>Number:         24128
>Category:       pkg
>Synopsis:       update thttpd 2.25b
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    pkg-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Sat Jan 17 12:19:00 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator:     Michael Santos
>Release:        NetBSD 1.6ZH
>Organization:
	
>Environment:
	
	
System: NetBSD ack-n 1.6ZH NetBSD 1.6ZH (ack-n) #19: Sun Jan 11 17:15:58 EST 2004 root@ack-n:/home/build/src/sys/arch/i386/compile/obj/ack-n i386
Architecture: i386
Machine: i386
>Description:
Please update thttpd to 2.25b.


New in version 2.25b:

    * Move fdwatch initialization before the chroot, so that /dev/poll can work.
    * Multiple fdwatch cleanups and fixes (Adam Zell). 

New in version 2.25:

    * Prohibit "Host: ." and "Host: .." (David Leadbeater).
    * Don't free memory prematurely on SIGUSR1 (A.D.F.).
    * Use the specified charset in directory listings and errors (Jonas Ohlsson).
    * Lowered THROTTLE_TIME from 60 seconds to 2 seconds, plus more aggressive computation of sending rate, to improve throttle reaction time (E Frank Ball).
    * Added code to redistribute the throttled bandwidth fairly among the currently sending connections.
    * Some more throttling changes that smooth things out a lot.
    * Added an experimental limitation on the number of simultaneous CGIs.
    * Chown the log file when starting as root, so that it can later be re-opened when running as nobody (or whatever user you configure). Also tweak the logfile pathname so that it still works inside a chroot tree.
    * Make sure URL paths begin with a slash.
    * Generate multiple MIME encodings in the correct order, and with the correct separator.
    * Ignore EINTR on read() and write().
    * Fix error in httpd_read_fully() and httpd_write_fully() that could cause incorrect data to be read or written (Daniel Jensen).
    * Don't attempt to double-free a file descriptor if a connection times out while it is paused for throttling.
    * Save and restore errno in signal handlers.
    * The non-local referer check is no longer fooled by URLs with query strings.
    * Simplified handling of HAVE_INT64T (Trisk). If this causes problems, e.g. if there are still systems which don't have "long long", we can back out the change.
    * Keep a list of free connection structs, instead of doing linear search to find a free one (Adam Zell).
    * Added config.h option FLUSH_LOG_EVERY_TIME - if it's turned off, the log does not get fflushed after each request (Adam Zell).
    * Multiple robustness improvements to the fdwatch module (Adam Zell).
    * Added /dev/poll support to fdwatch (Adam Zell).
    * Automatically add no-cache control header on error responses. 


>How-To-Repeat:
	
>Fix:
Index: Makefile
===================================================================
RCS file: /cvsroot/pkgsrc/www/thttpd/Makefile,v
retrieving revision 1.25
diff -U2 -r1.25 Makefile
--- Makefile	2003/10/27 20:29:52	1.25
+++ Makefile	2004/01/17 12:14:02
@@ -1,5 +1,5 @@
 # $NetBSD: Makefile,v 1.25 2003/10/27 20:29:52 cube Exp $
 
-DISTNAME=	thttpd-2.24
+DISTNAME=	thttpd-2.25b
 CATEGORIES=	www
 MASTER_SITES=	http://www.acme.com/software/thttpd/
Index: distinfo
===================================================================
RCS file: /cvsroot/pkgsrc/www/thttpd/distinfo,v
retrieving revision 1.6
diff -U2 -r1.6 distinfo
--- distinfo	2003/10/27 20:29:52	1.6
+++ distinfo	2004/01/17 12:14:02
@@ -1,6 +1,6 @@
 $NetBSD: distinfo,v 1.6 2003/10/27 20:29:52 cube Exp $
   
-SHA1 (thttpd-2.24.tar.gz) = 2a851b225c7af73f22be8a0a4cf29e4200b3248f
-Size (thttpd-2.24.tar.gz) = 130116 bytes
+SHA1 (thttpd-2.25b.tar.gz) = 51bc25ef035d7557c869a02ce353580a1cadfa2c
+Size (thttpd-2.25b.tar.gz) = 132363 bytes
 SHA1 (sitedrivenby.gif) = 7671e9a8ec2cad3961b268befd33c0920e07c658
 Size (sitedrivenby.gif) = 8519 bytes

>Release-Note:
>Audit-Trail:
>Unformatted: