lighttpd-1.4.67-bp154.2.6.1<>,܉c5!M@eee>MRvUq}j`m14] ߜ$>0Ĥ>6Βڌ#NR,V= $:+J+1[p^I5M!tC\Idl&|>4%UjUHęhɢ@ !zỌPAܲn=LVnjN] ,FHRW|)r!VVS[ɍ¬V=0,O+$5CEIag6 &%TֲnՑ>I?d   V&3 Lpe  gg ^g ,g g +/g +g-<g/Sg11g336469f6(98939:3:?3=^Z>^b?^j@^rF^zG^gH`0gIagXb4YbH\bg]d g^imbjckedl elflllul,gvm,wgx0gyzDTXwClighttpd1.4.67bp154.2.6.1A Secure, Fast, Compliant, and Very Flexible Web ServerLighttpd is a secure, fast, compliant, and very flexible Web server that has been optimized for high-performance environments. It has a very low memory footprint compared to other Web servers and takes care of CPU load. Its advanced feature set (FastCGI, CGI, Auth, Output-Compression, URL-Rewriting, and more) makes lighttpd the perfect Web server software for every server that is suffering load problems.c5old-atreju3{SUSE Linux Enterprise 15openSUSEBSD-3-Clausehttp://bugs.opensuse.orgProductivity/Networking/Web/Servershttps://www.lighttpd.net/linuxx86_64/usr/sbin/groupadd -r lighttpd >/dev/null 2>&1 ||: /usr/sbin/useradd -g lighttpd -s /bin/false -r -c "user for lighttpd" -d /var/lib/lighttpd lighttpd >/dev/null 2>&1 ||: if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in lighttpd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in lighttpd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable lighttpd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop lighttpd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in lighttpd.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart lighttpd.service ) || : fi fih@Zh if@</8xIHI(z9IZ jx((Y9P((j(((9 (((zHY ((((i)h!Nz 5d.J|4>L (P K~.P Qp&nAA聠A聠AA큤AAAAAc5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&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-1.4.67-bp154.2.6.1.src.rpmconfig(lighttpd)http_daemonhttpdlighttpdlighttpd(x86-64) @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(lighttpd)coreutilsdiffutilsfillupgreplibbrotlienc.so.1()(64bit)libbz2.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.11)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.25)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.5)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(XCRYPT_2.0)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_0g)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1)(64bit)libdbi.so.3()(64bit)libdbi.so.3(ABI_3)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libpcre2-8.so.0()(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libssl.so.1.1(OPENSSL_1_1_1)(64bit)libz.so.1()(64bit)libzstd.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowspawn-fcgisystemdsystemdsystemdsystemd1.4.67-bp154.2.6.13.0.4-14.6.0-14.0-15.2-14.14.3c-c pbaaaX@a4auJa\>@aI@`__ @^@^b;@^6]]@Z@Zb@Za@Za@Zx@Z@Z7Y+@Y@Y@XCX|XzXzXs{@X^c@X2@X2@XkW@W!VU@U@UȒ@UU@UUTTTT\@T_W@Dirk Müller Andreas Stieger Dirk Müller Johannes Segitz Andreas Stieger Andreas Stieger Andreas Stieger Andreas Stieger Johannes Segitz Jan Engelhardt Andreas Stieger Paolo Stivanin Thorsten Kukuk Alexander van Kaam Vítězslav Čížek Andreas Stieger Andreas Stieger Dominique Leuenberger dimstar@opensuse.orgi@marguerite.sumikhail.kasimov@gmail.commikhail.kasimov@gmail.comjenkins@lighttpd.netrbrown@suse.comstbuehler@web.destbuehler@web.destbuehler@web.demrueckert@suse.demrueckert@suse.debwiedemann@suse.comstbuehler@web.dejenkins@lighttpd.netstbuehler@web.dejenkins@lighttpd.netjenkins@lighttpd.netstbuehler@web.dejenkins@lighttpd.netjenkins@lighttpd.netjenkins@lighttpd.netjenkins@lighttpd.netdimstar@opensuse.orgjenkins@lighttpd.netmrueckert@suse.dejenkins@lighttpd.netjenkins@lighttpd.netstbuehler@web.detchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comLed - update to 1.4.67: * Update comment about TCP_INFO on OpenBSD * [mod_ajp13] fix crash with bad response headers (fixes #3170) * [core] handle RDHUP when collecting chunked body CVE-2022-41556 boo#1203872 * [core] tweak streaming request body to backends * [core] handle ENOSPC with pwritev() (#3171) * [core] manually calculate off_t max (fixes #3171) * [autoconf] force large file support (#3171) * [multiple] quiet coverity warnings using casts * [meson] add license keyword to project declaration- update to 1.4.66: * a number of bug fixes * Fix HTTP/2 downloads >= 4GiB * Fix SIGUSR1 graceful restart with TLS * futher bug fixes * CVE-2022-37797: null pointer dereference in mod_wstunnel, possibly a remotely triggerable crash (boo#1203358) * In an upcoming release the TLS modules will default to using stronger, modern chiphers and will default to allow client preference in selecting ciphers. “CipherString” => “EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384”, “Options” => “-ServerPreference” old defaults: “CipherString” => “HIGH”, “Options” => “ServerPreference” * A number of TLS options are how deprecated and will be removed in a future release: – ssl.honor-cipher-order – ssl.dh-file – ssl.ec-curve – ssl.disable-client-renegotiation – ssl.use-sslv2 – ssl.use-sslv3 The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd defaults should be prefered * A number of modules are now deprecated and will be removed in a future release: mod_evasive, mod_secdownload, mod_uploadprogress, mod_usertrack can be replaced by mod_magnet and a few lines of lua.- update to 1.4.65: * WebSockets over HTTP/2 * RFC 8441 Bootstrapping WebSockets with HTTP/2 * HTTP/2 PRIORITY_UPDATE * RFC 9218 Extensible Prioritization Scheme for HTTP * prefix/suffix conditions in lighttpd.conf * mod_webdav safe partial-PUT * webdav.opts += (“partial-put-copy-modify” => “enable”) * mod_accesslog option: accesslog.escaping = “json” * mod_deflate libdeflate build option * speed up request body uploads via HTTP/2 * Behavior Changes * change default server.max-keep-alive-requests = 1000 to adjust * to increasing HTTP/2 usage and to web2/web3 application usage * (prior default was 100) * mod_status HTML now includes HTTP/2 control stream id 0 in the output * which contains aggregate counts for the HTTP/2 connection * (These lines can be identified with URL ‘*’, part of “PRI *” preface) * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status * MIME type application/javascript is translated to text/javascript (RFC 9239)- Set ProtectHome to read-only, otherwise access to the users public_html can break (bsc#1195465)- update to 1.4.64: * CVE-2022-22707: off-by-one stack overflow in the mod_extforward plugin (boo#1194376) * graceful restart/shutdown timeout changed from 0 (disabled) to 8 seconds. configure an alternative with: server.feature-flags += (“server.graceful-shutdown-timeout” => 8) * deprecated modules (previously announced) have been removed: mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming, mod_geoip, mod_trigger_b4_dl- update to 1.4.63: * import xxHash v0.8.1 * fix reqpool mem corruption in 1.4.62 - includes changes in 1.4.62: * [mod_alias] fix use-after-free bug * many developer visible bug fixes - build with pcre2 and without libev, as per upcoming deprecation- update to 1.4.61: * mod_dirlisting: sort "../" to top * fix HTTP/2 upload > 64k w/ max-request-size * code level and developer visible bug fixes- update to 1.4.60: * HTTP/2 smoother and lower memory use (in general) * HTTP/2 tuning to better handle aggressive client initial requests * reduce memory footprint; workaround poor glibc behavior; jemalloc is better * mod_magnet lua performance improvements * mod_dirlisting performance improvements and new caching option * memory constraints for extreme edge cases in mod_dirlisting, mod_ssi, mod_webdav * connect(), write(), read() time limits on backends (separate from client timeouts) * lighttpd restarts if large discontinuity in time occurs (embedded systems) * RFC7233 Range support for all non-streaming responses, not only static files * connect() to backend now has default 8 second timeout (configurable)- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_lighttpd.service.patch- Fix squatted descriptions.- update to 1.4.59: * HTTP/2 enabled by default * mod_deflate zstd suppport * new mod_ajp13- Update to 1.4.58: * [mod_wolfssl] use wolfSSL TLS version defines * [mod_wolfssl] compile with earlier wolfSSL vers * [core] prefer IPv6+IPv4 func vs IPv4-specific func * [core] reuse large mem chunks (fix mem usage) (fixes #3033) * [core] add comment for FastCGI mem use in hctx->rb (#3033) * [mod_proxy] fix sending of initial reqbody chunked * [multiple] fdevent_waitpid() wrapper * [core] sys-time.h - localtime_r,gmtime_r macros * [core] http_date.[ch] encapsulate HTTP-date parse * [core] specialized strptime() for HTTP date fmts * [multiple] employ http_date.h, sys-time.h * [core] http_date_timegm() (portable timegm()) * buffer_append_path_len() to join paths * [core] inet_ntop_cache -> sock_addr_cache * [multiple] etag.[ch] -> http_etag.[ch]; better imp * [core] fix crash after specific err in config file * [core] fix bug in FastCGI uploads (#3033) * [core] http_response_match_if_range() * [mod_webdav] typedef off_t loff_t for FreeBSD * [multiple] chunkqueue_write_chunk() * [build] add GNUMAKEFLAGS=--no-print-directory * [core] fix bug in read retry found by coverity * [core] attempt to quiet some coverity warnings * [mod_webdav] compile fix for Mac OSX/11 * [core] handle U+00A0 in config parser * [core] fix lighttpd -1 one-shot with pipes * [core] quiet start/shutdown trace in one-shot mode * [core] allow keep-alives in one-shot mode (#3042) * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD * [core] setsockopt IPV6_V6ONLY if server.v4mapped * [core] prefer inet_aton() over inet_addr() * [core] add missing mod_wolfssl to ssl compat list * [mod_openssl] remove ancient preprocessor logic * [core] SHA512_Init, SHA512_Update, SHA512_Final * [mod_wolfssl] add complex preproc logic for SNI * [core] wrap a macro value with parens * [core] fix handling chunked response from backend (fixes #3044) * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044) * [core] skip some trace if backend Upgrade (#3044) * [TLS] cert-staple.sh POSIX sh compat (fixes #3043) * [core] portability fix if st_mtime not defined * [mod_nss] portability fix * [core] warn if mod_authn_file needed in conf * [core] fix chunked decoding from backend (fixes #3044) * [core] reject excess data after chunked encoding (#3046) * [core] track chunked encoding state from backend (fixes #3046) * [core] li_restricted_strtoint64() * [core] track Content-Length from backend (fixes #3046) * [core] enhance config parsing debugging (#3047) * [core] reorder srv->config_context to match ndx (fixes #3047) * [mod_proxy] proxy.header = ("force-http10" => ...) * [mod_authn_ldap] fix crash (fixes #3048) * [mod_authn_ldap, mod_vhostdb_ldap] default cafile * [core] fix array_copy_array() sorted[] * [multiple] replace fall through comment with attr * [core] fix crash printing trace if backend is down * [core] fix decoding chunked from backend (fixes #3049) * [core] attempt to quiet some coverity warnings * [core] perf: request processing * [core] http_header_str_contains_token() * [mod_flv_streaming] parse query string w/o copying * [mod_evhost] use local array to split values * [core] remove srv->split_vals * [core] add User-Agent to http_header_e enum * [core] store struct server * in struct connection * [core] use func rc to indicate done reading header * [core] replace connection_set_state w/ assignment * [core] do not pass srv to http header parsing func * [core] cold buffer_string_prepare_append_resize() * [core] chunkqueue_compact_mem() * [core] connection_chunkqueue_compact() * [core] pass con around request, not srv and con * [core] reduce use of struct parse_header_state * [core] perf: HTTP header parsing using \n offsets * [core] no need to pass srv to connection_set_state * [core] perf: connection_read_header_more() * [core] perf: connection_read_header_hoff() hot * [core] inline connection_read_header() * [core] pass ptr to http_request_parse() * [core] more 'const' in request.c prototypes * [core] handle common case of alnum or - field-name * [mod_extforward] simplify code: use light_isxdigit * [core] perf: array.c performance enhancements * [core] mark some data_* funcs cold * [core] http_header.c internal inline funcs * [core] remove unused array_reset() * [core] prefer uint32_t to size_t in base.h * [core] uint32_t for struct buffer sizes * [core] remove unused members of struct server * [core] short-circuit path to clear request.headers * [core] array keys are non-empty in key-value list * [core] keep a->data[] sorted; remove a->sorted[] * [core] __attribute_returns_nonnull__ * [core] differentiate array_get_* for ro and rw * [core] (const buffer *) in (struct burl_parts_t) * [core] (const buffer *) for con->server_name * [core] perf: initialize con->conf using memcpy() * [core] run config_setup_connection() fewer times * [core] isolate data_config.c, vector.c * [core] treat con->conditional_is_valid as bitfield * [core] http_header_hkey_get() over const array * [core] inline buffer as part of DATA_UNSET key * [core] inline buffer key for *_patch_connection() * [core] (data_unset *) from array_get_element_klen * [core] inline buffer as part of data_string value * [core] add const to callers of http_header_*_get() * [core] inline array as part of data_array value * [core] const char *op in data_config * [core] buffer string in data_config * [core] streamline config_check_cond() * [core] keep a->data[] sorted (REVERT) * [core] array a->sorted[] as ptrs rather than pos * [core] inline header and env arrays into con * [mod_accesslog] avoid alloc for parsing cookie val * [core] simpler config_check_cond() * [mod_redirect,mod_rewrite] store context_ndx * [core] const char *name in struct plugin * [core] srv->plugin_slots as compact list * [core] rearrange server_config, server members * [core] macros CONST_LEN_STR and CONST_STR_LEN * [core] struct plugin_data_base * [core] improve condition caching perf * [core] config_plugin_values_init() new interface * [mod_access] use config_plugin_values_init() * [core] (const buffer *) from strftime_cache_get() * [core] mv config_setup_connection to connections.c * [core] use (const char *) in config file parsing * [mod_staticfile] use config_plugin_values_init() * [mod_skeleton] use config_plugin_values_init() * [mod_setenv] use config_plugin_values_init() * [mod_alias] use config_plugin_values_init() * [mod_indexfile] use config_plugin_values_init() * [mod_expire] use config_plugin_values_init() * [mod_flv_streaming] use config_plugin_values_init() * [mod_magnet] use config_plugin_values_init() * [mod_usertrack] use config_plugin_values_init() * [mod_userdir] split policy from userdir path build * [mod_userdir] use config_plugin_values_init() * [mod_ssi] use config_plugin_values_init() * [mod_uploadprogress] use config_plugin_values_init() * [mod_status] use config_plugin_values_init() * [mod_cml] use config_plugin_values_init() * [mod_secdownload] use config_plugin_values_init() * [mod_geoip] use config_plugin_values_init() * [mod_evasive] use config_plugin_values_init() * [mod_trigger_b4_dl] use config_plugin_values_init() * [mod_accesslog] use config_plugin_values_init() * [mod_simple_vhost] use config_plugin_values_init() * [mod_evhost] use config_plugin_values_init() * [mod_vhostdb*] use config_plugin_values_init() * [mod_mysql_vhost] use config_plugin_values_init() * [mod_maxminddb] use config_plugin_values_init() * [mod_auth*] use config_plugin_values_init() * [mod_deflate] use config_plugin_values_init() * [mod_compress] use config_plugin_values_init() * [core] add xsendfile* check if xdocroot is NULL * [mod_cgi] use config_plugin_values_init() * [mod_dirlisting] use config_plugin_values_init() * [mod_extforward] use config_plugin_values_init() * [mod_webdav] use config_plugin_values_init() * [core] store addtl data in pcre_keyvalue_buffer * [mod_redirect] use config_plugin_values_init() * [mod_rewrite] use config_plugin_values_init() * [mod_rrdtool] use config_plugin_values_init() * [multiple] gw_backends config_plugin_values_init() * [core] config_get_config_cond_info() * [mod_openssl] use config_plugin_values_init() * [core] use config_plugin_values_init() * [core] collect more config logic into configfile.c * [core] config_plugin_values_init_block() * [core] gw_backend config_plugin_values_init_block * [core] remove old config_insert_values_*() funcs * [multiple] plugin.c handles common FREE_FUNC code * [core] run all trigger and sighup handlers * [mod_wstunnel] change DEBUG_LOG to use log_error() * [core] stat_cache_path_contains_symlink use errh * [core] isolate use of data_config, configfile.h * [core] split cond cache from cond matches * [mod_auth] inline arrays in http_auth_require_t * [core] array_init() arg for initial size * [core] gw_exts_clear_check_local() * [core] gw_backend less pointer chasing * [core] connection_handle_errdoc() separate func * [multiple] prefer (connection *) to (srv *) * [core] create http chunk header on the stack * [multiple] connection hooks no longer get (srv *) * [multiple] plugin_stats array * [core] read up-to fixed size chunk before fionread * [core] default chunk size 8k (was 4k) * [core] pass con around gw_backend instead of srv * [core] log_error_multiline_buffer() * [multiple] reduce direct use of srv->cur_ts * [multiple] extern log_epoch_secs * [multiple] reduce direct use of srv->errh * [multiple] stat_cache singleton * [mod_expire] parse config into structured data * [multiple] generic config array type checking * [multiple] rename r to rc rv rd wr to be different * [core] (minor) config_plugin_keys_t data packing * [core] inline buffer in log_error_st errh * [multiple] store srv->tmp_buf in tb var * [multiple] quiet clang compiler warnings * [core] http_status_set_error_close() * [core] http_request_host_policy w/ http_parseopts * [multiple] con->proto_default_port * [core] store log filename in (log_error_st *) * [core] separate log_error_open* funcs * [core] fdevent uses uint32_t instead of size_t * [mod_webdav] large buffer reuse * [mod_accesslog] flush file log buffer at 8k size * [core] include settings.h where used * [core] static buffers for mtime_cache * [core] convenience macros to check req methods * [core] support multiple error logs * [multiple] omit passing srv to fdevent_handler * [core] remove unused arg to fdevent_fcntl_set_nb* * [core] slightly simpify server_(over)load_check() * [core] isolate fdevent subsystem * [core] isolate stat_cache subsystem * [core] remove include base.h where unused * [core] restart dead piped loggers every 64 sec * [mod_webdav] use copy_file_range() if available * [core] perf: buffer copy and append * [core] copy some srv->srvconf into con->conf * [core] move keep_alive flag into request_st * [core] pass scheme port to http_request_parse() * [core] pass http_parseopts around request.c * [core] rename specific_config to request_config * [core] move request_st,request_config to request.h * [core] pass (request_st *) to request.c funcs * [core] remove unused request_st member 'request' * [core] rename content_length to reqbody_length * [core] t/test_request.c using (request_st *) * [core] (const connection *) in http_header_*_get() * [mod_accesslog] log_access_record() fmt log record * [core] move request start ts into (request_st *) * [core] move addtl request-specific struct members * [core] move addtl request-specific struct members * [core] move plugin_ctx into (request_st *) * [core] move addtl request-specific struct members * [core] move request state into (request_st *) * [core] store (plugin *) in p->data * [core] store subrequest_handler instead of mode * [multiple] copy small struct instead of memcpy() * [multiple] split con, request (very large change) * [core] r->uri.path always set, though might be "" * [core] C99 restrict on some base funcs * [core] dispatch handler in handle_request func * [core] http_request_parse_target() * [mod_magnet] modify r->target with "uri.path-raw" * [core] remove r->uri.path_raw; generate as needed * [core] http_response_comeback() * [core] http_response_config() * [tests] use buffer_eq_slen() for str comparison * [core] http_status_append() short-circuit 200 OK * [core] mark some chunk.c funcs as pure * [core] use uint32_t in http_header.[ch] * [core] perf: tighten some code in some hot paths * [core] parse header label before end of line * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976) * [build] fix build on MacOS X Tiger * [doc] lighttpd.conf: lighttpd choose event-handler * [config] blank server.tag if whitespace-only * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006) * [multiple] correct misspellings in comments * [multiple] fix some cc warnings in 32-bit, powerpc * [tests] fix skip count in mod-fastcgi w/o php-cgi * [multiple] ./configure --with-nettle to use Nettle * [core] skip excess close() when FD_CLOEXEC defined * [mod_cgi] remove redundant calls to set FD_CLOEXEC * [core] return EINVAL if stat_cache_get_entry w/o / * [mod_webdav] define PATH_MAX if not defined * [mod_accesslog] process backslash-escapes in fmt * [mod_openssl] disable cert vrfy if ALPN acme-tls/1 * [core] add seed before openssl RAND_pseudo_bytes() * [mod_mbedtls] mbedTLS option for TLS * [core] prefer getxattr() instead of get_attr() * [multiple] use *(unsigned char *) with ctypes * [mod_openssl] do not log ECONNRESET unless debug * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING * [mod_gnutls] GnuTLS option for TLS (fixes #109) * [mod_openssl] rotate session ticket encryption key * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842) * [mod_openssl] set chains from callback in 1.0.2+ (#2842) * [core] RFC-strict parse of Content-Length * [build] point ./configure --help to support forum * [core] stricter parse of numerical digits * [multiple] add summaries to top of some modules * [core] sys-crypto-md.h w/ inline message digest fn * [mod_openssl] enable read-ahead, if set, after SNI * [mod_openssl] issue warning for deprecated options * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail * [mod_openssl] use openssl feature define for ALPN * [mod_openssl] update default DH params * [core] SecureZeroMemory() on _WIN32 * [core] safe memset calls memset() through volatile * [doc] update comments in doc/config/modules.conf * [core] more precise check for request stream flags * [mod_openssl] rotate session ticket encryption key * [mod_openssl] ssl.stek-file to specify encrypt key * [mod_mbedtls] ssl.stek-file to specify encrypt key * [mod_gnutls] ssl.stek-file to specify encrypt key * [mod_openssl] disable session cache; prefer ticket * [mod_openssl] compat with LibreSSL * [mod_openssl] compat with WolfSSL * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA * [mod_openssl] move SSL_CTX curve conf to new func * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs * [mod_openssl] OCSP stapling (fixes #2469) * [TLS] cert-staple.sh - refresh OCSP responses (#2469) * [mod_openssl] compat with BoringSSL * [mod_gnutls] option to override GnuTLS priority * [mod_gnutls] OCSP stapling (#2469) * [mod_extforward] config warning for module order * [mod_webdav] store webdav.opts as bitflags * [mod_webdav] limit webdav_propfind_dir() recursion * [mod_webdav] unsafe-propfind-follow-symlink option * [mod_webdav] webdav.opts "propfind-depth-infinity" * [mod_openssl] detect certs marked OCSP Must-Staple * [mod_gnutls] detect certs marked OCSP Must-Staple * [mod_openssl] default to set MinProtocol TLSv1.2 * [mod_nss] NSS option for TLS (fixes #1218) * [core] fdevent_load_file() shared code * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file * [core] error if s->socket_perms chmod() fails * [mod_openssl] prefer some WolfSSL native APIs * quiet clang analyzer scan-build warnings * [core] uint32_t is plenty large for path names * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql * [core] splaytree_djbhash() in splaytree.h (reuse) * [cmake] update deps for src/t/test_* * [cmake] update deps for src/t/test_* * [build] remove tests/mod-userdir.t from builds * [build] fix typo in src/Makefile.am EXTRA_DIST * [core] remove unused mbedtls_enabled flag * [core] store fd in srv->stdin_fd during setup * [multiple] address coverity warnings * [mod_webdav] fix theoretical NULL dereference * [mod_webdav] update rc for PROPFIND allprop * [mod_webdav] build fix: ifdef live_properties * [multiple] address coverity warnings * [meson] fix libmariadb dependency * [meson] add missing libmaxminddb section * [mod_auth,mod_vhostdb] add caching option (fixes #2805) * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805) * [mod_auth] accept "nonce-secret" & "nonce_secret" * [mod_openssl] fix build warnings on MacOS X * [core] Nettle assert()s if buffer len > digest sz * [mod_authn_dbi] authn backend employing DBI * [mod_authn_mysql,file] use crypt() to save stack * [mod_vhostdb_dbi] allow strings and ints in config * add ci-build.sh * move ci-build.sh to scripts * [build] build fixes for AIX * [mod_deflate] Brotli support * [build] bzip2 default to not-enabled in build * [mod_deflate] fix typo in config option * [mod_deflate] propagate errs from internal funcs * [mod_deflate] deflate.cache-dir compressed cache * [mod_deflate] mod_deflate subsumes mod_compress * [doc] mod_compress -> mod_deflate * [tests] mod_compress -> mod_deflate * [mod_compress] remove mod_compress * [build] add --with-brotli to CI build * [core] server.feature-flags extensible config * [core] con layer plugin_ctx separate from request * [multiple] con hooks store ctx in con->plugin_ctx * [core] separate funcs to reset (request_st *) * [multiple] rename connection_reset hook to request * [mod_nss] func renames for consistency * [core] detect and reject TLS connect to cleartext * [mod_deflate] quicker check for Content-Encoding * [mod_openssl] read secret data w/ BIO_new_mem_buf * [core] decode Transfer-Encoding: chunked from gw * [mod_fastcgi] decode Transfer-Encoding: chunked * [core] stricter parsing of POST chunked block hdr * [mod_proxy] send HTTP/1.1 requests to backends * [tests] test_base64.c clear buf vs reset * [core] http_header_remove_token() * [mod_webdav] fix inadvertent string truncation * [core] add some missing standard includes * [mod_extforward] attempt to quiet Coverity warning * [mod_authn_dbi,mod_authn_mysql] fix coverity issue * scons: fix check environment * Add avahi service file under doc/avahi/ * [mod_webdav] fix fallback if linkat() fails * [mod_proxy] do not forward Expect: 100-continue * [core] chunkqueue_compact_mem() must upd cq->last * [core] dlsym for FAMNoExists() for compat w/ fam * [core] disperse settings.h to appropriate headers * [core] inline buffer_reset() * [mod_extforward] save proto per connection * [mod_extforward] skip after HANDLER_COMEBACK * [core] server.feature-flags to enable h2 * [core] HTTP_VERSION_2 * [multiple] allow TLS ALPN "h2" if "server.h2proto" * [mod_extforward] preserve changed addr for h2 con * [core] do not send Connection: close if h2 * [core] lowercase response hdr field names for h2 * [core] recognize status: 421 Misdirected Request * [core] parse h2 pseudo-headers * [core] request_headers_process() * [core] connection_state_machine_loop() * [core] reset connection counters per connection * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting * [core] connection_set_fdevent_interest() * [core] HTTP2-Settings * [core] adjust http_request_headers_process() * [core] http_header_parse_hoff() * [core] move http_request_headers_process() * [core] reqpool.[ch] for (request_st *) * [multiple] modules read reqbody via fn ptr * [multiple] isolate more con code in connections.c * [core] isolate more resp code in response.c * [core] h2.[ch] with stub funcs (incomplete) * [core] alternate between two joblists * [core] connection transition to HTTP/2; incomplete * [core] mark some error paths with attribute cold * [core] discard 100 102 103 responses from backend * [core] skip write throttle for 100 Continue * [core] adjust (disabled) debug code * [core] update comment * [core] link in ls-hpack (EXPERIMENTAL) * [core] HTTP/2 HPACK using LiteSpeed ls-hpack * [core] h2_send_headers() specialized for resp hdrs * [core] http_request_parse_header() specialized * [core] comment possible future ls-hpack optimize * [mod_status] separate funcs to print request table * [mod_status] adjust to print HTTP/2 requests * [core] redirect to dir using relative-path * [core] ignore empty field-name from backends * [mod_auth] fix crash if auth.require misconfigured (fixes #3023) * [core] fix 1-char trunc of default server.tag * [core] request_acquire(), request_release() * [core] keep pool of (request_st *) for HTTP/2 * [mod_status] dedicated funcs for r->state labels * [core] move connections_get_state to connections.c * [core] fix crash on master after graceful restart * [core] defer optimization to read small files * [core] do not require '\0' term for k,v hdr parse * [scripts] cert-staple.sh enhancements * [core] document algorithm used in lighttpd etag * [core] ls-hpack optimizations * [core] fix crash on master if blank line request * [core] use djbhash in gw_backend to choose host * [core] rename md5.[ch] to algo_md5.[ch] * [core] move djbhash(), dekhash() to algo_md.h * [core] rename splaytree.[ch] to algo_splaytree.[ch] * [core] import xxHash v0.8.0 * [build] modify build, includes for xxHash v0.8.0 * [build] remove ls-hpack/deps * [core] xxhash no inline hints; let compiler choose * [mod_dirlisting] fix config parsing crash * [mod_openssl] clarify trace w/ deprecated options * [doc] refresh doc/config/*/* * [core] code size: disable XXH64(), XXH3() * [doc] update README and INSTALL * [core] combine Cookie request headers with ';' * [core] log stream id with debug.log-state-handling * [core] set r->state in h2.c * [mod_ssi] update chunk after shell output redirect * [mod_webdav] preserve bytes_out when chunks merged * [multiple] inline chunkqueue_length() * [core] cold h2_log_response_header*() funcs * [core] update HTTP status codes list from IANA * [mod_wolfssl] standalone module * [core] Content-Length in http_response_send_file() * [core] adjust response header prep for common case * [core] light_isupper(), light_islower() * [core] tst,set,clr macros for r->{rqst,resp}_htags * [core] separate http_header_e from _htags bitmask * [core] http_header_hkey_get_lc() for HTTP/2 * [core] array.[ch] using uint32_t instead of size_t * [core] extend (data_string *) to store header id * [multiple] extend enum http_header_e list * [core] http_header_e <=> lshpack_static_hdr_idx * [core] skip ls-hpack decode work unused by lighttpd * [TLS] error if inherit empty TLS cfg from globals * [core] connection_check_expect_100() * [core] support multiple 1xx responses from backend * [core] reload c after chunkqueue_compact_mem() * [core] relay 1xx from backend over HTTP/2 * [core] relay 1xx from backend over HTTP/1.1 * [core] chunkqueue_{peek,read}_data(), squash * [multiple] TLS modules use chunkqueue_peek_data() * [mod_magnet] magnet.attract-response-start-to * [multiple] code reuse chunkqueue_peek_data() * [core] reuse r->start_hp.tv_sec for r->start_ts * [core] config_plugin_value_tobool() accept "0","1" * [core] graceful and immediate restart option * [mod_ssi] init status var before waitpid() * [core] graceful shutdown timeout option * [core] lighttpd -1 supports pipes (e.g. netcat) * [core] perf adjustments to avoid load miss * [multiple] use sock_addr_get_family in more places * [multiple] inline chunkqueue where always alloc'd * [core] propagate state after writing * [core] server_run_con_queue() * [core] defer handling FDEVENT_HUP and FDEVENT_ERR * [core] handle unexpected EOF reading FILE_CHUNK * [core] short-circuit connection_write_throttle() * [core] walk queue in connection_write_chunkqueue() * [core] connection_joblist global * [core] be more precise checking streaming flags * [core] fdevent_load_file_bytes() * [TLS] use fdevent_load_file_bytes() for STEK file * [core] allow symlinks under /dev for rand devices * [multiple] use light_btst() for hdr existence chk * [mod_deflate] fix potential NULL deref in err case * [core] save errno around close() if fstat() fails * [mod_ssi] use stat_cache_open_rdonly_fstat() * [core] fdevent_dup_cloexec() * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK * [core] stat_cache_path_isdir() * [multiple] use stat_cache_path_isdir() * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset * [core] limit num ranges in Range requests * [core] remove unused r->content_length * [core] http_response_parse_range() const file sz * [core] pass open fd to http_response_parse_range * [core] stat_cache_get_entry_open() * [core,mod_deflate] leverage cache of open fd * [doc] comment out config disabling Range for .pdf * [core] coalesce nearby ranges in Range requests * [mod_fastcgi] decode chunked is cold code path * [core] fix chunkqueue_compact_mem w/ partial chunk * [core] alloc optim reading file, sending chunked * [core] reuse