pkgsrc-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

lighttpd 1.4.83 released



Dear package maintainers:

lighttpd 1.4.83 has been released!
https://wiki.lighttpd.net/Release-1_4_83

Please package and publish lighttpd 1.4.83.

Important changes

security fixes; bug fixes; tighten resource management

Highlights

* add PQC hybrid KEM X25519MLKEM768 to default TLS groups
* mod_sockproxy can now route connections based on TLS SNI
* mod_proxy proxy.header enhanced config for url-path mapping of response headers
* HTTP Incremental header support
* portability/compatibility with library updates (lighttpd dependencies)

BEHAVIOR CHANGES

* add PQC hybrid KEM X25519MLKEM768 to default TLS groups
    Reference: TLSRef guidelines
    https://docs.tlsref.org/server-side-tls.html
* HTTP/1.1 Upgrade: h2c has been deprecated; set default to disabled in lighttpd, but can still be enabled in config, and http2 prior knowledge is still enabled


If your distro package requires any other patches that might be
upstreamed into lighttpd, please let me know.

Please let me know if you have any questions or issues.  Thank you!

Cheers, Glenn


Home | Main Index | Thread Index | Old Index