gcb2495
    + [mod_auth] Digest auth fails after rewrite (fixes #2745)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 13 Aug 2016 18:18:00 +0000

lighttpd (1.4.42~snap-20160811-043753-gcfa3d2-0.2) unstable; urgency=low

  * Non-maintainer upload.
  * Package rebuild

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 12 Aug 2016 09:08:46 +0000

lighttpd (1.4.42~snap-20160811-043753-gcfa3d2-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gcfa3d2
    + [mod_dirlisting] dirlist does not handle POST
    + [mod_dirlisting] js column sort for dirlist table (fixes #613, fixes #2315)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Thu, 11 Aug 2016 04:38:34 +0000

lighttpd (1.4.42~snap-20160807-172711-g27f85d-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g27f85d
    + [core] do not enter handler twice after read body
    + [core] proxy,scgi omit shutdown() to backend (fixes #2743)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 07 Aug 2016 17:27:46 +0000

lighttpd (1.4.42~snap-20160807-045304-g666b9f-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g666b9f
    + [core] check if client half-closed TCP if POLLHUP (#2743)
    + [core] enforce wait for POLLWR after EINPROGRESS (fixes #2744)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 07 Aug 2016 04:53:46 +0000

lighttpd (1.4.42~snap-20160806-063250-g1de652-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g1de652
    + [mod_proxy,mod_scgi] shutdown remote only if local (#2743)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 06 Aug 2016 06:33:33 +0000

lighttpd (1.4.42~snap-20160803-043756-g156bea-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g156bea
    + [TLS] SSL_shutdown() only if handshake finished

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 03 Aug 2016 04:38:35 +0000

lighttpd (1.4.42~snap-20160731-141317-gccd817-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gccd817
    + - next is 1.4.42

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 31 Jul 2016 14:13:49 +0000

lighttpd (1.4.41-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot 1.4.41

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 31 Jul 2016 13:55:19 +0000

lighttpd (1.4.41~snap-20160731-124726-g29fa80-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g29fa80
    + [cmake] always define _GNU_SOURCE
    + [cmake] enable warnings for GCC and Clang
    + [cmake] set cmake_minimum_required to 2.8.2
    + [doc] NEWS

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 31 Jul 2016 12:48:08 +0000

lighttpd (1.4.41~snap-20160730-095955-g5863d0-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g5863d0
    + [core] try AF_INET after AF_INET6 if use-ipv6
    + [core] fix result copy from getaddrinfo()
    + [core] set chunkqueue tempdirs at startup
    + [core] check if EAI_ADDRFAMILY is defined
    + [core] set chunkqueue tempdirs at startup /var/tmp
    + [security] ensure gid != 0 if server.username set (fixes #2725)
    + [security] disable stat_cache if !follow-symlink (fixes #2724)
    + [core] fix buffer_copy_string_hex() assert (fixes #2742)
    + fix buffer.c comments to match encoded_chars_*
    + [security] encode quoting chars in HTML and XML

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 30 Jul 2016 10:00:41 +0000

lighttpd (1.4.41~snap-20160727-101125-ga95aaa-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot ga95aaa
    + [TLS] better handling of SSL_ERROR_WANT_READ/WRITE
    + [TLS] read all available records from SSL_read()

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 27 Jul 2016 10:11:57 +0000

lighttpd (1.4.41~snap-20160726-205653-g565dec-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g565dec
    + [core] consolidate duplicated response_end code

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Tue, 26 Jul 2016 20:57:31 +0000

lighttpd (1.4.41~snap-20160725-052204-g38139f-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g38139f
    + [core] permit IPv6 address scope identifier

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 25 Jul 2016 05:22:42 +0000

lighttpd (1.4.41~snap-20160723-062154-g9af58a-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g9af58a
    + [mod_status] show keep-alive status w/ text output (fixes #2740)
    + do not set REDIRECT_URI in mod_magnet, mod_rewrite (#2738)
    + revert 1.4.40 swap of REQUEST_URI, REDIRECT_URI (fixes #2738)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 23 Jul 2016 06:22:28 +0000

lighttpd (1.4.41~snap-20160721-055654-gcd3355-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gcd3355
    + [core] $HTTP["remoteip"] must handle IPv6 w/o []

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Thu, 21 Jul 2016 05:57:33 +0000

lighttpd (1.4.41~snap-20160720-095649-gcb468d-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gcb468d
    + [core] stay in CON_STATE_CLOSE until done with req

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 20 Jul 2016 09:57:21 +0000

lighttpd (1.4.41~snap-20160720-005648-g78c79e-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g78c79e
    + [build_cmake] clock_gettime() -lrt w/ glibc < 2.17 (fixes #2737)
    + [core] avoid spurious trace and error abort

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 20 Jul 2016 00:57:21 +0000

lighttpd (1.4.41~snap-20160719-054154-g779c13-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g779c13
    + [autobuild] clock_gettime() -lrt with glibc < 2.17
    + minor: spelling changes in some comments/messages
    + [security] do not emit HTTP_PROXY to CGI env

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Tue, 19 Jul 2016 05:42:26 +0000

lighttpd (1.4.41~snap-20160718-101750-ga3ec90-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot ga3ec90
    + [doc] update memcache references to memcached
    + [mod_ssi] fix #config sizefmt="bytes"
    + fix some warnings reported by cppcheck
    + workaround clang compiler warning
    + [autobuild] move inet_pton detection later
    + [core] #include <sys/filio.h> for FIONREAD (fixes #2726)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 18 Jul 2016 10:18:30 +0000

lighttpd (1.4.41~snap-20160717-041235-g00cc4d-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g00cc4d
    + remove long-deprecated, non-functional config opts
    + [config] inherit server.use-ipv6 and server.set-v6only (fixes #678)
    + [build] allow AUTHOR, KEYID overrides to packdist
    + [mod_auth] fix Digest auth to be better than Basic (fixes #1844)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 17 Jul 2016 04:13:13 +0000

lighttpd (1.4.41~snap-20160716-130723-g8f8fa6-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g8f8fa6
    + - next is 1.4.41

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 16 Jul 2016 13:07:55 +0000

lighttpd (1.4.40-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot 1.4.40

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 16 Jul 2016 11:45:52 +0000

lighttpd (1.4.40~snap-20160716-034256-g268c55-0.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Add libmemcached-dev build dependency, fix configure flags
  * Bump standard to 3.9.8

 -- Stefan Bühler <buehler@cert.uni-stuttgart.de>  Sat, 16 Jul 2016 12:38:30 +0200

lighttpd (1.4.40~snap-20160716-034256-g268c55-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g268c55
    + update lighttpd -h
    + [doc] add self to AUTHORS (discussed w/ stbuehler)
    + [doc] NEWS

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 16 Jul 2016 03:43:37 +0000

lighttpd (1.4.40~snap-20160714-212725-g8861c2-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g8861c2
    + [tests] remove some tests duplicated in mod-cgi.t
    + [mod_cgi] handle local redirect response (fixes #2108)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Thu, 14 Jul 2016 21:28:00 +0000

lighttpd (1.4.40~snap-20160713-203200-g86cd13-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g86cd13
    + [core] fdevent_libev: workaround compiler warning

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 13 Jul 2016 20:32:35 +0000

lighttpd (1.4.40~snap-20160713-183230-gbd8b58-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gbd8b58
    + [mod_access] new directive url.access-allow (fixes #1421)
    + [core] fdevent_libev: update use of ev_timer

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 13 Jul 2016 18:33:03 +0000

lighttpd (1.4.40~snap-20160713-034224-g5e76b2-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g5e76b2
    + fix gcc 6.1.1 compiler warn misleading-indentation
    + [mod_accesslog] %a %A %C %D %k %{}t %{}T (fixes #1145, fixes #1415, fixes #2081)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 13 Jul 2016 03:43:06 +0000

lighttpd (1.4.40~snap-20160710-234704-gc1af14-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gc1af14
    + [mod_fastcgi,mod_scgi] check for spawning on same unix socket (#319)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 10 Jul 2016 23:47:36 +0000

lighttpd (1.4.40~snap-20160710-192208-gb67ff2-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gb67ff2
    + [core] make server.max-request-size scopeable (fixes #1901)
    + [mod_fastcgi,mod_scgi] check for spawning on same unix socket (#319)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 10 Jul 2016 19:22:47 +0000

lighttpd (1.4.40~snap-20160708-205729-g3d98e0-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g3d98e0
    + [TLS] fix return value checks during cert init
    + [core] fix server.max-request-size to be precise (fixes #2131)
    + [mod_webdav] fix proppatch mem leak, other fixes (#fixes 1334, #fixes 2000)
    + [autobuild] CMake check for struct tm tm_gmtoff (fixes #2014)
    + [core] remove assert in fdevent_unregister()
    + [mod_uploadprogress] fix mem leak (#1858)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 08 Jul 2016 20:58:06 +0000

lighttpd (1.4.40~snap-20160702-192232-g340e9a-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g340e9a
    + [cygwin] minor: fix compiler warning
    + [tests] remove dependency on CGI.pm
    + [core] fix s6_addr type-punned compiler warning

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 02 Jul 2016 19:23:10 +0000

lighttpd (1.4.40~snap-20160702-175540-gc916b2-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gc916b2
    + [build] add $(ATTR_LIB) to liblightcomp_la_LIBADD