chunkqueue_compact_mem*() * [mod_cgi] use splice() to send input to CGI * [multiple] ignore openssl 3.0.0 deprecation warns * [mod_openssl] migrate ticket cb to openssl 3.0.0 * [mod_openssl] construct OSSL_PARAM on stack * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls * [multiple] openssl 3.0.0 digest interface migrate * [tests] detect multiple SSL/TLS/crypto providers * [core] sys-crypto-md.h consistent interfaces * [wolfssl] wolfSSL_CTX_set_mode differs from others * [multiple] use NSS crypto if no other crypto avail * [multiple] stat_cache_path_stat() for struct st * [TLS] ignore empty "CipherString" in ssl-conf-cmd * [multiple] remove chunk file.start member * [core] modify use of getrlimit() to not be fatal * [mod_webdav] add missing update to cq accounting * [mod_webdav] update defaults after worker_init * [mod_openssl] use newer openssl 3.0.0 func * [core] config_plugin_value_to_int32() * [core] minimize pause during graceful restart * [mod_deflate] use large mmap chunks to compress * [core] stat_cache_entry reference counting * [core] FILE_CHUNK can hold stat_cache_entry ref * [core] http_chunk_append_file_ref_range() * [multiple] use http_chunk_append_file_ref() * [core] always lseek() with shared fd * [core] silence coverity warnings (false positives) * [core] silence coverity warnings in ls-hpack * [core] silence coverity warnings (another try) * [core] fix fd sharing when splitting file chunk * [mod_mbedtls] quiet unused variable warning * [core] use inline funcs in sys-crypto-md.h * [core] add missing declaration for NSS rand * [core] init NSS lib for basic crypto algorithms * [doc] change mod_compress refs to mod_deflate * [doc] replace bzip2 refs with brotli * [build] remove svnversion from versionstamp rule * [doc] /var/run -> /run * [multiple] test for nss includes * [mod_nss] more nss includes fixes * [mod_webdav] define _NETBSD_SOURCE on NetBSD * [core] silence coverity warnings (another try) * [mod_mbedtls] newer mbedTLS vers support TLSv1.3 * [mod_accesslog] update defaults after cycling log * [multiple] add some missing config cleanup * [core] fix (startup) mem leaks in configparser.y * [core] STAILQ_* -> SIMPLEQ_* on OpenBSD * [mod_wolfssl] use more wolfssl/options.h defines * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL * [mod_wolfssl] need to build --enable-alpn for ALPN * [mod_secdownload] fix compile w/ NSS on FreeBSD * [mod_mbedtls] wrap addtl code in preproc defines * [TLS] server.feature-flags "ssl.session-cache" * [core] workaround fragile code in wolfssl types.h * [core] move misplaced error trace to match option * [core] adjust wolfssl workaround for another case * [multiple] consistent order for crypto lib select * [multiple] include mbedtls/config.h after select * [multiple] include wolfssl/options.h after select * [core] set NSS_VER_INCLUDE after crypto lib select * [core] use system xxhash lib if available * [doc] refresh doc/config/conf.d/mime.conf * [meson] add matching -I for lua lib version * [build] prepend search for lua version 5.4 * [core] use inotify in stat_cache.[ch] on Linux * [build] detect inotify header * [mod_nss] update session ticket NSS devel comment * [core] set last_used on rd/wr from backend (fixes #3029) * [core] cold func for gw_recv_response error case * [core] use kqueue() instead of FAM/gamin on *BSD * [core] no graceful-restart-bg on OpenBSD, NetBSD * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks * [core] use struct kevent on stack in stat_cache * [core] stat_cache preprocessor paranoia * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check * [mod_maxminddb] fix config validation typo * [tests] allow LIGHTTPD_EXE_PATH override * [multiple] handle NULL val as empty in *_env_add (fixes #3030) * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031) * [build] check for xxhash in more ways * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031) * [core] http_response_buffer_append_authority() * [core] define SHA*_DIGEST_LENGTH macros if missing * [doc] update optional pkg dependencies in INSTALL * [mod_alias] validate given order, not sorted order * [core] filter out duplicate modules * [mod_cgi] fix crash if initial write to CGI fails * [mod_cgi] ensure tmp file open() before splice() * [multiple] add back-pressure gw data pump (fixes #3033) * [core] fix bug when HTTP/2 frames span chunks * [multiple] more forgiving config str to boolean (fixes #3036) * [core] check for __builtin_expect() availability * [core] quiet more request parse errs unless debug * [core] consolidate chunk size checks * [mod_flv_streaming] use stat_cache_get_entry_open * [mod_webdav] pass full path to webdav_unlinkat() * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail * [mod_fastcgi] move src/fastcgi.h into src/compat/ * [mod_status] add additional HTML-encoding * [core] server.v4mapped option * [mod_webdav] workaround for gvfs dir redir bug- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist anymore- Changed /etc/logrotate.d/lighttpd from init.d to systemd fix boo#1146452.- Remove deprecated GeoIP support (bsc#1156198) * drop mod_geoip subpackage- update to 1.4.55: * a multitude of bug fixes- update to 1.4.54 (boo#1111733): * behavior change: strict URL parsing and normalization (configurable) * performance enhancements * bug fixes - includes changes from 1.4.53: * TLS-ALPN-01 * systemd socket activation * bug fixes - includes changes from 1.4.52: * performance enhancements * bug fixes - includes changes from 1.4.51: * new module: mod_authn_pam * multiple security fixes + process headers after combining folded headers + mod_userdir security: skip username "." and ".." - includes changes from 1.4.50: * CVE-2018-19052: path traversal in mod_alias (boo#1115016) * security: use-after-free after invalid Range request * multiple bug fixes - Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722) - Switch to unmodified upstream tarball, add upstream signing keys and verify source signature- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut the build queues by allowing usage of systemd-mini- Revert that pgsql workaround for tumbleweed: pampering over issues like this is just hiding problems. A real fix was submitted to the postgresql package instead.- workaround for tumbleweed * update-alternatives not expanded in the build VM due to unknown reasons, thus /usr/bin/pg_config is meaningless- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in lighttpd_1.4.49-1.1.debian.tar.xz- Updated 'SSL Support' section in lighttpd.conf: TLSv1.2 only bsc#1087369- update to 1.4.49 + - next is 1.4.49 + [core] adjust offset if response header blank line + [mod_accesslog] %{canonical,local,remote}p (fixes #2840) + [core] support POLLRDHUP, where available (#2743) + [mod_proxy] basic support for HTTP CONNECT method (#2060) + [mod_deflate] fix deflate of file > 2MB w/o mmap + [core] fix segfault if tempdirs fill up (fixes #2843) + [mod_compress,mod_deflate] try mmap MAP_PRIVATE + [core] discard from socket using recv MSG_TRUNC + [core] report to stderr if errorlog path ENOENT (fixes #2847) + [core] fix base64 decode when char is unsigned (fixes #2848) + [mod_authn_ldap] fix mem leak when ldap auth fails (fixes #2849) + [core] warn if mod_indexfile after dynamic handler + [core] do not reparse request if async cb + [core] non-blocking write() to piped loggers + [mod_openssl] minor code cleanup; reduce var scope + [mod_openssl] elliptic curve auto selection (fixes #2833) + [core] check for path-info forward down path + [mod_authn_ldap] auth with ldap referrals (fixes #2846) + [core] code cleanup: separate physical path sub + [core] merge redirect/rewrite pattern substitution + [core] fix POST with chunked request body (fixes #2854) + [core] remove unused func + [doc] minor update to *outdated* doc + [mod_wstunnel] fix for frames larger than 64k (fixes #2858) + [core] fix 32-bit compile POST w/ chunked request body (#2854) + [core] add include sys/poll.h on Solaris (fixes #2859) + [core] fix path-info calculation in git master (fixes #2861) + [core] pass array_get_element_klen() const array * + [core] increase stat_cache abstraction + [core] open additional fds O_CLOEXEC + [core] fix CONNECT w strict header parsing enabled + [mod_extforward] CIDR support for trusted proxies (fixes #2860) + [core] re-enable overloaded backends w/ multi wkrs + [autoconf] reduce minimum automake version to 1.13 + [mod_auth] constant time compare plain passwords + [mod_auth] check that digest realm matches config + [core] fix incorrect hash algorithm impl + [doc] NEWS- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- new upstream release 1.4.48 + requires automake 1.14 + new mod_authn_sasl module - remove autoreconf call; was required for mod_geoip patch, which is now upstream - add cyrus-sasl-devel, package mod_authn_sasl- update to 1.4.47 + [core] stricter validation of request-URI begin + [core] fix 1.4.46 regression in config match + [core] normalize config addrs for != match + [core] normalize config addrs for eq and ne + [core] fix 1.4.46 regression in Last-Modified- new upstream release 1.4.46 - drop lighttpd-1.4.x_out_of_bounds_read.patch (fixed upstream) - use systemd, drop init script - drop support for suse_version <= 1210 - add some new modules and packages - drop __DATE__/__TIME__ sed hack (usage disabled upstream by default)- use php7 for TW (boo#1058101)- added lighttpd-1.4.x_out_of_bounds_read.patch: fix out of bounds read in mod_scgi (debian#857255)- make lighttpd user own /var/log/lighttpd/ to be able to write logs there- fix some rpmlint messages + update FSF address for lighttpd.init + install example scripts without +x to avoid pulling shell dependencies + W:file-contains-current-date /usr/sbin/lighttpd is a false positive; it only happens when the last-source-modified date is the same as the build date + I: binary-or-shlib-calls-gethostbyname has been forwarded upstream- update to 1.4.45 + - next is 1.4.45 + [mod_cgi] skip local-redir handling if to self (fixes #2779, #2108) + [mod_webdav] fix crash when plugin_ctx cleaned up (fixes #2780) + [mod_fastcgi] detect child exit, restart proactively + [mod_scgi] detect child exit, restart proactively + [TLS] ssl.read-ahead = "disable" for low mem (fixes #2778) + [doc] NEWS + [tests] update test skip count for !fcgi-responder + [tests] FCGI_Finish() final request before exit + [tests] give time for periodic jobs to detect exit + [mod_cgi] check cgi fd for num bytes ready to read- lighttpd-1.4.13_geoip.patch is long gone; it was replaced with mod_geoip-for-1.4.39.patch but is now included upstream- update to 1.4.44 + - next is 1.4.44 + [mod_scgi] fix segfault (fixes #2762) + [mod_authn_gssapi] fix memory leak + [config] warn if mod_authn_ldap,mysql not listed + [mod_magnet] fix magnet_cgi_set() set of env vars (fixes #2763) + [mod_cgi] FreeBSD 9.3/MacOSX does not have pipe2() (fixes #2765) + [mod_extforward] fix crash on invalid IP (fixes #2766) + [mod_fastcgi] fix segfault if all backends down (fixes #2768) + [mod_cgi] fix out of sockets error for POST to CGI (fixes #2771) + [mod_auth] compile fix for Mac OS X XCode (fixes #2772) + [mod_authn_gssapi] better resource cleanup + [core] compile fix for Mac OS X 10.6 (old) (fixes #2773) + fix race in dynamic handler configs (reentrancy) (fixes #2774) + [mod_authn_mysql] close mysql_conn in cleanup + [mod_webdav] compile fix when locking not enabled + load mod_auth & mod_authn_file in sample/test.conf + comment out auth.backend.ldap.* in tests/*.conf + [mod_fastcgi,mod_scgi] warn if invalid "bin-path" + RAND_pseudo_bytes() is deprecated in openssl 1.1.0 + openssl 1.1.0 init and cleanup + [mod_cgi] remove direct calls to network_backend* + [build] build network_*.c into lighttpd executable + suggest inclusion of mod_geoip... before mod_ssi. + set systemd settings similar to lighttpd2 + [doc] remove reference to Linux rt-signals + [mod_authn_gssapi] fix missing error ret, coverity + [core] rename li_rand() to li_rand_pseudo_bytes() + remove #include "stream.h" where not used + [mod_cml] include lua headers before base.h + [core] combine duplicated connection reset code + [mod_ssi] produce content in subrequest hook + [core] remove srv->entropy[] + [core] defer li_rand_init() until first use + [core] permit connection-level state in modules + [mod_dirlisting] render dirlisting as HTML (fixes #2767) + [mod_proxy] replace HTTP Host sent to backend (fixes #2770) + [mod_ssi] basic recursive SSI include virtual (fixes #536) + [mod_ssi] implement, ignore + [core] consolidate duplicated read-to-close code + [core] fix segfault when parsing a bad config file + [core] support Transfer-Encoding: chunked req body (fixes #2156) + [autobuild] set NO_RDYNAMIC=yes for midipix + [mod_proxy] proxy.balance = "sticky" option (fixes #2117) + [mod_secdownload] warn if SHA used w/o SSL crypto + [build] compile fixes for AIX + [build] check for pipe2() at configure time + [mod_evhost] fix an incorrect error trace + [tests] mark tests/docroot/www/*.pl scripts a+x + [mod_proxy] proxy.replace-http-host enable/disable + [mod_cgi] fall back to pipe() if pipe2() fails + fix SCons fullstatic build with glibc pthreads + [TLS] openssl 1.1.0 makes SSL_OP_NO_SSLv2 no-op + [doc] NEWS- update to 1.4.43 + - next is 1.4.43 + [autobuild] remove mod_authn_gssapi dep on resolv + [mod_deflate] ignore '*' in deflate.mimetypes + minor: make packdist.sh more convenient for me + [autobuild] omit module stubs when missing deps + [autobuild] rm module stub code for missing deps + [TLS] openssl 1.1.0 hides struct bignum_st + [autobuild] move http_cgi_ssl_env() for Mac OS X (fixes #2757) + [core] use paccept() on NetBSD (replace accept4()) + [TLS] remote IP conditions are valid for TLS SNI (fixes #2272) + [doc] lighttpd-angel.8 (fixes #2254) + [cmake] build fcgi-auth, fcgi-responder for tests + [mod_accesslog] %{ratio}n logs compression ratio (fixes #2133) + [mod_deflate] skip deflate if loadavg too high (fixes #1505) + [mod_expire] expire by mimetype (fixes #423) + [mod_evhost] partial matching patterns (fixes #1194) + [mod_evhost] mod-evhost.t tests (#1194) + build: use CC_FOR_BUILD for lemon when cross-compiling + [lemon] standalone; remove #include "first.h" + [mod_dirlisting] config header and readme files + [config] warn if mod_authn_ldap,mysql not listed + fix FastCGI, SCGI, proxy reconnect on failure + [core] network_open_file_chunk() temp file opt + [mod_rewrite] add more info in error log msg + [core] fix fd leak when using libev (fixes #2761) + [core] fix potential streaming tempfile corruption (fixes #2760) + minor: coverity comments + [mod_scgi] fix prefix matching to always match url + move script to doc/scripts/ax_prog_cc_for_build.m4 + [autobuild] adjust Makefile.am for FreeBSD + [core] check fcntl O_APPEND succeeds w/ mkstemp() + [doc] NEWS + [autobuild] add lemon.c to src/Makefile.am + [autobuild] build fix for lemon.c + [autobuild] put ax_prog_cc_for_build.m4 in top directory + [scons] workaround FreeBSD11 fullstatic link error + [scons] only apply FreeBSD11 workaround on FreeBSD + [mod_cgi] FreeBSD 9.3 does not have pipe2() + [build] move some build scripts to scripts/ + [autotools] fix configure.ac for opensuse 13.2 + [build] fix warning for (potentially) unused func- package new modules - remove mod_geoip_for_1.4.40.patch- update to 1.4.42 + - next is 1.4.42 + [TLS] SSL_shutdown() only if handshake finished + [mod_proxy,mod_scgi] shutdown remote only if local (#2743) + [core] check if client half-closed TCP if POLLHUP (#2743) + [core] enforce wait for POLLWR after EINPROGRESS (fixes #2744) + [core] do not enter handler twice after read body + [core] proxy,scgi omit shutdown() to backend (fixes #2743) + [mod_dirlisting] dirlist does not handle POST + [mod_dirlisting] js column sort for dirlist table (fixes #613, fixes #2315) + [mod_auth] Digest auth fails after rewrite (fixes #2745) + [mod_auth] refactor out auth backend code + [mod_auth] refactor out auth backend code + [mod_auth] refactor out auth backend code + [mod_auth] extensible interface for auth backends + [mod_auth] extensible interface for auth backends + [core] better DragonFlyBSD support (fixes #2746) + [mod_auth] include base.h for USE_OPENSSL def + [mod_auth] support CRYPT-MD5-NTLM algorithm (fixes #1743) + [mod_auth] terminate salt for CRYPT-MD5-NTLM + [core] fix crash if ready events on abandoned fd (fixes #2748) + fix mis-cast in unused code + [mod_auth] http_auth_md5_hex2bin() + [mod_auth] remove empty mod_auth.h + [mod_auth] mod_authn_mysql.c MySQL auth backend (fixes #752, fixes #1845) + [mod_cgi] permit CGI exec of unreadable files (fixes #2374) + [mod_uploadprogress] add to default build + [mod_geoip] add to default build (fixes #2705, fixes #2101, fixes #2092, fixes #2025, fixes #1962, fixes #1938) + [mod_fastcgi] Authorizer support with Responder (fixes #321, fixes #322) + [tests] test coverage for issues (#321, #322) + dynamic handlers store debug flag in handler_ctx + [mod_fastcgi] allow authorizer, responder for same path/ext (#321) + backport mod_deflate to lighttpd 1.4 (fixes #1824, fixes #2753) + [autobuild] test_configfile might need vector.c (fixes #2752) + remove unused sys-mmap.h from stat_cache.c + [mod_deflate] fix longjmp clobber compiler warning + remove unused array type TYPE_COUNT data_count + [mod_auth] structured data, register auth schemes + [mod_auth] mod_authn_gssapi Kerberos auth backend (fixes #1899) + silence warnings from clang ccc-analyzer + [autobuild] skip two new tests if no fcgi-auth + [SCons] define with_krb5 for SCons build + [SCons] fix syntax error in SConstruct + [SCons] define with_geoip for SCons build + [CMake] fix clang -Wcast-align warnings in lemon.c + remove excess initializers (fix compiler warnings) + fix errors detected by Coverity Scan + performance: use Linux extended syscalls and flags + [mod_scgi] add uwsgi protocol support + [mod_auth] refactor LDAP code into smaller funcs + [mod_auth] HTTP Basic auth backends also do authz (#1817) + [mod_auth] ldap filter subst user for multiple '$' (fixes #1508) + [mod_auth] permit specifying ldap DN; skip search (fixes #1248) + [autobuild] update module/feature report + [cmake] build mod_authn_gssapi if WITH_KRB5 + DragonFlyBSD defines __DragonFly__ (#2746) + [mod_auth] fix printing of IP in error trace + quiet coverity warning + [mod_mysql_vhost] support multiple '?' replacement (fixes #2163) + [core] make server.max-request-size scopeable (#1901) + [core] server.max-request-field-size (fixes #2130) + [core] optional condition in config "else" clause (fixes #1268) + [core] restrict where config "else" clauses occur (#1268) + silence warnings from clang ccc-analyzer + consistent, shared code to create CGI env + [TLS] replace env entries in https_add_ssl_entries + [TLS] set SSL_CLIENT_M_SERIAL w/ client cert SN (fixes #2268) + [TLS] set SSL_CLIENT_VERIFY w/ client cert (#1288, #2693) + [TLS] set SSL_PROTOCOL, SSL_CIPHER* (fixes #2511) + [core] rand.[ch] to use better RNGs when available + [mod_cgi] fix pipe_cloexec() when no O_CLOEXEC + ignore return value from fcntl() FD_CLOEXEC + silence warnings from clang ccc-analyzer + fix SCons build + build w/o compiler warnings if no zlib or bz2lib + parallelize dist package build (packdist.sh) + [doc] NEWS + quiet coverity warning + add random() to list of rand() fallbacks- update to 1.4.41 + - next is 1.4.41 + remove long-deprecated, non-functional config opts + [config] inherit server.use-ipv6 and server.set-v6only (fixes #678) + [build] allow AUTHOR, KEYID overrides to packdist + [mod_auth] fix Digest auth to be better than Basic (fixes #1844) + [doc] update memcache references to memcached + [mod_ssi] fix #config sizefmt="bytes" + fix some warnings reported by cppcheck + workaround clang compiler warning + [autobuild] move inet_pton detection later + [core] #include for FIONREAD (fixes #2726) + [autobuild] clock_gettime() -lrt with glibc < 2.17 + minor: spelling changes in some comments/messages + [security] do not emit HTTP_PROXY to CGI env + [build_cmake] clock_gettime() -lrt w/ glibc < 2.17 (fixes #2737) + [core] avoid spurious trace and error abort + [core] stay in CON_STATE_CLOSE until done with req + [core] $HTTP["remoteip"] must handle IPv6 w/o [] + [mod_status] show keep-alive status w/ text output (fixes #2740) + do not set REDIRECT_URI in mod_magnet, mod_rewrite (#2738) + revert 1.4.40 swap of REQUEST_URI, REDIRECT_URI (fixes #2738) + [core] permit IPv6 address scope identifier + [core] consolidate duplicated response_end code + [TLS] better handling of SSL_ERROR_WANT_READ/WRITE + [TLS] read all available records from SSL_read() + [core] try AF_INET after AF_INET6 if use-ipv6 + [core] fix result copy from getaddrinfo() + [core] set chunkqueue tempdirs at startup + [core] check if EAI_ADDRFAMILY is defined + [core] set chunkqueue tempdirs at startup /var/tmp + [security] ensure gid != 0 if server.username set (fixes #2725) + [security] disable stat_cache if !follow-symlink (fixes #2724) + [core] fix buffer_copy_string_hex() assert (fixes #2742) + fix buffer.c comments to match encoded_chars_* + [security] encode quoting chars in HTML and XML + [cmake] always define _GNU_SOURCE + [cmake] enable warnings for GCC and Clang + [cmake] set cmake_minimum_required to 2.8.2 + [doc] NEWS- update to 1.4.40 + - next is 1.4.40 + [mod_ssi] enhance support for ssi vars + add handling for lua 5.2 and 5.3 (fixes #2674) + use libmemcached instead of deprecated libmemcache + add force_assert for more allocation results + cleanup dead keyvalue code + [autobuild] fix lua configure error handling + [mod_cgi] use MAP_PRIVATE to mmap temporary file instead of MAP_SHARED (fixes #2715) + [core] do not send SIGHUP to process group unless server.max-workers is used (fixes #2711) + [mod_cgi] edge case chdir "/" when docroot "/" (fixes #2460) + fix links to online docs in template config files + [mod_cgi] issue trace and exit if execve() fails (closes #2302) + [configparser] don't continue after parse error (fixes #2717) + [core] never evaluate else branches until the previous branches are aready (fixes #2598) + [core] fix conditional cache handling + [core] improve conditional enabling (thx Gwenlliana, #2598) + [buffer] use explicit integer promotion to make the code more readable + [config] extend duplicate-array-key error (fixes #2704) + [mod_compress] case-insensitive content-codings (fixes #2645) + [plugins] don't include dlfcn.h if not needed (fixes #2548) + [mod_fastcgi] 404 for X-Sendfile file not found (fixes #2474) + [mod_cgi] send 500 if CGI ends and there is no response (fixes #2542) + [mod_cgi] consolidate CGI cleanup code + [mod_cgi] simplify mod_cgi_handle_subrequest() + [mod_cgi] kill CGI if fail to write request body + [mod_proxy] use case-insensitive comparision to filter headers, send Connection: Close to backend (fixes #421) + [mod_dirlisting] dir-listing.hide-dotfiles = "enabled" by default (fixes #1081) + [mod_rewrite] fix return type of process_rewrite_rules + [mod_secdownload] fix buffer overflow in secdl_verify_mac (reported by Fortify Open Review Project) + [mod_fastcgi,mod_scgi] fix leaking file-descriptor when backend spawning failed (reported by Fortify Open Review Project) + [core] improve array API to prevent theoretical memory leaks + [core] rename variable in array.c + [core] refactor array search; raise array size limit to SSIZE_MAX + [core] fix memory leak in configparser_merge_data + [core] provide array_extract_element and use it + [core] configparser: error on duplicate keys in array merge (fixes #2685) + [core] more careful parse of $SERVER["socket"] config str (prepare #2204) + [core] accept $SERVER["socket"] without port, use server.port as fallback (fixes #2204) + [mod_magnet] define lua_pushglobaltable (for lua5.1) and use it (fixes #2719) + [ssl] support disabling ssl.verifyclient.activate in SNI callback (fixes #2531) + restart (some) syscalls after SIGCHLD interrupted them; should fix LDAP problems (fixes #2464) + [core] log remote address on request timeouts (fixes #652) + [autobuild] use AC_CANONICAL_HOST instead of AC_CANONICAL_TARGET (fixes #1866) + [core] fix request_start in keep-alive requests to mark time when received first byte (fixes #2412) + [core] truncate pidfile on exit (fixes #2695) + consistent inclusion of config.h at top of files (fixes #2073) + [autobuild] include first.h in make dist + [core] add generic vector implementation + [core] replace array weakref with vector + [base64] fix crash due to broken force_assert + [unittests] add test_buffer and test_base64 unit tests + [base64] fix another crash due to broken force_assert conditions + [buffer] refactor buffer_path_simplify (fixes #2560) + [http_auth/mod_fastcgi] check get_http_*_name() for NULL return (#2583) + validate return values from strtol, strtoul (fixes #2564) + add NEWS entry for previous commit + [mod_ssi] Add SSI vars SCRIPT_{URI,URL} and REQUEST_SCHEME (fixes #2721) + [config] warn if server.upload-dirs has non-existent dirs (fixes #2508) + [mod_proxy] accept LF delimited headers, not just CRLF (fixes #2594) + [core] wait for grandchild to be ready when daemonizing (fixes #2712, thx pasdVn) + [core] respond 411 Length Required if request has Transfer-Encoding: chunked (fixes #631) + [core] fixed the loading for default modules if they are specified explicitly + [core] lighttpd -tt performs preflight startup checks (fixes #411) + [stat] mimetype.xattr-name global config option (fixes #2631) + [configparser] fix small leak on config failure + [mod_webdav] allow Depth: Infinity lock on file (fixes #2296) + [mod_status] use snprintf() instead of sprintf() + pass buf size to li_tohex() + use li_[iu]tostrn() instead of li_[iu]tostr() + [stream] fstat() after open() to obtain file size + [core] clean up srv before exiting for lighttpd -[vVh] + [mod_fastcgi,mod_scgi] check for spawning on same unix socket (fixes #319) + [mod_cgi] always set QUERY_STRING (fixes #1339) + [mod_auth] send charset="UTF-8" in WWW-Authenticate (fixes #1468) + [mod_magnet] rename var for clarity (fixes #1483) + [mod_extforward] reset cond_cache for scheme (fixes #1499) + [mod_webdav] readdir POSIX compat (fixes #1826) + [mod_expire] reset caching response headers for error docs (fixes #1919) + [mod_status] page refresh option (fixes #2170) + [mod_status] table w/ count of con states (fixes #2427) + [mod_dirlisting] class for dir (fixes #2304) + skip spawning backends for preflight tests (#2642) + [core] define __STDC_WANT_LIB_EXT1__ (fixes #2722) + [core] setrlimit max-fds <= rlim_max for non-root (fixes #2723) + [mod_ssi] config ssi.conditional-requests + [mod_ssi] config ssi.exec (fixes #2051) + [mod_redirect,mod-rewrite] short-circuit if blank replacement (fixes #2085) + [mod_indexfile] save physical path to env (fixes #448, #892) + [core] open fd when appending file to cq (fixes #2655) + [config] server.listen-backlog option (fixes #1825, #2116) + [core] retry tempdirs on partial write, ENOSPC (fixes #2588) + untangle overly complex control flow logic + defer reading request body until handle subrequest (fixes #2541) + mv funcs from connections.c to connections-glue.c + defer reading request body until handle subrequest + always poll for client POLLHUP/POLLERR events (fixes #399) + remove handle_joblist hook + handlers can read response before sending req body (fixes #131, #2566) + [mod_cgi] asynchronous send of request body to CGI + improve dynamic handler control flow logic + [doc] add mimetype.use-xattr to conf.d/mime.conf + [doc] enhance error msg for backend server config + [doc] add ref to RFC 7232 for conditional requests + make (compile and link) cleanly under cygwin + [core] compile with upcoming openssl 1.1.0 release (fixes #2727) + fix some warnings reported by static analysis tool + [core] set REDIRECT_STATUS to error_handler_saved_status (fixes #1828) + remove unused con->error_handler member + [core] server.error-handler new directive for error pages (fixes #2702) + set REDIRECT_URI in mod_rewrite, mod_magnet + [doc] add server.error-handler + server.error-handler new directive for error pages + [core] support IPv6 in $HTTP["remote-ip"] CIDR cond match (fixes #2706) + [doc] NEWS + [core] http_response_send_file() shared code (#2017) + [mod_fastcgi] use http_response_xsendfile() (fixes #799, fixes #851, fixes #2017, fixes #2076) + [mod_scgi] X-Sendfile feature (fixes #2253) + [mod_cgi] X-Sendfile feature (fixes #2313) + [mod_cgi,mod_fastcgi,mod_scgi] X-Sendfile features + [mod_webdav] lseek,read if fs can not mmap (#2666, fixes #962) + [mod_compress] use mmap and trap SIGBUS (#2666, fixes #1879) + fallback to lseek()/read() if mmap() fails (#fixes 2666) + [mod_auth] skip blank lines and comment lines (fixes #2327) + [core] fallback to write if sendfile not supported (fixes #471, #987) + minor: add missing #include + [core] preserve PATH_INFO case on case-insensitive fs (fixes #406) + [doc] add mimetype.use-xattr to create-mime.conf.pl + [doc] NEWS + [mod_ssi, mod_cml] set DOCUMENT_ROOT to basedir (fixes #2383) + [core] cmd line opt to shutdown after idle time limit (fixes #2696) + [network] separate addr trans from socket creation + [core] lighttpd -1 handles single request on stdin socket (fixes #1584) + lighttpd run modes for idle timeout, one-shot + [mod_fastcgi,mod_scgi] IPv6 support (fixes #2372) + [mod_status] add JSON output option (fixed #2432) + [mod_webdav] map COPY/MOVE Destination to aliases (fixes #1787) + [mod_webdav] improve PROPFIND,PROPPATCH (#1818, #1953) + [mod_webdav] improve PROPFIND,PROPPATCH; map COPY/MOVE Destination + [doc] NEWS + reset response headers, write_queue for error docs + fix typo in new cgi.x-sendfile directives + clean up oneshot_fd resource upon startup error + minor: fix compiler warning for extra ';' + build with libressl + [core] fix IPv6 address + port parsing (#2204) + static build instructions using SCons or make + [core] fix config merge of array lists + [core] simplify config merge of array lists + [core] add default modules while processing server config + [mod_auth] preserve WWW-Authenticate for error docs (fixes #2730) + check close() return code after writing to file + [doc] NEWS + adjustments for openssl 1.1.0 pre-release + [config] support include file glob (fixes #1221) + [mod_evasive] 302 redirect option if limit reached (fixes #2199) + [build] enhancements for cross-compiling (fixes #2276) + [mod_accesslog] report aborted con state with %X (fixes #1890) + [mod_ssi] fix SSI statement parser + [mod_ssi] include relative to alias,userdir (fixes #222) + [mod_ssi] add PCRE_* options to constrain regex + [mod_ssi] more flexible quoting (fixes #1768) + [core] wrap IPv6 literal in "[]" in redirect URL + [mod_ssi] fix parse of tag across buf boundary (fixes #2732) + [mod_cgi,mod_scgi] X-Sendfile sets file_started (fixes #2733) + [mod_fastcgi] no chunked response w/ X-Sendfile (fixes #2733) + [config] opts for http header parsing strictness (fixes #551, fixes #1086, fixes #1184, fixes #2143, #2258, #2281, fixes #946, fixes #1330, fixes #602, #1016) + [config] normalize IP strings in lighttpd.conf + [build_cmake] use MODULE on Mac OS X (fixes #1761) + minor: quiet some compiler warnings + use buffer_string_set_length() to truncate strings + use buffer_string_set_length() to truncate strings + [config] server.bsd-accept-filter option + [mod_webdav] create file w/ LOCK request if ENOENT + [doc] NEWS + [mod_webdav] getetag and lockdiscovery live props + [mod_webdav] create file w/ LOCK request if ENOENT + [core] buffer large responses to tempfiles (fixes #758, fixes #760, fixes #933, fixes #1387, #1283, fixes #2083) + [core] stream response to client (#949) + [TLS] release openssl buffers as used (fixes #1265, fixes #1283, #881) + [config] config options to stream request/response (#949, #376) + [core] option to stream request body to backend (fixes #376) + separate routines for reading output from backends + [core] option to stream response body to client (fixes #949, #760, #1283, #1387) + drain backend socket/pipe bufs upon FDEVENT_HUP + http_response_backend_error() + remove excess calls to joblist_append() + defer choosing "Transfer-Encoding: chunked" + asynchronous, bidirectional streaming options + fix errors detected by Coverity Scan + [build] update Makefile.am EXTRA_DIST w/ new files + chunkqueue_append_chunkqueue() + fix errors detected by Coverity Scan + [cygwin] fix mod_proxy and mod_fastcgi ioctl use + use con->conf.server_tag in modules + [mod_webdav] remove excess SQL param to UNLOCK + [doc] NEWS + graceful shutdown without unnecessary 1 sec delay + fix error handling for portability (NetBSD) + [core] disable Nagle algorithm (TCP_NODELAY) + [core] add declarations to fdevent.h (#2373) + [build] add $(ATTR_LIB) to liblightcomp_la_LIBADD + [cygwin] minor: fix compiler warning + [tests] remove dependency on CGI.pm + [core] fix s6_addr type-punned