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 02 Jul 2016 17:56:15 +0000

lighttpd (1.4.40~snap-20160630-220731-g5ce7b2-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g5ce7b2
    + [core] disable Nagle algorithm (TCP_NODELAY)
    + [core] add declarations to fdevent.h (#2373)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Thu, 30 Jun 2016 22:08:10 +0000

lighttpd (1.4.40~snap-20160629-123200-geefb94-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot geefb94
    + graceful shutdown without unnecessary 1 sec delay
    + fix error handling for portability (NetBSD)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 29 Jun 2016 12:32:39 +0000

lighttpd (1.4.40~snap-20160626-053148-gfd6a66-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gfd6a66
    + use con->conf.server_tag in modules
    + [mod_webdav] remove excess SQL param to UNLOCK
    + [doc] NEWS

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 26 Jun 2016 05:32:26 +0000

lighttpd (1.4.40~snap-20160623-212647-g8dcbd6-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g8dcbd6
    + [cygwin] fix mod_proxy and mod_fastcgi ioctl use

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Thu, 23 Jun 2016 21:27:20 +0000

lighttpd (1.4.40~snap-20160623-084215-g72b133-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g72b133
    + chunkqueue_append_chunkqueue()
    + fix errors detected by Coverity Scan

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Thu, 23 Jun 2016 08:42:57 +0000

lighttpd (1.4.40~snap-20160621-093804-g16a3f3-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g16a3f3
    + fix errors detected by Coverity Scan
    + [build] update Makefile.am EXTRA_DIST w/ new files

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Tue, 21 Jun 2016 09:38:44 +0000

lighttpd (1.4.40~snap-20160620-034851-gb14e1f-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gb14e1f
    + [core] http_response_send_file() shared code (#2017)
    + [mod_fastcgi] use http_response_xsendfile() (fixes #799, fixes #851, fixes #2017, fixes #2076)
    + [mod_scgi] X-Sendfile feature (fixes #2253)
    + [mod_cgi] X-Sendfile feature (fixes #2313)
    + [mod_cgi,mod_fastcgi,mod_scgi] X-Sendfile features
    + [mod_webdav] lseek,read if fs can not mmap (#2666, fixes #962)
    + [mod_compress] use mmap and trap SIGBUS (#2666, fixes #1879)
    + fallback to lseek()/read() if mmap() fails (#fixes 2666)
    + [mod_auth] skip blank lines and comment lines (fixes #2327)
    + [core] fallback to write if sendfile not supported (fixes #471, #987)
    + minor: add missing #include <errno.h>
    + [core] preserve PATH_INFO case on case-insensitive fs (fixes #406)
    + [doc] add mimetype.use-xattr to create-mime.conf.pl
    + [doc] NEWS
    + [mod_ssi, mod_cml] set DOCUMENT_ROOT to basedir (fixes #2383)
    + [core] cmd line opt to shutdown after idle time limit (fixes #2696)
    + [network] separate addr trans from socket creation
    + [core] lighttpd -1 handles single request on stdin socket (fixes #1584)
    + lighttpd run modes for idle timeout, one-shot
    + [mod_fastcgi,mod_scgi] IPv6 support (fixes #2372)
    + [mod_status] add JSON output option (fixed #2432)
    + [mod_webdav] map COPY/MOVE Destination to aliases (fixes #1787)
    + [mod_webdav] improve PROPFIND,PROPPATCH (#1818, #1953)
    + [mod_webdav] improve PROPFIND,PROPPATCH; map COPY/MOVE Destination
    + [doc] NEWS
    + reset response headers, write_queue for error docs
    + fix typo in new cgi.x-sendfile directives
    + clean up oneshot_fd resource upon startup error
    + minor: fix compiler warning for extra ';'
    + build with libressl
    + [core] fix IPv6 address + port parsing (#2204)
    + static build instructions using SCons or make
    + [core] fix config merge of array lists
    + [core] simplify config merge of array lists
    + [core] add default modules while processing server config
    + [mod_auth] preserve WWW-Authenticate for error docs (fixes #2730)
    + check close() return code after writing to file
    + [doc] NEWS
    + adjustments for openssl 1.1.0 pre-release
    + [config] support include file glob (fixes #1221)
    + [mod_evasive] 302 redirect option if limit reached (fixes #2199)
    + [build] enhancements for cross-compiling (fixes #2276)
    + [mod_accesslog] report aborted con state with %X (fixes #1890)
    + [mod_ssi] fix SSI statement parser
    + [mod_ssi] include relative to alias,userdir (fixes #222)
    + [mod_ssi] add PCRE_* options to constrain regex
    + [mod_ssi] more flexible quoting (fixes #1768)
    + [core] wrap IPv6 literal in "[]" in redirect URL
    + [mod_ssi] fix parse of tag across buf boundary (fixes #2732)
    + [mod_cgi,mod_scgi] X-Sendfile sets file_started (fixes #2733)
    + [mod_fastcgi] no chunked response w/ X-Sendfile (fixes #2733)
    + [config] opts for http header parsing strictness (fixes #551, fixes #1086, fixes #1184, fixes #2143, #2258, #2281, fixes #946, fixes #1330, fixes #602, #1016)
    + [config] normalize IP strings in lighttpd.conf
    + [build_cmake] use MODULE on Mac OS X (fixes #1761)
    + minor: quiet some compiler warnings
    + use buffer_string_set_length() to truncate strings
    + use buffer_string_set_length() to truncate strings
    + [config] server.bsd-accept-filter option
    + [mod_webdav] create file w/ LOCK request if ENOENT
    + [doc] NEWS
    + [mod_webdav] getetag and lockdiscovery live props
    + [mod_webdav] create file w/ LOCK request if ENOENT
    + [core] buffer large responses to tempfiles (fixes #758, fixes #760, fixes #933, fixes #1387, #1283, fixes #2083)
    + [core] stream response to client (#949)
    + [TLS] release openssl buffers as used (fixes #1265, fixes #1283, #881)
    + [config] config options to stream request/response (#949, #376)
    + [core] option to stream request body to backend (fixes #376)
    + separate routines for reading output from backends
    + [core] option to stream response body to client (fixes #949, #760, #1283, #1387)
    + drain backend socket/pipe bufs upon FDEVENT_HUP
    + http_response_backend_error()
    + remove excess calls to joblist_append()
    + defer choosing "Transfer-Encoding: chunked"
    + asynchronous, bidirectional streaming options

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Tue, 21 Jun 2016 06:05:54 +0000

lighttpd (1.4.40~snap-20160425-060225-g8f255d-0.2) unstable; urgency=low

  * Non-maintainer upload.
  * Package rebuild

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 25 Apr 2016 06:03:14 +0000

lighttpd (1.4.40~snap-20160425-060225-g8f255d-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g8f255d
    + untangle overly complex control flow logic
    + defer reading request body until handle subrequest (fixes #2541)
    + mv funcs from connections.c to connections-glue.c
    + defer reading request body until handle subrequest
    + always poll for client POLLHUP/POLLERR events (fixes #399)
    + remove handle_joblist hook
    + handlers can read response before sending req body (fixes #131, #2566)
    + [mod_cgi] asynchronous send of request body to CGI
    + improve dynamic handler control flow logic
    + [doc] add mimetype.use-xattr to conf.d/mime.conf
    + [doc] enhance error msg for backend server config
    + [doc] add ref to RFC 7232 for conditional requests
    + make (compile and link) cleanly under cygwin
    + [core] compile with upcoming openssl 1.1.0 release (fixes #2727)
    + fix some warnings reported by static analysis tool
    + [core] set REDIRECT_STATUS to error_handler_saved_status (fixes #1828)
    + remove unused con->error_handler member
    + [core] server.error-handler new directive for error pages (fixes #2702)
    + set REDIRECT_URI in mod_rewrite, mod_magnet
    + [doc] add server.error-handler
    + server.error-handler new directive for error pages
    + [core] support IPv6 in $HTTP["remote-ip"] CIDR cond match (fixes #2706)
    + [doc] NEWS

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 25 Apr 2016 06:03:02 +0000

lighttpd (1.4.40~snap-20160418-115115-g77bd45-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g77bd45
    + [mod_ssi] config ssi.conditional-requests
    + [mod_ssi] config ssi.exec (fixes #2051)
    + [mod_redirect,mod-rewrite] short-circuit if blank replacement (fixes #2085)
    + [mod_indexfile] save physical path to env (fixes #448, #892)
    + [core] open fd when appending file to cq (fixes #2655)
    + [config] server.listen-backlog option (fixes #1825, #2116)
    + [core] retry tempdirs on partial write, ENOSPC (fixes #2588)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Mon, 18 Apr 2016 11:51:52 +0000

lighttpd (1.4.40~snap-20160413-190802-gbb9531-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot gbb9531
    + [mod_cgi] always set QUERY_STRING (fixes #1339)
    + [mod_auth] send charset="UTF-8" in WWW-Authenticate (fixes #1468)
    + [mod_magnet] rename var for clarity (fixes #1483)
    + [mod_extforward] reset cond_cache for scheme (fixes #1499)
    + [mod_webdav] readdir POSIX compat (fixes #1826)
    + [mod_expire] reset caching response headers for error docs (fixes #1919)
    + [mod_status] page refresh option (fixes #2170)
    + [mod_status] table w/ count of con states (fixes #2427)
    + [mod_dirlisting] class for dir <tr> (fixes #2304)
    + skip spawning backends for preflight tests (#2642)
    + [core] define __STDC_WANT_LIB_EXT1__ (fixes #2722)
    + [core] setrlimit max-fds <= rlim_max for non-root (fixes #2723)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 13 Apr 2016 19:08:39 +0000

lighttpd (1.4.40~snap-20160408-164712-g97556d-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot g97556d
    + [mod_fastcgi,mod_scgi] check for spawning on same unix socket (fixes #319)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 08 Apr 2016 16:47:49 +0000

lighttpd (1.4.40~snap-20160401-174722-r3138-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3138
    + use li_[iu]tostrn() instead of li_[iu]tostr()
    + [stream] fstat() after open() to obtain file size
    + [core] clean up srv before exiting for lighttpd -[vVh]

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 01 Apr 2016 17:47:52 +0000

lighttpd (1.4.40~snap-20160401-170227-r3135-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3135
    + [mod_webdav] allow Depth: Infinity lock on file (fixes #2296)
    + [mod_status] use snprintf() instead of sprintf()
    + pass buf size to li_tohex()

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 01 Apr 2016 17:03:03 +0000

lighttpd (1.4.40~snap-20160326-140830-r3132-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3132
    + [configparser] fix small leak on config failure

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 26 Mar 2016 14:09:03 +0000

lighttpd (1.4.40~snap-20160326-135719-r3131-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3131
    + [core] lighttpd -tt performs preflight startup checks (fixes #411)
    + [stat] mimetype.xattr-name global config option (fixes #2631)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 26 Mar 2016 13:57:49 +0000

lighttpd (1.4.40~snap-20160326-131817-r3129-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3129
    + [core] fixed the loading for default modules if they are specified explicitly

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 26 Mar 2016 13:18:46 +0000

lighttpd (1.4.40~snap-20160326-130645-r3128-0.2) unstable; urgency=low

  * Non-maintainer upload.
  * Package rebuild

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 26 Mar 2016 13:07:34 +0000

lighttpd (1.4.40~snap-20160326-130645-r3128-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3128
    + [mod_proxy] accept LF delimited headers, not just CRLF (fixes #2594)
    + [core] wait for grandchild to be ready when daemonizing (fixes #2712, thx pasdVn)
    + [core] respond 411 Length Required if request has Transfer-Encoding: chunked (fixes #631)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 26 Mar 2016 13:07:15 +0000

lighttpd (1.4.40~snap-20160326-113323-r3125-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3125
    + [config] warn if server.upload-dirs has non-existent dirs (fixes #2508)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 26 Mar 2016 11:33:54 +0000

lighttpd (1.4.40~snap-20160326-112223-r3124-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3124
    + add NEWS entry for previous commit
    + [mod_ssi] Add SSI vars SCRIPT_{URI,URL} and REQUEST_SCHEME (fixes #2721)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 26 Mar 2016 11:22:54 +0000

lighttpd (1.4.40~snap-20160326-110724-r3122-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3122
    + validate return values from strtol, strtoul (fixes #2564)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 26 Mar 2016 11:07:55 +0000

lighttpd (1.4.40~snap-20160326-105303-r3121-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3121
    + [http_auth/mod_fastcgi] check get_http_*_name() for NULL return (#2583)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 26 Mar 2016 10:53:40 +0000

lighttpd (1.4.40~snap-20160325-170735-r3120-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3120
    + [unittests] add test_buffer and test_base64 unit tests
    + [base64] fix another crash due to broken force_assert conditions
    + [buffer] refactor buffer_path_simplify (fixes #2560)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 25 Mar 2016 17:08:09 +0000

lighttpd (1.4.40~snap-20160323-214652-r3117-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3117
    + [base64] fix crash due to broken force_assert

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 23 Mar 2016 21:47:28 +0000

lighttpd (1.4.40~snap-20160319-153700-r3116-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3116
    + [mod_cgi] issue trace and exit if execve() fails (closes #2302)
    + [configparser] don't continue after parse error (fixes #2717)
    + [core] never evaluate else branches until the previous branches are aready (fixes #2598)
    + [core] fix conditional cache handling
    + [core] improve conditional enabling (thx Gwenlliana, #2598)
    + [buffer] use explicit integer promotion to make the code more readable
    + [config] extend duplicate-array-key error (fixes #2704)
    + [mod_compress] case-insensitive content-codings (fixes #2645)
    + [plugins] don't include dlfcn.h if not needed (fixes #2548)
    + [mod_fastcgi] 404 for X-Sendfile file not found (fixes #2474)
    + [mod_cgi] send 500 if CGI ends and there is no response (fixes #2542)
    + [mod_cgi] consolidate CGI cleanup code
    + [mod_cgi] simplify mod_cgi_handle_subrequest()
    + [mod_cgi] kill CGI if fail to write request body
    + [mod_proxy] use case-insensitive comparision to filter headers, send Connection: Close to backend (fixes #421)
    + [mod_dirlisting] dir-listing.hide-dotfiles = "enabled" by default (fixes #1081)
    + [mod_rewrite] fix return type of process_rewrite_rules
    + [mod_secdownload] fix buffer overflow in secdl_verify_mac (reported by Fortify Open Review Project)
    + [mod_fastcgi,mod_scgi] fix leaking file-descriptor when backend spawning failed (reported by Fortify Open Review Project)
    + [core] improve array API to prevent theoretical memory leaks
    + [core] rename variable in array.c
    + [core] refactor array search; raise array size limit to SSIZE_MAX
    + [core] fix memory leak in configparser_merge_data
    + [core] provide array_extract_element and use it
    + [core] configparser: error on duplicate keys in array merge (fixes #2685)
    + [core] more careful parse of $SERVER["socket"] config str (prepare #2204)
    + [core] accept $SERVER["socket"] without port, use server.port as fallback (fixes #2204)
    + [mod_magnet] define lua_pushglobaltable (for lua5.1) and use it (fixes #2719)
    + [ssl] support disabling ssl.verifyclient.activate in SNI callback (fixes #2531)
    + restart (some) syscalls after SIGCHLD interrupted them; should fix LDAP problems (fixes #2464)
    + [core] log remote address on request timeouts (fixes #652)
    + [autobuild] use AC_CANONICAL_HOST instead of AC_CANONICAL_TARGET (fixes #1866)
    + [core] fix request_start in keep-alive requests to mark time when received first byte (fixes #2412)
    + [core] truncate pidfile on exit (fixes #2695)
    + consistent inclusion of config.h at top of files (fixes #2073)
    + [autobuild] include first.h in make dist
    + [core] add generic vector implementation
    + [core] replace array weakref with vector

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 19 Mar 2016 15:46:01 +0000

lighttpd (1.4.40~snap-20160214-110800-r3078-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3078
    + [mod_cgi] edge case chdir "/" when docroot "/" (fixes #2460)
    + fix links to online docs in template config files

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 14 Feb 2016 11:08:29 +0000

lighttpd (1.4.40~snap-20160214-105244-r3076-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3076
    + [core] do not send SIGHUP to process group unless server.max-workers is used (fixes #2711)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 14 Feb 2016 10:53:21 +0000

lighttpd (1.4.40~snap-20160210-194258-r3075-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3075
    + [mod_cgi] use MAP_PRIVATE to mmap temporary file instead of MAP_SHARED (fixes #2715)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 10 Feb 2016 19:43:36 +0000

lighttpd (1.4.40~snap-20160130-151225-r3074-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3074
    + - next is 1.4.40
    + [mod_ssi] enhance support for ssi vars
    + add handling for lua 5.2 and 5.3 (fixes #2674)
    + use libmemcached instead of deprecated libmemcache
    + add force_assert for more allocation results
    + cleanup dead keyvalue code
    + [autobuild] fix lua configure error handling

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 30 Jan 2016 15:12:56 +0000

lighttpd (1.4.39~snap-20151219-084826-r3066-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3066
    + - next ist 1.4.39
    + [core] fix memset_s call (fixes #2698)
    + [chunk] fix use after free / double free (fixes #2700)
    + [scons] fix fullstatic build

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 19 Dec 2015 08:49:04 +0000

lighttpd (1.4.38~snap-20151204-205708-r3061-0.2) unstable; urgency=low

  * Non-maintainer upload.
  * Package rebuild

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 04 Dec 2015 21:02:33 +0000

lighttpd (1.4.38~snap-20151204-205708-r3061-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3061
    + [tests] do not half-close socket before having received the response (fixes #2688)
    + [mod_fastcgi/mod_scgi] zero sockaddr structs before use (fixes #2691)
    + [network] add darwin-sendfile backend (fixes #2687)
    + [core] show correct crypt support result (fixes #2690)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 04 Dec 2015 20:57:40 +0000

lighttpd (1.4.38~snap-20151204-202227-r3057-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3057
    + mod-auth.t: no crypt md5 for darwin
    + [tests] test apr-md5 in mod-auth.t

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 04 Dec 2015 20:23:00 +0000

lighttpd (1.4.38~snap-20151122-224726-r3055-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3055
    + [autobuild] fix missing header in tar ball

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 22 Nov 2015 22:47:56 +0000

lighttpd (1.4.38~snap-20151122-223256-r3054-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3054
    + [core] refactor base64 functions into separate file
    + [mod_secdownload] add required algorithm option; old behaviour available as "md5", new options "hmac-sha1" and "hmac-sha256"

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 22 Nov 2015 22:33:35 +0000

lighttpd (1.4.38~snap-20151107-151244-r3052-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3052
    + [core] add '~' to safe characters in ENCODING_REL_URI/ENCODING_REL_URI_PART encoding
    + [core] encode path with ENCODING_REL_URI in redirect to directory (fixes #2661, thx gstrauss)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 07 Nov 2015 15:13:16 +0000

lighttpd (1.4.38~snap-20151107-130314-r3050-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3050
    + [config] check config option scope; warn if server option is given in conditional
    + [core] revert increase of temp file size back to 1MB, provide a configure option "server.upload-temp-file-size" instead (fixes #2680)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 07 Nov 2015 13:03:51 +0000

lighttpd (1.4.38~snap-20151027-210305-r3048-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3048
    + [mod_secdownload] use a hopefully constant time comparison to check hash (fixes #2679)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Tue, 27 Oct 2015 21:03:43 +0000

lighttpd (1.4.38~snap-20151016-200757-r3047-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3047
    + add force_assert for many allocations and function results