compiler warning + [TLS] fix return value checks during cert init + [core] fix server.max-request-size to be precise (fixes #2131) + [mod_webdav] fix proppatch mem leak, other fixes (#fixes 1334, #fixes 2000) + [autobuild] CMake check for struct tm tm_gmtoff (fixes #2014) + [core] remove assert in fdevent_unregister() + [mod_uploadprogress] fix mem leak (#1858) + [core] make server.max-request-size scopeable (fixes #1901) + [mod_fastcgi,mod_scgi] check for spawning on same unix socket (#319) + [mod_fastcgi,mod_scgi] check for spawning on same unix socket (#319) + fix gcc 6.1.1 compiler warn misleading-indentation + [mod_accesslog] %a %A %C %D %k %{}t %{}T (fixes #1145, fixes #1415, fixes #2081) + [mod_access] new directive url.access-allow (fixes #1421) + [core] fdevent_libev: update use of ev_timer + [core] fdevent_libev: workaround compiler warning + [tests] remove some tests duplicated in mod-cgi.t + [mod_cgi] handle local redirect response (fixes #2108) + update lighttpd -h + [doc] add self to AUTHORS (discussed w/ stbuehler) + [doc] NEWS- update to 1.4.39 + -next is 1.4.38 + fix packdist.sh output links + [stat-cache] fix handling of collisions, might have returned wrong data (fixes #2669) + [core] allocate at least 4k buffer for incoming data + [core] fix search for header end if split across chunks (fixes #2670) + [core] check configparserAlloc() result with force_assert + [mod_auth] implement and use safe_memclear, using memset_s or explicit_bzero if available + [core] don't buffer request bodies smaller than 64k on disk + add force_assert for many allocations and function results + [mod_secdownload] use a hopefully constant time comparison to check hash (fixes #2679) + [config] check config option scope; warn if server option is given in conditional + [core] revert increase of temp file size back to 1MB, provide a configure option "server.upload-temp-file-size" instead (fixes #2680) + [core] add '~' to safe characters in ENCODING_REL_URI/ENCODING_REL_URI_PART encoding + [core] encode path with ENCODING_REL_URI in redirect to directory (fixes #2661, thx gstrauss) + [core] refactor base64 functions into separate file + [mod_secdownload] add required algorithm option; old behaviour available as "md5", new options "hmac-sha1" and "hmac-sha256" + [autobuild] fix missing header in tar ball + mod-auth.t: no crypt md5 for darwin + [tests] test apr-md5 in mod-auth.t + [tests] do not half-close socket before having received the response (fixes #2688) + [mod_fastcgi/mod_scgi] zero sockaddr structs before use (fixes #2691) + [network] add darwin-sendfile backend (fixes #2687) + [core] show correct crypt support result (fixes #2690) + - next ist 1.4.39 + [core] fix memset_s call (fixes #2698) + [chunk] fix use after free / double free (fixes #2700) + [scons] fix fullstatic build- Add perl(CGI) BuildRequires in order to be able to pass the test suite.- update to 1.4.37 + - next is 1.4.37 + [mod_proxy] remove debug log line from error log (fixes #2659) + [mod_dirlisting] fix dir-listing.set-footer not showing + fix out-of-filedescriptors when uploading "large" files (fixes #2660, thx rmilecki) + increase upload temporary chunk file size from 1MB to 16MB + fix undefined integer shift + rewrite network (write) backends + [cmake] lowercase commands, whitespace cleanup, remove clutter in else(...), endif(...), endforeach(...) + [cmake] cleanup cache variables if features get deactivated + fix some unchecked return value warnings + maintain cq->bytes_in in chunk API; keep bytes_out/bytes_in synced + [cmake] don't put date into config.h (not used anyway), only unset local vars for disabled features instead of clearing cache + [cmake] fix FreeBSD linker bug + [tests] search for perl in PATH instead of /usr/bin; whitespace + test config cleanups + [kqueue] fix kevent call + [tests] fix warning about newline in filename + [autoconf] define HAVE_CRYPT when crypt() is present + [bsd xattr] fix compile break with BSD extended attributes in stat_cache + [mod_dirlisting] remove sys/syslimits.h; base.h already includes limits.h + small README for FreeBSD build setup + [build] put --as-needed into linker flags instead of cflags + [mod_cgi] rewrite mmap and generic (post body) send error handling + [mmap] fix mmap alignment + [plugins] when modules are linked statically still only load the modules given in the config + [scons] various improvements + [mmap] handle SIGBUS in network; those get triggered if the file gets smaller during reading + [scons] fix crypt() detection, other improvements + [scons] fix build + fix some warnings found by coverity ("leak" in setup phase, not catching too long unix socket paths in mod_proxy) + packdist.sh: use fakeroot for make dist to have root owned files in tar- do not use the full url as we are reusing the debian tarball.- update to 1.4.36 + [configfile] fix reading uninitialized variable (found by Willian B.) + [dist] add dist-xz, remove dist-bzip2, allow ~rc appendix in packdist.sh- update to 1.4.36~rc1 + - next is 1.4.36 + use keep-alive timeout while waiting for HTTP headers; use always the read timeout while waiting for the HTTP body + fix bad shift in conditional netmask ".../0" handling + add more mime types and a script to generate mime.conf (fxies #2579) + fix typo in NEWS entry for #2579 + add support for (Free)BSD extended attributes + [build] use fortify flags with "extra-warnings" + [mod_dirlisting,mod_redirect,mod_rewrite] abort config parsing if pcre-compile fails or isn't available + [ssl] disable SSL3.0 by default + Fixed typo found by openSUSE user (boo# 907709) + add NEWS entry for previous commit + [network] fix compile break in calculation of sockaddr_un size if SUN_LEN is not defined (fixes #2609) + [connections] fix bug in connection state handling + print backtrace in assert logging with libunwind + fix buffer, chunk and http_chunk API + Remove chunkqueue_get_{append,prepend}* API + Remove buffer_prepare_copy() and buffer_prepare_append() + [tests] improve valgrind and strace TRACEME, disable condition logging in normal configs + Use buffer API to read and modify "used" member + rename buffer_append_long_hex to buffer_append_uint_hex + [buffer] constify some parameters + [bitset] unused -> remove + remove unused stuff from server.h + [crc32] fix method signature (const pointer) + [tests] fix undefined index warning in sendfile.php + [mod_auth] use crypt_r instead of crypt if available + fix error message for T_CONFIG_ARRAY config values if an entry value is not a string + fix segfaults in many plugins if they failed configuration + escape all strings for logging (fixes #2646 log file injection, reported by Jaanus Kääp) + add some until now missing files to dist tarball + minor spelling fixes + fix hex escape in accesslog (fixes #2559) + show extforward re-run warning only with debug.log-request-handling (fixes #2561) + parse If-None-Match for ETag validation (fixes #2578) + check pointer before usage in new etag compare + fix memory leak in mod_status when no counters are set (found by coverity) + #ifdef all parts belonging to the connection-state debugging + [mod_magnet] fix segfault when accessing not existing lighty.req_env[] entry (found by coverity) + fix segfault when temp file for upload couldn't be created (found by coverity) + check fcgi_env_add return value (found by coverity) + mime.conf: add some new mime types, remove .dat, .sha1, .md5, update .vcf + [mod_proxy] add unix domain socket support (fixes #2653)- define and use pkg_name, pkg_version, tarball_version - use debian orig tarball - fix download url- Deb .orig.tar.bz2 -> regular tar, hopefully it shall work.- Spec-cleanify and remove sle9 support fun - Fix rpmlint warnings - Use tarball fetchable from upstream - Remove all obsolete conditions- Remove the debian changelog also from the .spec file SOURCES- Remove debian changelog as it collides with factory checkers- fix bashisms in pre script/bin/sh/bin/sh/bin/sh/bin/shold-atreju3 1664452078  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefg1.4.67-bp154.2.6.11.4.67-bp154.2.6.11.4.67-bp154.2.6.1 lighttpdconf.daccess_log.confauth.confcgi.confdebug.confdeflate.confdirlisting.confevhost.confexpire.conffastcgi.confmime.confmod.templateproxy.confscgi.confsecdownload.confsimple_vhost.confssi.confstatus.confuserdir.conflighttpd.confmodules.confvhosts.dvhosts.templatelighttpdlighttpd.servicelighttpdmod_access.somod_accesslog.somod_ajp13.somod_alias.somod_auth.somod_authn_dbi.somod_authn_file.somod_cgi.somod_deflate.somod_dirlisting.somod_evasive.somod_evhost.somod_expire.somod_extforward.somod_fastcgi.somod_indexfile.somod_openssl.somod_proxy.somod_redirect.somod_rewrite.somod_scgi.somod_secdownload.somod_setenv.somod_simple_vhost.somod_sockproxy.somod_ssi.somod_staticfile.somod_status.somod_uploadprogress.somod_userdir.somod_usertrack.somod_vhostdb.somod_wstunnel.solighttpdlighttpd-angelrclighttpdlighttpdAUTHORSNEWSREADMEaccess.txtaccesslog.txtalias.txtauthentication.txtcgi.txtconfiguration.txtexpire.txtfastcgi-state.txtfastcgi.txtfeatures.txtperformance.txtplugins.txtproxy.txtredirect.txtrewrite.txtscgi.txtsecdownload.txtsecurity.txtsetenv.txtsimple-vhost.txtskeleton.txtspawn-php.shssi.txtssl.txtstate.txtstatus.txttraffic-shaping.txtuserdir.txtsysconfig.lighttpdlighttpd-angel.8.gzlighttpd.8.gzlighttpdcompresslighttpdsocketslighttpd/etc//etc/lighttpd//etc/lighttpd/conf.d//etc/lighttpd/vhosts.d//etc/logrotate.d//usr/lib/systemd/system//usr/lib64//usr/lib64/lighttpd//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/lighttpd//usr/share/fillup-templates//usr/share/man/man8//var/cache//var/cache/lighttpd//var/lib//var/lib/lighttpd//var/log/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:17679/openSUSE_Backports_SLE-15-SP4_Update/a3b7793f9e864ab60dcd2a0224817e55-lighttpd.openSUSE_Backports_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linux  !"