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Fri, 16 Oct 2015 20:08:32 +0000

lighttpd (1.4.38~snap-20151013-202644-r3046-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3046
    + [core] don't buffer request bodies smaller than 64k on disk

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Tue, 13 Oct 2015 20:27:22 +0000

lighttpd (1.4.38~snap-20150926-114550-r3045-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3045
    + [core] check configparserAlloc() result with force_assert
    + [mod_auth] implement and use safe_memclear, using memset_s or explicit_bzero if available

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 26 Sep 2015 11:46:29 +0000

lighttpd (1.4.38~snap-20150924-061213-r3043-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3043
    + [core] allocate at least 4k buffer for incoming data
    + [core] fix search for header end if split across chunks (fixes #2670)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Thu, 24 Sep 2015 06:12:54 +0000

lighttpd (1.4.38~snap-20150916-002640-r3039-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3039
    + [stat-cache] fix handling of collisions, might have returned wrong data (fixes #2669)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Wed, 16 Sep 2015 00:27:12 +0000

lighttpd (1.4.38~snap-20150915-121829-r3038-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot r3038
    + -next is 1.4.38
    + fix packdist.sh output links

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Tue, 15 Sep 2015 12:19:07 +0000

lighttpd (1.4.37-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot 1.4.37
    + - next is 1.4.37
    + [mod_proxy] remove debug log line from error log (fixes #2659)
    + [mod_dirlisting] fix dir-listing.set-footer not showing
    + fix out-of-filedescriptors when uploading "large" files (fixes #2660, thx rmilecki)
    + increase upload temporary chunk file size from 1MB to 16MB
    + fix undefined integer shift
    + rewrite network (write) backends
    + [cmake] lowercase commands, whitespace cleanup, remove clutter in else(...), endif(...), endforeach(...)
    + [cmake] cleanup cache variables if features get deactivated
    + fix some unchecked return value warnings
    + maintain cq->bytes_in in chunk API; keep bytes_out/bytes_in synced
    + [cmake] don't put date into config.h (not used anyway), only unset local vars for disabled features instead of clearing cache
    + [cmake] fix FreeBSD linker bug
    + [tests] search for perl in PATH instead of /usr/bin; whitespace + test config cleanups
    + [kqueue] fix kevent call
    + [tests] fix warning about newline in filename
    + [autoconf] define HAVE_CRYPT when crypt() is present
    + [bsd xattr] fix compile break with BSD extended attributes in stat_cache
    + [mod_dirlisting] remove sys/syslimits.h; base.h already includes limits.h
    + small README for FreeBSD build setup
    + [build] put --as-needed into linker flags instead of cflags
    + [mod_cgi] rewrite mmap and generic (post body) send error handling
    + [mmap] fix mmap alignment
    + [plugins] when modules are linked statically still only load the modules given in the config
    + [scons] various improvements
    + [mmap] handle SIGBUS in network; those get triggered if the file gets smaller during reading
    + [scons] fix crypt() detection, other improvements
    + [scons] fix build
    + fix some warnings found by coverity ("leak" in setup phase, not catching too long unix socket paths in mod_proxy)
    + packdist.sh: use fakeroot for make dist to have root owned files in tar

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 30 Aug 2015 12:13:18 +0000

lighttpd (1.4.36-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot 1.4.36
    + [configfile] fix reading uninitialized variable (found by Willian B.)
    + [dist] add dist-xz, remove dist-bzip2, allow ~rc appendix in packdist.sh

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sun, 26 Jul 2015 10:37:09 +0000

lighttpd (1.4.36~rc1-0.2) unstable; urgency=low

  * Non-maintainer upload.
  * Package rebuild

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 11 Jul 2015 13:27:22 +0000

lighttpd (1.4.36~rc1-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * new snapshot 1.4.36~rc1
    + - next is 1.4.36
    + use keep-alive timeout while waiting for HTTP headers; use always the read timeout while waiting for the HTTP body
    + fix bad shift in conditional netmask ".../0" handling
    + add more mime types and a script to generate mime.conf (fxies #2579)
    + fix typo in NEWS entry for #2579
    + add support for (Free)BSD extended attributes
    + [build] use fortify flags with "extra-warnings"
    + [mod_dirlisting,mod_redirect,mod_rewrite] abort config parsing if pcre-compile fails or isn't available
    + [ssl] disable SSL3.0 by default
    + Fixed typo found by openSUSE user (boo# 907709)
    + add NEWS entry for previous commit
    + [network] fix compile break in calculation of sockaddr_un size if SUN_LEN is not defined (fixes #2609)
    + [connections] fix bug in connection state handling
    + print backtrace in assert logging with libunwind
    + fix buffer, chunk and http_chunk API
    + Remove chunkqueue_get_{append,prepend}* API
    + Remove buffer_prepare_copy() and buffer_prepare_append()
    + [tests] improve valgrind and strace TRACEME, disable condition logging in normal configs
    + Use buffer API to read and modify "used" member
    + rename buffer_append_long_hex to buffer_append_uint_hex
    + [buffer] constify some parameters
    + [bitset] unused -> remove
    + remove unused stuff from server.h
    + [crc32] fix method signature (const pointer)
    + [tests] fix undefined index warning in sendfile.php
    + [mod_auth] use crypt_r instead of crypt if available
    + fix error message for T_CONFIG_ARRAY config values if an entry value is not a string
    + fix segfaults in many plugins if they failed configuration
    + escape all strings for logging (fixes #2646 log file injection, reported by Jaanus Kääp)
    + add some until now missing files to dist tarball
    + minor spelling fixes
    + fix hex escape in accesslog (fixes #2559)
    + show extforward re-run warning only with debug.log-request-handling (fixes #2561)
    + parse If-None-Match for ETag validation (fixes #2578)
    + check pointer before usage in new etag compare
    + fix memory leak in mod_status when no counters are set (found by coverity)
    + #ifdef all parts belonging to the connection-state debugging
    + [mod_magnet] fix segfault when accessing not existing lighty.req_env[] entry (found by coverity)
    + fix segfault when temp file for upload couldn't be created (found by coverity)
    + check fcgi_env_add return value (found by coverity)
    + mime.conf: add some new mime types, remove .dat, .sha1, .md5, update .vcf
    + [mod_proxy] add unix domain socket support (fixes #2653)

 -- Jenkins (autobuilder) <jenkins@lighttpd.net>  Sat, 11 Jul 2015 13:14:12 +0000

lighttpd (1.4.35-4) unstable; urgency=medium

  * Disable SSLv3 by default (closes: #765702).

 -- Michael Gilbert <mgilbert@debian.org>  Sun, 02 Nov 2014 02:49:09 +0000

lighttpd (1.4.35-3) unstable; urgency=medium

  * Support building with dpkg-buildpackage -g.
  * Drop libmemcache-dev build-dependency (closes: #748809).

 -- Michael Gilbert <mgilbert@debian.org>  Mon, 18 Aug 2014 03:42:29 +0000

lighttpd (1.4.35-2) unstable; urgency=medium

  * Fix a spelling error.
  * Add a lintian override.
  * Make VCS field canonical.
  * Add myself to the uploaders.
  * Use dh-autoreconf (closes: #726394, #731104).
  * Disable indeterminant test on kfreebsd (closes: #731074).

 -- Michael Gilbert <mgilbert@debian.org>  Sat, 05 Apr 2014 18:12:03 +0000

lighttpd (1.4.35-1) unstable; urgency=low

  * New upstream version (fixes CVE-2014-2323, CVE-2014-2324)
    + Delete patches: cve-2013-4508.patch, cve-2013-4559.patch,
      cve-2013-4560.patch. Those are all cumulative included since
      lighttpd 1.4.34
  * Acknowledge NMUs by the security team
  * Make the init script wait until lighttpd really terminates.
  * Change the default document root /var/www/html (Closes: #730379), add a
    Lintian override for it
  * Bump the debhelper dependency to >= 9.20130624 to ensure dh_installinit is
    recent enough for systemd (Closes: #713860)
  * Reorder LSB init dependencies, add $local_fs to it
  * Add hardening flags to lighttpd. Thanks to Michael Gilbert
    for providing a patch (Closes: #741497)
  * Remove W3C logo from index.html to avoid inclusion of images hosted
    elsewhere
  * Push standards version to 3.9.5 (no changes needed).

 -- Arno Töll <arno@debian.org>  Sat, 22 Mar 2014 03:06:59 -1100

lighttpd (1.4.33-1+nmu2) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fix regression caused by the fix for cve-2013-4508 (closes: #729480).

 -- Michael Gilbert <mgilbert@debian.org>  Sat, 16 Nov 2013 22:29:07 +0000

lighttpd (1.4.33-1+nmu1) unstable; urgency=high

  * Non-maintainer upload by the Security Team (closes: #729453).
  * Fix cve-2013-4508: ssl cipher suites issue.
  * Fix cve-2013-4559: setuid privilege escalation issue.
  * Fix cve-2013-4560: use-after-free in fam.

 -- Michael Gilbert <mgilbert@debian.org>  Wed, 13 Nov 2013 02:19:47 +0000

lighttpd (1.4.33-1) unstable; urgency=low

  * Drop the connection-dos.patch - merged upstream.
  * Fix "mod_extforward missing configuration file": ship requested
    configuration file (Closes: #697304)
  * Remove access.conf, an obsolete conffiles as we should have done since
    2010 (Closes: #703215)
  * Push debhelper's compat mode to 9, the use of maintscript helper requires
    8.1 so we had to push the debhelper b-d anyway.
  * Fix "config.guess/config.sub out of date for arm64" by adding the patch
    provided by Colin Watson. Thanks (Closes: #726394).
  * Fix "[PATCH] use dh-systemd for proper systemd-related maintscripts" to
    add systemd support. Thanks to Michael Stapelberg (Closes: #713859)

 -- Arno Töll <arno@debian.org>  Tue, 15 Oct 2013 21:24:49 +0200

lighttpd (1.4.31-4) unstable; urgency=high

  * CVE-2013-1427: Switch the socket path for PHP when using FastCGI. /tmp is
    world-writable which may cause security implications if an attacker
    manages to control /tmp/php.socket before the web server (re-)starts.
  * Switch VCS to git
  * Push standards version (no changes)

 -- Arno Töll <arno@debian.org>  Thu, 14 Mar 2013 02:20:07 +0100

lighttpd (1.4.31-3) unstable; urgency=high

  * Fix "configuration files refer to wrong path for documentation"
    by merging a patch supplied by  Denis Laxalde <denis@laxalde.org>
    (Closes: #676641)
  * CVE-2012-5533: Fix Denial Of Service attacks against Lighttpd by sending
    faulty Connection headers

 -- Arno Töll <arno@debian.org>  Wed, 21 Nov 2012 14:42:32 +0100

lighttpd (1.4.31-1) unstable; urgency=low

  * New upstream release
  * Be more careful when removing dangling symlinks, as introduced in 1.4.30-1.
    Under some configurations the postrm script could fail previously.
  * Change the use-ipv6.pl script to read the default listening port as a
    command line argument, fall back to the old default behavior otherwise
    (Closes: #632723, #642604). Thanks to Sebastian Pipping to accidentally
    give a hint how to fix this old problem by driving by.
  * Push standards version to 3.9.3.1 - no further changes
  * Fix "[lighttpd] "ldap" lowercase in extended description" by fixing the
    typo (Closes: #670206)
  * Update my maintainer address

 -- Arno Töll <arno@debian.org>  Fri, 01 Jun 2012 23:46:05 +0200

lighttpd (1.4.30-1) unstable; urgency=medium

  * New upstream release
    + Fix integer overflow (CVE-2011-4362) (Closes: #652726)
    + Fix attack vector as disclosed by the SSL BEAST attack (related:
      CVE-2011-3389). Note: If you are upgrading from an older version you need
      to change your configuration to mitigate effects of the attack. See the
      corresponding NEWS file for details.
    + Count SSL renegotiations to prevent client renegotiations
  * Urgency set to medium due to security updates. 
  * Adapt to dpkg 1.16.1 API changes regarding build flags. This enables
    hardening build flags. This means, lighttpd is now being built with
    -fstack-protector and other security related build flags.
  * Add dpkg-dev (>= 1.16.1~) to build-depends to make sure our buildflags are
    properly supported. That's guaranteed for Testing, but might be helpful to
    know for backporters.
  * Fix "Doesn't remove /etc/lighttpd on purge" by removing dangling symlinks
    /only/. This does not entirely fix the problem of the maintainer, but we can
    not simply remove all files in /etc/lighttpd as other packages or the user
    himself might have left configuration files back (Closes: #642494)
  * Fix "please include systemd service file" Support systemd as alternative to
    sysvinit, ship systemd and tempfiles.d configuration files. Thanks to
    Michael Stapelberg for providing the required files (Closes: #652442)

 -- Arno Töll <debian@toell.net>  Tue, 20 Dec 2011 11:36:09 +0100

lighttpd (1.4.29-1) unstable; urgency=low

  * New upstream release
  * Fix "lighty-enable-mod should return non-zero on fail" Update script to
    leave with appropriate exit status (Closes: #629638)
  * Remove the following patches:
    + silence-errors.diff - applied upstream
    + patches/ssl-fix.patch - applied upstream
  * Add `debian/source/options' to make dpkg-source ignore glitches done by
    upstream's Makefile in `src/mod_ssi_exprparser.c' and `src/configparser.c'
  * Run maintainer scripts with `set -e'


 -- Arno Töll <debian@toell.net>  Mon, 04 Jul 2011 17:30:11 +0200

lighttpd (1.4.28-5) unstable; urgency=low

  * Build with sbuilder to avoid linking to non-existed packages.

 -- Krzysztof Krzyżaniak (eloy) <eloy@debian.org>  Tue, 26 Apr 2011 15:05:06 +0200

lighttpd (1.4.28-4) unstable; urgency=low

  [ Krzysztof Krzyżaniak (eloy) ]
  * Add  Arno Töll to Uploaders
  
  [ Arno Töll ] 
  * Fix "leaves dangling alternatives on upgrade" add preinst script which
    removes the dangling symlink (Closes: #614716)
  * Fix "/etc/lighttpd/conf-available/15-fastcgi-php.conf: fastcgi-php
    file missing a required directive" add a dependency based recursive module
    enable system in lighty-enable-mod (Closes: #600050)
  * Fix "binNMU for openssl 1.0.0 broke SSL support" backport fix from upstream
    to avoid name clashes between OpenSSL and Lighty's MD5 implementation
    (Closes: #622733)

 -- Arno Töll <debian@toell.net>  Sat, 09 Apr 2011 13:22:45 -0400

lighttpd (1.4.28-3) unstable; urgency=low

  [ Krzysztof Krzyżaniak (eloy) ]
  * Updated debian/control and debian/copyright files
  * fix for debhelper-overrides-need-versioned-build-depends (>= 7.0.50~)
  * debian/compat: increased to 8
  
  [ Olaf van der Spek]
  * Don't fail install if server fails to start (closes: #383425)
  * Fix index-file.names typo (closes: #609890)

 -- Olaf van der Spek <olafvdspek@gmail.com>  Mon, 03 Jan 2011 22:56:38 +0100

lighttpd (1.4.28-2) unstable; urgency=medium

  [ Olaf van der Spek ]
  * Use relative instead of absolute links for conf-enabled (closes: #541645)
  * Fix /doc/ for IPv6 (closes: #512583)
  
  [ Krzysztof Krzyżaniak (eloy) ]
  * Added patch patches/silence-errors.diff (closes: #601177)

 -- Krzysztof Krzyżaniak (eloy) <eloy@debian.org>  Fri, 12 Nov 2010 12:08:48 +0100

lighttpd (1.4.28-1) unstable; urgency=low

  [ Olaf van der Spek ]
  * New upstream release (closes: 521235, 572031, 564556)
  * Add check_syntax() from Ubuntu (closes: 589200)

 -- Thijs Kinkhorst <thijs@debian.org>  Mon, 30 Aug 2010 20:53:18 +0200

lighttpd (1.4.26-3) unstable; urgency=low

  * Ack for NMU, fix for SSL incompatibility (closes: #572031)

 -- Krzysztof Krzyżaniak (eloy) <eloy@debian.org>  Thu, 03 Jun 2010 21:22:24 +0200

lighttpd (1.4.26-2) unstable; urgency=low

  [ Krzysztof Krzyżaniak (eloy) ]
  * Switch to dpkg-source 3.0 (quilt) format
  * debian/control:
   + removed Franz Pletz from Uploaders, he's MIA (closes: #579366)
   + change dependency from libmysqlclient15-dev to more general 
     libmysqlclient-dev

  [ Olaf van der Spek ]
  * take conf dir as an optional parameter (closes: 489854)
  * don't try to make /var/run/lighttpd when invoked with status 
    (closes: 538662)
  * split FastCGI PHP conf from FastCGI conf (closes: 515699)
  * reduce max-procs from 2 to 1 (closes: 456200)
  * move debian doc handling into it's own file
  * set default vhost dir to /srv/<host>/htdocs (closes: 471054)
  * use delaycompress instead of copytruncate for logrotate (closes: 563626)
  * don't wait for old process to stop before starting new one for reload 
    (closes: 504315)
  * use reopen-logs for logrotate (closes: 504319)
  * add no-www.conf (for use with evhost and simple-vhost, closes: 471055)
  * move evhost conf into it's own file


 -- Krzysztof Krzyżaniak (eloy) <eloy@debian.org>  Tue, 01 Jun 2010 17:08:42 +0200

lighttpd (1.4.26-1) unstable; urgency=low

  * New upstream release (closes: #568735)
  * Use provided patch from  Andres Rodriguez <andreserl@ubuntu.com>
    to implement status action in init.d script (closes: #539955)

 -- Krzysztof Krzyżaniak (eloy) <eloy@debian.org>  Tue, 09 Feb 2010 18:02:13 +0100

lighttpd (1.4.25-2) unstable; urgency=low

  * Change behaviour of use-ipv6.pl script (closes: #560837)

 -- Krzysztof Krzyżaniak (eloy) <eloy@debian.org>  Mon, 30 Nov 2009 14:23:03 +0100

lighttpd (1.4.25-1) unstable; urgency=low

  * New upstream release (closes: #558045)
  * debian/watch: updated
  * debian/control: Section field changed to web
  
 -- Krzysztof Krzyżaniak (eloy) <eloy@debian.org>  Mon, 30 Nov 2009 14:03:15 +0100

lighttpd (1.4.24-1) unstable; urgency=low

  * New upstream release (closes: #530892) (closes: #538135) (closes: #482601)
    (closes: #541428)
  * debian/control:
   + Standards-Version: 3.8.3
  * debian/init.d renamed to debian/lighttpd.init
  * Added $syslog to LSB header in init script (closes: #545576)
    (Jeremy Lal <kapouer@melix.org>)
  * debian/init.d: force-reload moved to reload section (closes: #538661)
    (Peter Eisentraut <petere@debian.org>)
  
 -- Krzysztof Krzyżaniak (eloy) <eloy@debian.org>  Fri, 30 Oct 2009 17:37:29 +0100

lighttpd (1.4.23-3) unstable; urgency=low

  * debian/rules: make sure that scripts have proper rights
   (closes: #536668), (closes: #536681), (closes: #536688) (closes: #536668)

 -- Krzysztof Krzyżaniak (eloy) <eloy@debian.org>  Mon, 13 Jul 2009 11:17:09 +0200

lighttpd (1.4.23-2) unstable; urgency=low

  * Add lighttpd.docs with README & NEWS file
  * New upstream closes wishlist bugs (closes: #535065) (closes: #515777)

 -- Krzysztof Krzyżaniak (eloy) <eloy@debian.org>  Fri, 10 Jul 2009 11:11:15 +0200

lighttpd (1.4.23-1) unstable; urgency=low

  * New upstream release
  * spawn-fcgi is now separate package, recommends it debian/control
  * Update Standards-Version to 3.8.2 without changes
  * Remove cdbs, patchutils from Build-Depends, debian/rules uses
    debhelper 7 scripts
  * lighttpd.logrotate apply patch (closes: #535523) 
    from Ubuntu (Daniel Hahler, https://launchpad.net/bugs/393792)
    
 -- Krzysztof Krzyżaniak (eloy) <eloy@debian.org>  Thu, 09 Jul 2009 11:24:16 +0200

lighttpd (1.4.22-1) unstable; urgency=low

  * New upstream release (closes: #520124) (closes: #516897) (closes: #441173)
  * debian/control: Update to Standards-Version 3.8.1 (no changes so far),
    debhelper dependency updated to 7, utfize my name, satisfy lintian
  * Remove all patches, all fixed upstream but rewrite_redirect_decode_url
    Do NOT use rewrite/redirect to protect specific urls.
  
 -- Krzysztof Krzyżaniak (eloy) <eloy@debian.org>  Wed, 18 Mar 2009 11:19:55 +0100

lighttpd (1.4.19-5) unstable; urgency=high

  * Remove the alias.url stanza from 10-cgi.conf (Closes: #499334).
  * Add patches for lighttpd security 2008-05 to 2008-07 (no CVE yet):
    + patches/lighttpd-1.4.x_request_header_memleak.patch
    + patches/lighttpd-1.4.x_rewrite_redirect_decode_url.patch
    + patches/lighttpd-1.4.x_userdir_lowercase.patch
  * Urgency set to high for security fix.

 -- Pierre Habouzit <madcoder@debian.org>  Sat, 27 Sep 2008 12:00:47 +0200

lighttpd (1.4.19-4) unstable; urgency=high

  * Make debian/use-ipv6.pl executable in debian/rules, thanks to Marco d'Itri
    for finding about this inexcusable mistake.

 -- Pierre Habouzit <madcoder@debian.org>  Mon, 12 May 2008 17:12:28 +0200

lighttpd (1.4.19-3) unstable; urgency=medium

  * Fix /var/cache/lighttpd/uploads permissions in postinst (Closes: 476870).
  * Update patches/ssl-connection-errors.patch using upstream r2144, thanks to
    upstream for noticing.
  * cherokee and lighttpd both provide spawn-fcgi, fix that using alternatives
    (Closes: 479501):
    + add spawn-fcgi.lighttpd.1 shamelessly stolen from cherokee packaging
      (thanks Gunnar).
    + install spawn-fcgi as spawn-fcgi.lighttpd.
    + install master alternatives on spawn-fcgi.lighttpd and
      spawn-fcgi.lighttd.1.
    + add Conflict against cherokee <= 0.6.1-1.
  * Quote "dangerous" bits of conf-available/10-cgi.conf (Closes: 479276).

 -- Pierre Habouzit <madcoder@debian.org>  Tue, 06 May 2008 20:01:37 +0200

lighttpd (1.4.19-2) unstable; urgency=low

  * Add patches/ssl-connection-errors.patch for CVE-2008-1531
    (Closes: 475438).
  * Test for /var/cache/lighttpd/compress in lighttpd.cron.daily to avoid
    spurious errors for uninstalled and not purged lighttpd's
    (Closes: 472175).

  * Add handling of /var/cache/lighttpd/uploads (Closes: 408521):
     + add it in lighttpd.dirs.
     + add it as a server.upload-dirs in lighttpd.conf.
     + purge it daily in lighttpd.cron.daily.

  * Fix typo in lighttpd.preinst causing failure to update 05-auth symlink
    properly (Closes: 472119).

  * init.d: stopping an already stopped lighttpd, or starting an already
    running one should not fail (Closes: 472122).

  * Use $HTTP["remoteip"] =~ "127.0.0.1" in configuration snipplets so that it
    works when ipv6 is enabled by default too (Closes: 473510).

  * Use perl to detect if the host has ipv6, and generate the server.use-ipv6
    snipplet on the fly instead of forcing it to true (Closes: 473053).

 -- Pierre Habouzit <madcoder@debian.org>  Sun, 13 Apr 2008 13:20:40 +0200

lighttpd (1.4.19-1~bpo40+1) etch-backports; urgency=low

  * Rebuild for etch-backports.

 -- Pierre Habouzit <madcoder@debian.org>  Thu, 20 Mar 2008 00:41:49 +0100

lighttpd (1.4.19-1) unstable; urgency=low

  * New upstream release.

  * debian/control:
     + add Build-Depends upon quilt, remove dpatch.
     + Bump Standards-Version to 3.7.3 (no changes required).
     + Move Homepage pseudo-headers as real headers.

  * debian/patches:
     + migrate to quilt.
     + remove 05_fdevent_fix.patch (merged upstream).
     + remove 06_mod_cgi_vuln_fix.patch (merged upstream).
     + refresh the rest of the series.

  * debian/lighty-enable-mod:
     + Reindent and remove trailing spaces.
     + don't fail to remove a module that is already removed.
       Patch from Michal Čihař (Closes: 448682).
     + Allow full stops in module names (Closes: 462199).

  * debian/lighttpd.conf:
     + enable ipv6 by default (Closes: 448054).
     + remove mod_status stanza, create conf-available/10-status.conf with it.

  * debian/lighttpd.cron.daily: new file, cleanup compressed cache.
    Thanks to Michal Čihař (Closes: 445224).

  * be sure mod_auth is loaded first (Closes: 419176):
     + add debian/lighttpd.preinst to rename 10-auth.conf into 05-auth.conf
       automagically (when it's a sane thing to do).
     + Document all that in NEWS.Debian.
     + debian/lighttpd.install: add 10-status.conf and 05-auth.conf.

  * debian/lighttpd.postinst:
     + chmod'ing /var/cache/lighttpd recursively is useless and too long. Just
       chmod the base directory, content is likely to be only created by
       lighty anyways. (Closes: 468297).

  * debian/init.d:
     + Add $remote_fs and $network (instead of networking) to
       Required-{Start,Stop}.
     + Add fam to Should-{Start,Stop} (Closes: 461180).

  * debian/lighttpd.links: add symlinks on lighty-* so that lighttpd-*
    commands exists as well (Closes: 435131).

 -- Pierre Habouzit <madcoder@debian.org>  Sun, 16 Mar 2008 12:01:41 +0100

lighttpd (1.4.18-4) unstable; urgency=high

  * The “I HATE DPATCH”-release.
  * Add patches for real as dpatch-edit-patch is stupid enough for not doing
    it by itself (Closes: 463368, 469307).

 -- Pierre Habouzit <madcoder@debian.org>  Tue, 11 Mar 2008 10:07:35 +0100

lighttpd (1.4.18-3) unstable; urgency=high

  * Force use of deprecated ldap interfaces (Closes: 463368),
    thanks to Dann Frazier (patches/ldap-deprecated.dpatch).
  * Add sample configuration for the mod_rrdtool (Closes: 462907).
  * add patches/06_mod_cgi_vuln_fix.dpatch to fix CVE-2008-1111
    (Closes: 469307).
  * Remove spurious mkdir in debian/rules (Closes: 448160).
  * Bump urgency for RC bug fixes.

 -- Pierre Habouzit <madcoder@debian.org>  Sat, 08 Mar 2008 17:30:03 +0100

lighttpd (1.4.18-2) unstable; urgency=high

  * Move the aliases on /doc/ and /images/ mandated by policy at the end to
    circumvent #445459.
  * Add patches/05_fdevent_fix.dpatch to fix possible remote DoS
    (Closes: 466663).
  * bump urgency for security fix.

 -- Pierre Habouzit <madcoder@debian.org>  Wed, 27 Feb 2008 16:56:16 +0100

lighttpd (1.4.18-1) unstable; urgency=low

  * New upstream release, fixes CVE-2007-4727 (closes: #441787)
  * lighttpd-angel is installed but not used yet

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Tue, 11 Sep 2007 12:45:11 +0200

lighttpd (1.4.17-1) unstable; urgency=low

  * New upstream release
  * patches/05_mysql_autoreconnect.dpatch - dropped, fixed in upstream

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Tue, 04 Sep 2007 12:19:01 +0200

lighttpd (1.4.16-5~bpo40+2) etch-backports; urgency=low

  * Rebuild in an etch chroot *doh*.

 -- Pierre Habouzit <madcoder@debian.org>  Tue, 28 Aug 2007 11:37:38 +0200

lighttpd (1.4.16-5~bpo40+1) etch-backports; urgency=low

  * Rebuild for Etch backports.

 -- Pierre Habouzit <madcoder@debian.org>  Fri, 24 Aug 2007 10:12:10 +0200

lighttpd (1.4.16-5) unstable; urgency=low

  * debian/control: Drop conflict with gamin as it appears it was not the
    issue. (Closes: #438058). For real this time.

 -- Pierre Habouzit <madcoder@debian.org>  Sun, 19 Aug 2007 12:22:32 +0200

lighttpd (1.4.16-4) unstable; urgency=low

  * debian/control: Drop conflict with gamin as it appears it was not the
    issue. (Closes: #438058).
  * src/mod_mysql_vhost.c: Enable mysql auto-connect mode, as it's not default
    in mysql 5.x anymore. (Closes: #428677).

 -- Pierre Habouzit <madcoder@debian.org>  Sat, 18 Aug 2007 10:27:22 +0200

lighttpd (1.4.16-3) unstable; urgency=high

  * Urgency set to high due to RC bug fix.
  * debian/lighttpd.logrotate: fix stupid typo (closes: #437341).
  * debian/control: add Conflict against gamin, to avoid #437307.

 -- Pierre Habouzit <madcoder@debian.org>  Wed, 15 Aug 2007 09:46:48 +0200

lighttpd (1.4.16-2) unstable; urgency=low

  * patches/04_ldap_build_filter_fix.dpatch: add patch from Peter Colberg to
    fix first LDAP search that fails because of the filter being
    uninitialized. (closes: #419661)
  * Enable fam support (closes: #407820):
     + debian/rules: add --enable-fam configure flag.
     + debian/control: add libfam-dev to Build-Depends, and also wrap
       build-dependencies to make diff more understandable.
  * Enable support for kerberos (with openssl):
     + debian/rules; add --enable-kerberos5 configure flag.
     + debian/control: add libkrb5-dev to the Build-Depends.
  * lighttpd.logrotate: redirect stderr to /dev/null as well to prevent
    defunct processes (presumably due to full unread pipes/buffers)
    (closes: #419992).
  * debian/control: replace lighttpd dependency on perl with
    libterm-readline-perl-perl as Readline.pm is needed for lighty-enable-mod
    (closes: #435077).
  * debian/control:
     + Add myself to uploaders (closes: #401575).
     + Drop Recommands on php5-cgi, there is absolutely no reason to have it,
       or we would have to recommend ruby, python, lua, perl, .... and every
       $language on earth to be fair.  (closes: #435587).
  * debian/conf-available/10-webdav.conf: add default configuration for webdav.
    (closes: #406641).
  * debian/conf-enabled: remove directory, it is already installed through
    lighttpd.dirs.
  * lighttpd.postinst, lighttpd.postrm, init.d: be sure there is a
    /var/run/lighttpd owned by www-data:www-data, helpful to store locks and
    things like that.

 -- Pierre Habouzit <madcoder@debian.org>  Fri, 03 Aug 2007 10:06:15 +0200

lighttpd (1.4.16-1) unstable; urgency=low

  * New upstream release (closes: #434546)
  * Acknowledge NMU by Pierre Habouzit for CVE-2007-2841 (closes: #428368)
  * Added static-file.exclude-extensions section to lighttpd.conf (closes: #408374)
  * Fixed description of conf-available/10-fastcgi.conf (closes: #430469)
  * Added mod_extforward to debian/lighttpd.install (closes: #434717)
  * config.guess taken from upstream (closes: #419664)
  * turn on compression (closes: #397514)
  * debian/control: XS-Vcs-Svn header added

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Fri, 27 Jul 2007 10:32:51 +0200

lighttpd (1.4.15-1.1) unstable; urgency=low

  * Non-maintainer upload.
  * add patches/04_wrapping_headers_bugfix.dpatch to fix crash with wrapping
    headers (Closes: 428368).

 -- Pierre Habouzit <madcoder@debian.org>  Fri, 20 Jul 2007 11:04:07 +0200

lighttpd (1.4.15-1) unstable; urgency=low

  * New upstream release (closes: #419131)
  * 01_mod_fastcgi_missing_cleanup.dpatch is now in upstream so it's removed from 
    patches
  *  04_pidfile_bugfix.dpatch is now in upstream so it's removed from patches

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Fri, 06 Apr 2007 11:24:54 +0200

lighttpd (1.4.13-10) unstable; urgency=medium

  * 03_ldap_leak_bugfix.dpatch added from yann@pleiades.fr.eu.org (Yann Rouillard)
    (closes: #413917)
  * Lowered priority of index.lighttpd.html (closes: #397492)
  * We don't need now check md5 sum of index.html since we provide our own 
    index.lighttpd.html (closes: #407794)
  * 04_pidfile_bugfix.dpatch by Chris Webb <chris@arachsys.com> added - some fixes
    with graceful restart

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Thu,  8 Mar 2007 22:18:42 +0100

lighttpd (1.4.13-9) unstable; urgency=low

  * debian/lighttpd.default - removed, it is not ready yet. We'll back after 
    etch release (closes: #406021)
  * debian/index.html.md5 - fixed path to file (full path to index.html)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Tue,  2 Jan 2007 14:24:42 +0100

lighttpd (1.4.13-8) unstable; urgency=medium

  * Typo fixed in debian/lighttpd.postinst (closes: #405123)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Tue,  2 Jan 2007 13:23:25 +0100

lighttpd (1.4.13-7) unstable; urgency=low

  [ Franz Pletz ]
  * debian/conf-available/10-cgi.conf:
    + match /cgi-bin/ only at the beginning of a path
    + convert match for host == localhost to remoteip == 127.0.0.1 like in
      lighttpd.conf; due to bugs in mod_alias, the cgi-bin, doc and images
      aliases didn't work anymore
  * debian/lighttpd.logrotate
    + use reload instead of force-reload for graceful restart
      (closes: #398169, #380080)
  * added debian/patches/01_mod_fastcgi_missing_cleanup.dpatch
    + source: http://trac.lighttpd.net/trac/ticket/910
    + fixes memleak in mod_fastcgi (closes: #400167)
  * added debian/patches/02_fastcgi_detach.dpatch
    + disconnect stderr/stdout from the terminal (closes: #368670)
    + point them either to errorlog or /dev/null
  * debian/control: added myself to Uploaders
  * Don't touch /var/www/index.html, create /var/www/index.lighttpd.html
    instead (closes: #397492)
    + debian/lighttpd.postinst: copy to /var/www/index.lighttpd.html
    + debian/lighttpd.conf: add index.lighttpd.html as first index-filename

  [ Krzysztof Krzyzaniak (eloy) ]
  * Typo fixed in index.html (closes: #403620)

 -- Franz Pletz <fpletz@franz-pletz.org>  Fri,  8 Dec 2006 16:15:27 +0100

lighttpd (1.4.13-6) unstable; urgency=low

  * debian/lighttpd.postinst: change only permission for /var/log/lighttpd/

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Mon, 4 Dec 2006 16:34:11 +0100

lighttpd (1.4.13-5) unstable; urgency=low

  * debian/control:
   + perl added to dependencies (closes: #396629)
  * debian/conf-available/10-fastcgi.conf:
   + /usr/bin/php4-cgi changed to /usr/bin/php-cgi (closes: #397142)
  * debian/lighttpd.postinst: fix permission of /var/log/lighttpd 
    (closes: #398834)
  * debian/lighty-enable-mod - fixed bug with undefined values (closes: #397493)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Thu,  9 Nov 2006 12:18:25 +0100

lighttpd (1.4.13-4) unstable; urgency=low

  * fixed config file for logrotote (reload action changed to force-reload)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Thu, 26 Oct 2006 11:36:13 +0200

lighttpd (1.4.13-3) unstable; urgency=low

  * debian/control: libxml2-dev added to Build-Depends (closes: #394882)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Tue, 24 Oct 2006 13:31:27 +0200

lighttpd (1.4.13-2) unstable; urgency=medium

  * Patch from Pierre Habouzit <madcoder@debian.org> to init.d applied
    (closes: #380080)
  * Patch from Adrian Friendli <adi@koalatux.ch> to lighttpd.conf applied
    (closes: #392890)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Mon, 16 Oct 2006 11:14:28 +0200

lighttpd (1.4.13-1) unstable; urgency=low

  * New upstream release
  * mod_webdav as separate lighttpd-mod-webdav package
  * Compiled with --with-webdav-locks, added uuid-dev to Build-Depends

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Tue, 10 Oct 2006 10:26:54 +0200

lighttpd (1.4.13~r1385-1) unstable; urgency=low

  * New upstream release

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Mon,  9 Oct 2006 10:28:32 +0200

lighttpd (1.4.13~r1370-1) unstable; urgency=low

  * New upstream release (closes: #390877) (closes: #389911)
  * Compiled with --with-attr param (closes: #389712)
  * dropped 01-lua5.1.dpatch, issue fixed by upstream 

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Thu,  5 Oct 2006 10:08:19 +0200

lighttpd (1.4.12-1) unstable; urgency=low

  * New upstream release
  * fixes in debian/lighttpd.install (closes: #377802)
  * mod_cml is deprecated from now on and it will be removed in 1.5.0
    mod_magnet provides the same functionality and more with a
    cleaner syntax and in a more generic form 
  * added separate module for mod_magnet (closes: #389578)
  * changed dependency from lua-5.0 to lua-5.1
  * added patch patches/01-lua5.1.dpatch
  * added pkg-config to Build-Depends

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Tue, 12 Sep 2006 19:17:41 +0200

lighttpd (1.4.12~20060907-1) unstable; urgency=low

  * New upstream release
  * Removed debian/patches/01_use_bin_sh.dpatch - fixed in upstream

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Thu,  7 Sep 2006 14:50:47 +0200

lighttpd (1.4.12~20060901-1) unstable; urgency=low

  * New upstream release
  * Removed debian/patches/02_ssl_fix.dpatch - it's now fixed in upstream

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Mon,  4 Sep 2006 11:07:42 +0200

lighttpd (1.4.11-8) UNRELEASED; urgency=low

  * debian/lighttpd.dirs:
   + usr/lib/cgi-bin added
  * debian/conf-available/10-cgi.conf
   + proper configuration for localhost as well (again Bug#345554)
  * debian/lighttpd.conf:
   + server.bind commented out as in default configuration (closes: #380267)
  * debian/patches/02_ssl_fix.dpatch - added fix for ssl connection with POST 
    request (http://trac.lighttpd.net/trac/ticket/607), thanks to 
    RISKO Gergely <risko@debian.org> (closes: #381455)
  * debian/lighttpd.logrotate - some values changes (now rotate weekly 
    and keep 12 logfiles)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Mon, 28 Aug 2006 13:06:25 +0200

lighttpd (1.4.11-7) unstable; urgency=low

  * debian/create-mime.assign.pl - catchup error when /etc/mime.types is not
    readable (closes: #375347)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Tue, 27 Jun 2006 20:19:57 +0200

lighttpd (1.4.11-6) unstable; urgency=low

  * debian/control:
   - Recommends: Changed to alternative: php4-cgi | php5-cgi (closes: #368215)
  * include-conf-enabled.pl script changed according to patch from 
    Tobias Gruetzmacher <tobias@portfolio16.de> (closes: #368352)
  * debian/lighttpd.conf: removed global for local aliases (/images/, /doc/) 
    (closes: #366801)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Tue, 23 May 2006 16:48:36 +0200

lighttpd (1.4.11-5) unstable; urgency=low

  * debian/init.d:
   - --oknodo added to section "stop" to close finally #35979
   - --retry 30 added to section "reload", to prevents problems with 
     logrotating (closes: #366366)
  * debian/control:
   Standards-Version: increased to 3.7.2 without additional changes

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Wed, 10 May 2006 14:26:04 +0200

lighttpd (1.4.11-4) unstable; urgency=low

  [ Krzysztof Krzyzaniak (eloy) ]
  * debian/init.d:
   - "exit 1" after failed actions removed (closes: #359792)
  * debian/conf-available/10-fastcgi.conf updated (closes: #362827)
    thanks to Joerg Rieger <a.mailinglists#lumrix.net>

  [ Torsten Marek ]
  * Change my email address to shlomme@debian.org
  * Remove --background from the start action, since it 
    breaks the error checking of start-stop-daemon. 
    The behaviour described in #355865 is not reproducable
    any more.
  * make reload action in initscript more well-behaved

 -- Torsten Marek <shlomme@debian.org>  Sun,  9 Apr 2006 15:51:51 +0200

lighttpd (1.4.11-3) unstable; urgency=low

  * debian/lighttpd.conf - added dir-listing.encoding = "utf-8", suggested
    by Silvestre Zabala <silvestre(at)zabala.name> (closes: #359100)
  * debian/lighttpd.install - fix bug with installing *.conf files

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Mon, 27 Mar 2006 09:50:55 +0200

lighttpd (1.4.11-2) unstable; urgency=low

  * Provide debian/conf-available/10-ssl.conf, (closes: #355868)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Fri, 24 Mar 2006 13:53:54 +0100

lighttpd (1.4.11-1) unstable; urgency=low

  * New upstream release (closes: #356496)
  * init.d script - added --background to "start" (thanks goes to 
     Marcello Nuccio <marcenuc@cicaia160.unimo.it>) (closes: #355865)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Fri, 10 Mar 2006 09:51:10 +0100

lighttpd (1.4.10-6) unstable; urgency=low

  * Patch from <tobias@portfolio16.de> on lighty-enable-mod
    (closes: #355773)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Wed,  8 Mar 2006 11:17:07 +0100

lighttpd (1.4.10-5) unstable; urgency=low

  [ Krzysztof Krzyzaniak (eloy) ]
  * debian/control - libmysqlclient14-dev have to be removede because is not
    available in debian/sid

  [ Torsten Marek ]
  * debian/rules - build with support for LUA, libmemcache and GDBM
  * debian/lighttpd.install - install mod_evasive into lighttpd package
  * debian/control - own packages for  mod_trigger_b4_dl and mod_cml
  * debian/control - small fixes
  * debian/conf-available/10-ssi.conf - comment out link to web documentation 

 -- Torsten Marek <shlomme@gmx.net>  Mon,  6 Mar 2006 12:07:29 +0100

lighttpd (1.4.10-4) unstable; urgency=low

  * bugfix release
  * Fixed bug with 10-fastcgi.conf, (closes: #353964)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Thu, 23 Feb 2006 16:14:42 +0100

lighttpd (1.4.10-3) unstable; urgency=low

  * lighttpd.conf - changed configuration for /images/ & /doc/ handling

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Tue, 14 Feb 2006 09:57:15 +0100

lighttpd (1.4.10-2) unstable; urgency=low

  * debian/control - libmysqlclient14-dev added as alternative (will be easier for
    backports.org)
  * lighty-enable-mod script fixed - files with dash were skipped, thanks 
    to Silvester Zabala for patch (closes: #352577) 
  * install doc/lighttpd.conf as example (closes: #344961)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Mon, 13 Feb 2006 12:58:54 +0100

lighttpd (1.4.10-1) unstable; urgency=low

  * New upstream release

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Wed,  8 Feb 2006 16:02:16 +0100

lighttpd (1.4.9-5) unstable; urgency=low

  * Properly fixed bug with overwritting index.html (closes: #349676)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Mon, 30 Jan 2006 10:17:57 +0100

lighttpd (1.4.9-4) unstable; urgency=low

  [ Krzysztof Krzyzaniak (eloy) ]
  * Fixed bug with 10-userdir.conf, (closes: #349821)
  * index.html is not replaced when md5 string desn't match (closes: #349676)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Wed, 25 Jan 2006 16:33:34 +0100

lighttpd (1.4.9-3) unstable; urgency=low

  [ Torsten Marek ]
  * Added some configuration examples from upstream sample 
    configuration
  * Implement "reload" init.d action with graceful restart, 
    taken from http://trac.lighttpd.net/trac/ticket/267 (Closes: #346038)
  * ssi, auth, fastcgi, proxy and simple-vhost are now in separte 
    config files
  * Put path to plugin documentation into every config snippet
  * Build against libmysqlclient15

 -- Torsten Marek <shlomme@gmx.net>  Sat, 21 Jan 2006 15:16:01 +0100

lighttpd (1.4.9-2) unstable; urgency=low

  [ Krzysztof Krzyzaniak (eloy) ]
  * mod_alias enabled by default - removed conf-avaiable/00-alias.conf
  * Added handling of http://localhost/doc/ & http://localhost/images/ 
    (closes: #348823)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Thu, 19 Jan 2006 12:39:04 +0100

lighttpd (1.4.9-1) unstable; urgency=low

  * New upstream release
  * Closing bug from not uploaded release 1.4.8-5, (closes: #347737)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Mon, 16 Jan 2006 20:06:39 +0100

lighttpd (1.4.8-5) unstable; urgency=low

  * create /var/www directory (closes: #347737), default /var/www/index.html
    added (based on apache2 index.html file).

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Thu, 12 Jan 2006 16:54:32 +0100

lighttpd (1.4.8-4) unstable; urgency=low

  * fixed permissions and directories (closes: #347565)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Wed, 11 Jan 2006 17:15:12 +0100

lighttpd (1.4.8-3) unstable; urgency=low

  * New configuration layout (closes: #345554) (closes: #344959),
    read /etc/lighttpd/conf-available/README
    - conf-available directory for all templates 
    - conf-enabled directory for enabled modules

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Mon,  9 Jan 2006 13:49:34 +0100

lighttpd (1.4.8-2) unstable; urgency=low

  [ Krzysztof Krzyzaniak (eloy) ]
  * debian/control: lsb-base dependency narrowed to (>= 3.0-3)
  * create-mime.assign.pl set as executable (closes: #344938)

 -- Krzysztof Krzyzaniak (eloy) <eloy@debian.org>  Wed, 28 Dec 2005 12:40:55 +0100

lighttpd (1.4.8-1) unstable; urgency=low

  * New upstream version (closes: #304271)
  * Does not rely on $SHELL to execute external commands

 -- Torsten Marek <shlomme@gmx.net>  Sat, 26 Nov 2005 11:48:51 +0100

lighttpd (1.4.7-1) unstable; urgency=low

  * New upstream version, Initial debian version
  * Better debian/rules file
  * Split mysql vhost module into separate package
  * Create separate package for documentation
  * Create a better init script

 -- Torsten Marek <shlomme@gmx.net>  Sat,  5 Nov 2005 18:56:53 +0100