#$%&'(()*++directoryASCII textHTML document, ASCII textC source, ASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b72d99a2c23e2dc9592f99fd53f99aff3ded5ca7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ed2495d4ba5dd0327998b620243f0e37bae2b95, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7bca3cfdd2800a78fa88ed1689de81be715cbeae, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=285bd5bc3dc46554c6e4aae340536b5f70b0d4b2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f0b89beb299503c165e21923b0838cf6fc84d2c6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=913ed71a725ccdb554b733fbb73beb472e422845, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3b5377c3a2b99e53a18de90e91f67300adbcc253, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b952103ab899a4f51d11d368006c79ed7e7e3e79, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=715d0863a131c034a6f00168a8c20da434532c61, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f71595cdb952fdb3b3f3c504ddffda13fb523197, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ba77ac15b97108fb4a23a632c1d37be8fe796152, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=081441ae2ee8c5e916f2690a957ac53a304859e9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5f3b3a6df85b845803f4005621c7a49563398a0a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cec31b190cfaec395e7b066a0161eac6185c3d15, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=050961d3524800f2bcea5151ac97b0c475e4f8e2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0cdc15bbfccd174c0adae4d5e48cba1958ac5582, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=03cb3952e8fe6698ec9cfcc031595c07680d2248, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e2e4f6eb9a99d5a302f9da80a9f7b8d1d0511841, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=264cbc470415371fcb06e11e0f0f529132b2c2ab, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=57ffbec2809d25ff84b2c769364e8c3a5f9e99d6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6227756ac098a26b8103c1fadb0934218947c4e0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6fea13bbd4e7ca8ec56d9b96657039adc821a2df, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2a1cd5479c92e738e5b540275d638719df423ba9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2411e9b179cac95477a5686e760f9b72d2dc9dc3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=81eb016300db6f7fdabb0cdde08cc29e6f9128d7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=805d5f99e927e2314bdece5e3cbada9b10c0cffa, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=068f9855ae8f6a8e215ac16f0157bf1dff2f9ce0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a0edf991e872f395396217592b411c6162c20076, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=64241e69f308cbc48d74147a9247cfae00aa218f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=00420c0ecd51e4ee205ffda1353211dd4a191f6d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=98f004a25ce7504cc7693018d4ff030ad80b1979, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=76b71890a5b924d71ce54f3643702823865e51ee, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=814e93ed74cdece8b047c1f1068e996cf8aa0f19, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=7206a820c569494222a1413ca00bd523eb9a8fb1, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=869fd59d5ed0c90b04a4cfcffd2435956d1f9070, for GNU/Linux 3.2.0, strippedUTF-8 Unicode textBourne-Again shell script, ASCII text executableexported SGML document, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) (+279;=ADFRVXZ]bdfhlnrtx}  RR RRRR RRRR RRR RRRRRRR RRRRRRR#RR"RR RRRRRRRRR RRR RRR*R+R R R RRRRR RR RR RR RRRR RRR RR RRRRR)R(R R!RR'RR RRRR RR RR RRR RRRRR RR RR RR RRRR RR RRRR RR RRRR RRRRR RRR RRRRR R%RRRR RRRRRRRRRR RRRR&R$RR RRR RaWMqF*lighttpd-mod_openssllogrotate1.4.67utf-8e7c717a1316517d27de72f4905a26fb0ff337b90fc197e4d16a0375b77b5af55?p7zXZ !t/]"k%{U}g桙Ⲹ9= XdJaki0Ҿ6#ʵ[&gwG fΧ]<Ȥ,*4fK(}S$^65W2&rf<$Y&L5-RQ=)91]PV)A̫UJJ֏E~39Q\zH) "LcJ.^H͞V[pͲ y7Ox1L 5|qA'i7SJqxd`ԙIr6 >kKi,V%ƜӱOayߩdx"SG?\S!²-KT=FSQ[rK.z}gU K$Hf.\vgZtAf2;D+z绕 G[fݲ6G;C G9AMײjҵeDz1Lm_ۊH`zgUj0f.f`xwEY hೀ>^uX悉O;fmyOR l_". d(f36<DRp#$VYpi"jF9#i \7#m(/fSJlT=/Vcn}O{ȇ``Zv\;PT ۵I;9Omlθr=Y4fͧ&Z 3tCdLZC~=DϏbJJ۩giw>ZqT5Zu\=+`8=f!2),2 \qWey\b6ĵf$r^~%Ж*>Qncju%dw!W7vcԥZξ7>U \Ê[z; YVU)մW: +&}`)\yWIh>(A'^v+*4>fC%js\9I.yYs^oЄ|mEɞP7}mM&)c;VG !YQa#s! DjBt .A)j9 ,Ul&^y80$l4eb4/嵅-¬3 G]dKKS2Hh>n;3LD=;L8Z| 8Ot^SITZY?Q4eWcKu![qrCm/J&LR6-{yجn }nNJH0NXTWg;.ek)"9H-~i^ϓ; t. SF u.!_3FrbCXW򅗱~4=_A\M'&dL 8Y0<2 ؤWG'8zHEI++C+-Waq4,leΥ$4YlI3m1g̼;V)Tɝ:V\@G%>.dX|*{m )(.(R9ldmrlg?K7+s!ͺ:O%*oD'߈fYBVLju2 %ޢ K'_! ǝԁ-7|wX=byƜ{qlűfSKHݖ#c+{,Vy@51]W6J(O*{> KP\]EsjTJGhR8 ` Aꦂ72+8;7 :ޫsݻs ݦ&~^:'L :%УnGgk9q~LdM㝷.;\1Xђ`3ahynI*/K6tD5_^Ԕ 6q:tYj"x0ڒ>k7[AY5D61,H`M8_)cf2M$g(h#IGZ׻Jgnx%{vfh8EZ@'Amz&U*z3p^r3\488,DTOs*%el֯7`›ζxg=@//igńy98uعQ0G&}4$.xJޔԚ8i,wPӰfcV  yqlx'GO\h([`9ۿ~d(^- X;e+w۹)L{sK7t~JSJaUH\5wkApX%:A"'%3ѐB}ficom/Ihꊤ*EV8q4?C X~2Y {n/M&yT#i=7[@؉U{]42\Θr vMGYK_~:#c!XH}!R|8s I>10ɔby?,⭑N8!?VŚ+aGd=01hn䷑__ܰda\^L[LZp0oD1c䑈ăY9C:{V\q` F%9{qh056P)lS68>dgx.-qE$jOfy8 #j)q_%6`JZa}&_Y:-VڒAmU6iifflt3n*UWmm{ں 'PDF=ZB3;'c91qo@+p-[UGx%%ˍW3OFjvKgu {?,3(G& FPnWZJQp_W֙v R-t rY̍xDjHB:R]b+K~"h=ҭnRelB5HP&k am񈍢!q୺KkbATg}P[g<9 1TĹ:Hж -*=uzXMR* yN}Oj?d^= u(/ FGR!{t=V[âFKrm6ӅDGļQ=6?}䑾{ B072Et1`>`{`[r՝RB5Wrm,"#x$~̫$:WUhs~3S˓ٹjdRqGE8ZGi[I&j\e"ྒa WKMm U/R#> sHv #:9er?bOڸ+%nN~Äџ؝Lֈ+r ֋iV7 VZ>ćZn7O5V'mg[(EM1R_>\ͼX^eewD_͹j+(tB/N7o3xB. LYaC}73*NB0ҡ\B tƅm$~Oti#4+r8xy!P/tbv>ѲgiK^X\Q+ cSRXD2(+r$Y0A!V{,_s7~s9Mie|H~t( p@Ib:K5u4!AXIHEI\|&C{h#xהy|Lo ߐ?pDҲcl}rK.?WO&K9=>@:^2&U 8h_ ⲙ@^7FVϭ;k&/vLw,,2/s.0/_+@H<4:Ҹvl/RSvUx3]'pa4K`;wr;YH,߷-W*7}ȡFٜ»zwjk_Xar y}2Q_gwtw8Dh׾؉ܧ٠;{\1T8- b^#%>W'H\sz /8G] *:"zGص^"`~,37ss vLκiak},8 -kI&F﫺)1?Pv qe9rrܐ%1N5V hLː 80p4ɠbm{ h`]~Mw&5Mm{]Ssenց$.35ju~{Pf2XZ熈79ETR_$[9%ԕ1ߊW͖ NELjف"\#9%FY S;n6d$3)zӚd/s P0ra|`Sk+DS?;/Uur6,cSLܿfz;}pک)Ч?sj1NGVq ~EWTx vB)7@JZ=SN5P&4-d6VvZk"'pҍ-hIGvho%JH;HF}_gCt7˫>ipiWfLZzsa{hL{ʴ\V9CMe(r;$vˮ*7f0l'P띹,NWt+|Oф'يְ62>gV 6UŀyAJ~_'j~g']7k)0^;PTC2_U?bXOr)q|* 7pn|/k5 DzFkF3k겍!JS,#i~,69d[X=T; K*GL/ --σϰIC*Z3Aʛqkn;Rq<α2AcS!>(\ĭa4, ĵ_5Y~,GE=+_yK4pÿ.XFs= GJbfvi-q)Ů}ShS;A1RxwIm':xvh82tyf]oJ/>^NJm0p,Hw/=[o ! _L5 Wmt_ /ИLHTpgaDs U [R|c|JzhDN!fLc}}:M:/Yi8%h'JmFu  rW|?<'srp$UD5))KDiaT x }{F'IBy6;;NĞYn 9C.VX7Ju [)o&ڇYd[/W}g4Whwl8N_#ЌrSR6n/&eY*;$Lb5iW V,ҷ v V#քi dbg8!9v6%ٶtXWU({vigg1̐Ye$E=k.\\,PE|9at"a0@%f`}~?BU\\ ޱ [:Gw[gߵ6X* x3Z yOImv@z;Q$J${F_gO:_Am&.z+JA=цNCvUiDYib6g /,ˌ%|{gP//򎦸͓:/$!if\cx%UӏF"s XئU]$xyj2DQ}j'Wvd9H5۲Ǧ!qdGAF + ԌH섥 IOWvkOk2c~/~YhѸBO)p!mf\$eqL,A6Gk6O*YEx_jC˜O'Yuc}8V(ͦ }&MHeFoǸ$Z>)Sڦ)'*lhV4Kðއ7DolhlI$!Ŋ.˶n|/kf`6I&w֋ir(t/JoΑ5*p#DS`s_ NN4$ρm˂TGH-4x8yW2@ \Q"0GHH$$ά.IԝltE!BɎS8o0z kb68fwr}rʹ]is+HWRa% ,BT.a˄( 􋯁Tr߈<J~iiU`DLܸF-%GαR[HS'b[@+>).CJC14oz#}8{hmL:z{}JÎ+ r)=u~1ޕ`},7sũա$?tb}00+'Sz'[PېWH&4J,d$,} +bR7J_X]7*=%2e'3!0Ffxia*L[#3^ O|YQ3qُ:pP6TzczqÎQ۪y@ʛz3-PZ`%żtX샱? 8F(bԍNj!oD/?v9Ij"Vh: ;wn(n*IQS=cC3DG3sqE_RL Lu|NKe[03Z"['B=1<|·EnƜt ŏ^e[ -u)]|wQ-fJG&m (u5%A*Ht9:0Tjv;v$С}%]YR'NeciכLw͐]Ve%V m/,{v? E*OR\U2!CQ;W$\ Q9)Y.>1'hP:NGV[ C"uBaCJIl@[T&r3b34R1ὅ>]_/<$Bo0k|g;$zȟS $Ka+-`3Smy:] ,v90*I&4?$ 9S`xS1bxpC*,\H:>H}Ɠ!2J+GFpCwM6,o×qڅ%Cx]XJByAFݹr8KX2C'Tśd2c&Mј2 ;tSX3rL)Nݮ3:cC夸`⬲/eTԇu sRZ yW+X4VgI&opM8Ì$퉅4u黫 8A'Շ˵yΥjaBWu(Rr aZ(NT1kSr1LNibp[+:P32wAVI-A=iGßQ@=}#f\T>RH&hRa&ìR_Hy7\C574z,36݁XMM.وU-|`V-gpPg&Hm]45RD6^En<>π?MXxz's5,u3~o5HJ nAv je͈m ;AЯ&=qFHǸ1 #_Ib O`t:IRP+)38J=(.9LČ=_&?}8 Җ#m1A}= ?6_of:E6ÞO~u@)59^r};7jkBH" "{w3B}KgACO@_z\(\hGKB8P#hp8/mYJ0EQ!a黀 h&23WhQaX-?6d*^к$j^5YXpT6J P.Mdxoٖypb^*6cz1!jL~j]h)TIѨvtA}2=TدQ:A _*Z>WiExDuĦ- ;܌tb9 s隥.$,#9iR|"9Nݹte]SHﾍ#lCK΢-e>rG$H.(5e4yQ?/+B"\&Sjf߯հuKtB=v-EDN]Q$(п2VWYHp}˕T*fv5OrՈ~D1Soz-|+K=A2D%,oM %Z3ʑ$k*bI| )YSCУˎz}:L07!TWGh3Z֓H"MAeבU9ˉJl/B"YS1i`ՎS܀8,\L<#CHĦgivmW}{m7O2lLS(~$V#"s,0ֻL A?ϧD5㸵1Ԏ | Pk,TrSo g F c`=7E 0),VUl4@wTZ~VAO8?7GG2z:6iXFcBkp 5U;pX;n*MSc-MQ$_eK!uH+YŜ{}ycʛ1lvhz,;2ʤFXy$ .Bp!Wç-K/Ϙ- cfehܵyhlc װ>-mCJz©MR0^ 7<\]jk, D3|#5:/i'11^FXW.r7yWSP2%7u!5 "X(w_'xӹ̥4'*`~JOyy8*A˯!p,SmDNSL/cCؔ˜(6s9kPNבq/Vޙq`juRfH\ n\P'/p%s ;`I~ԯ&Q՘PF(gAs7j#gS,>'q³_WSuQ-4G4}y3>n^(K dܯ̀Ys[5p?$֤ -]9 ▓|mةKP$BE$[*ZV@UIb3c4 :va*A^dt.]n,L?L7U,- `Iu?lI}IVYk@8A▀m{uk&ZT &jmZ/?7zauJqq{&a̢ʰIzC 1{HujzVf"k0QucSd6 A'JA+gyiȶb㿋YBrH6\lO)$ "4? }e {DQx{ʜJ BUAPc5/~~gǙGWx3 eNo2n׆  sfeT|>:, ɘaz od{VWZ͉cMރ.zMI]H%ZL ٗd\U7ua>HCr~^vi)c"JTbK3H߿ޙ2@wI$0mQ)Ӧ}tA[,Ѯhi Rl-$ 8>q2/hcD_f-ĽZj|ɬ$Fy{<b=lH4!~uT+R]ί[VC≴sH[zF@FpTRD$7uFXꫥ_A *GtoW|fw˓`CK0 ۱bLykIy--d];Tqk7d~ao\@3\a\ȰjH?< vC#*DF ֽ8cE N/i0Nq.bNM3R<3gJP/kԇG Ws@d)O ,r/Y"uSdgqefpßE96KP?JZ3Z#bD.EkNfBMCꋠ`"Ε9Rd:Hnu}1 GgzLNwt4=|*9L^1: I{wE =mJ(ki9Oax)F=rFrhs~D<ŏݘ_B@1o)zedm&9z5mIo7N4Ә4]]Yǻ>)ET*KzQ-Cm\,[5;]oݦ]bV-Bclϖ`KUyn ^s.*.Щa4dRC'%E-2Hb7*;xb-p<?&Lo VD3>G(FQU-ȎjhlϒQv`sJzkL [ #}L˚fgD6L˹jFLM(/ J9I T[[ޏAe( vK mY߲?4rY0\4X?d Goa#"Gb vAVj2&d~;FҺXj9 p\lᮮ5wf0An$xH-ٱ?]?!}eer1@=-1V>Gn֔ehF\Ra:kFayQ@-d&07+4Cqz^ &=8 ~AYDuzZh*>&[Z؃/"o5tGЌ]?͚bx.Kԍ6UQ˛@ 2a={-w\kު;b.w`t$𰜺wz=MLdN?)RYn$7Zr?V:LC]lN7 HcDX0/xX%7Ǥi.0Q 'DҴNOfQކAił|'%}QUH&r+n)Կ_a:ےnb3B4$hmn+wiO ix3]R%Ur8{p Nkd*􁑃;u ^NU5Vw.2JR4.w8S$ttp*C {61o^8ۑ)&"__E B߫4sL3jRswj; z 1ұ5F^EsaRk<- omEzJIw憨vr{o"m,3Ғyicmv^ߪ`AooB}B}Y6a3PJ [vT eɴ[6^!$soY̕ޠvo D M#Q7T*5մ;WcOI4~ Ҹi<6o in'Ku%(3ARꇟ|t|J"E@(_YUk >= t :?]lkKuwsь .腗4 k+#@<2Y(qjMKXu$?-f{֎,Yy :W`-c݀"jIT\J_rZ0t`vq\&fj+!PTmxədhs$"'JD/'iZZO|_8 cN,(δf|TX ̔ޫޔHKD;A%GPf0`*ƨFDGD ] Q`!m꿥$bxèy~ƆvFFCa.4wŽW氇V3.?1yxq}aϚq*\80t_Jn): LTi`R>:b]}L3Ih?L;u7C+}.-{uk¦hT=8Ey*^qxUҏfyᳰBLg_2Ŗp{oݚU8`)x F4fK{NX|#'s;~fE-PKl A$C!Ϊ8%h܏M \kBY"%-JR(*ֆYӎe/xW9_q DtqգwnOrT e_5-ۥz^]aH=L9=F|+蠠Mᴥz͏th>h%8lXz oODeH{&կ%n5_pЌ'Dײffk[z1ޅR;3PL]pH-z^w=,^2|&Z*bh@ʉfj[w>UŊΖKenXB7'XdկMV1&X5?uh٣FqoZ?к=xځՀGL8Җ0Q3Ts 8E8ӘG PEqd"J#m`:ZT?8y2xp^ $#4"d3銫=Ҋ79&Um:FtHPXrJjQ5^W0 w!/}ܟiN~KW,2xDK2 7YҖ$|_ܬ|iRm"EYS"93C7T͍}.׺%=w4R_G>gb00º <-@D  .U:^m<8{yAZ+FmVG i^aOY|~H%keċ j5ԯLⴧ]7D*]=gs:7.ETlMT|(1E Ρ*퓒pC+oQ?`K{Ф6AY&t @8%Qi¸,\қÈyԏ7y|}&<%,SamfU;;hDvL+u5lVB/f!u7&G8^/S K}/ӗHX@3VuS(`-vB~ ՛hGB.'DBttNi3hl]y¥ڲ#bsOfaZso41J8l{c+nb$Li)t OpB甆cĐm{F఼9껴THRJ/[=H pYx/MbRRSW6J!"@58b jxs30mڕ&7;}wSԣ޶SWi=Տ" NdzjhJ49bméYøb)v:_Rna;6`C8\Н͕gKI#.IɇZ:^B﷋ g[^n 5xyU] -Rv9pEvQHfGS$Ȓ_ Ef#ܭOK>VWr={GP@ڏ slU>P֕N55 BץaCl_pW]yO= 8S+4:\v2PN/6:D~N[Zb1pZ(DRtW}R pУB# 0Ej_ǍmaxU'=lM2|p>=CTGJ,;.XC;X Nxx:xuC0ʺGZU*7`0<]*c+:/ {)J!E0J$2,:o0SwnynC?% 2^1:`JPS B7DjXO̊|.,ٶ DRU z1O-=w+9~D`{s)MC*WjdCjTd*ab1yĩn՞~"tgwO: "5DA-{U/X~AH]ǎˊ* N,jpthH=֮-sRiX^fUX"Kf.azx0fV%SJb3eގQ'潰S˝ϹVWMc0z$iKmopN%Ff5\Tdi)Y$\7h16[E 9EاV uxPT07VáCްₚؐ?_yyJfxLu3ʂ&WYq~6lvYeXLvx|_R>PbJdgޥiޝ1< K .Ekچze~]Aƌer%֭ "ɞ +'?nJk 4J*j򋧋r(w 9C&k$%Uou)W5svz5ŷ1me>S00I HBLuO{b#(^YZ"& 7_i]1 1i}k_B;P)> ?d"uFhM,BycU!ʹCQ%C~L%b42@@TIO3@V F*Vkf "zuwv59-b*J~(jF[rkk&ȱ#[̲qR6ρ[I"!]ڗzI<<+D5B_}gEo i?ąq߾{ѤrcYaڃjt+QF' fթN;/m .4^M68H hIn{'VDizTE|١oٍ٠6=r] x?GvRRk >qKb+C5Lkbfafg븯qkXU/ˎS" pY?7F?mP(MyE}1^zbS䑆&b| iAbKd:WNӎ(RAлQ vF HX XgȔ.͒йvcXR\<#~d q@ɌtlO&_q.@/|J+\j k̅JJh[t> ,:e'd#y;۲A[vf!^db>' >Bj#@heƴ)D|Ц k8|K};a[@9B@- 3!4N/@ D 2]GRȳjr;U~:~z6F{. $(vur"2_TE&yq%-)Ud'_ ^u;2<"AH.TEޜp, hY2i8$=IjSΘ"ƣ@ FhJ+ R%ק 4Lٞi,VB&K-eŔ W_>F ?c i1݂>5M.W()EK˜b$, ا䬞ҎHi"x/"!huŒ߼l Z^uS|O&8Hzr\c~NwSRoULc^y!`rS$ց}+ !T):f&(plN&#s8tBDe 7a5T YF[6p>qߍ$8N%(':ckS'7=mV+l׍ñ B͋]X4b͑ZCL@ov-[\yPvsvQJdkz<SdP\J&:3fHE=A􊺢%_Y5ɚ\?(P#?G6ZE]A^ \AST,AI'}V;VfKZXm4b?Uu]a"\J;쐋&<Tą҄xmC\$^ި*y8̪שd_?kGBO )q3JnP1\Ӌdy L+SXsVo$|KV wX uesF`:Ȼ1(No"lo=U}!aD_Pi䉙ΨqUL6{e׳MplmeZ* Z(7. -tB1M:5yͥ87>&aI2|{εA6Rw`>A6<M}eyVzpoLi̧޼@YT1PIxPE%3tᬛ+~bq#>\ԋKk 9IWz,Y.>FMm,0-zz R"!!Jz3Ѕa.ٍY C>ƏŔb\?%9{ ]BesѼހJ*tzU0根/5yЦo(Ax/b#軨v9M_lH¯<8{XsX{5IsT-X7!q_ЃƒoC> Yëgoh^s-!&k".vz tO7iw"ի@ftkb^so vi'GlqA޸{<3)FrARS#aVV F}7_AghbvNmuT{S@^n&A3:s?n(= }ۨX ]²Һ E !yeA>ylv4[c9'y/yb|Q5jYA9p`#w\lt(~e; =vtq^q em90gů_6[O;/C.G4ڗ{x>+3Eub^[V#i)7X;JY?p/L\ݭNJQ}Q^gjc#W[]2̀C3Sp> @+ŶU-C-IaN+ld^U'QP䕞77+sܛPp UMS'uʭIJgTqV5L3Y]ǐ*?%}>Nbctz=RlDch>z7E]#Q&j>߬Zջ5[IjZ=X%mSEPm1â(_s2qI£j} K PNg.Oyj?Hl8XQ}1%=Ymnt*GB|vz;SJB8LLti&AV}{&a%/ZvxyU)yAhRuc!3!u6v_^~H*e)UB+k {[)Zݷ ))ULRBmnX̜tX -G)Kb/$5l~lKo:PtwȊޱ{]x/{]|IqCEVƐBiq+W|jNA܍ؘ2%& ym`'DǰLR}l017 o=>nFdeqSَ9ˏ"`ZX}x#Rqp7e8)5GMVˍ$,:w軁^c}Ch{"?.i%A5,jG58`R()*xdbYK_)"2__i3Hf.<_|o` qJq0l(HB X4)Dg-rB nx_HǥW~1|R^{Bdhpo8]Q;Sª]l|9P X`kM xXx}/72?XQXDwR:ex)ojM&(Ge R.[AU&aٴϥ=wK~٦6;➻Ehke]9PQO)YW-LvaTm^1ԴTkAaqX*aBј路Qh_qYAx߉u\t8=@{2vÎ:G"Ȓa4\90*eKq(U*]V]*P ʊ[bh/~E3\Oh߮-CߡޒT2;aRg奣? (Zx{q>a Ħ&@!!`܀ٔ@d..ϭejU2'?+p,yTdlǴ0V}0L:2'0]W<#iؔ\Ā@j }F<{3q!uDzq!99gڱBhV?Q02,o Gj@:ahP>niM/r%zTKvQPߑs;Zs6v% UdCt,ks:, LnlM<bCzAQj@*G [ż8[~EV=@ߒ!͖貿}-r !琁յtvQ2PL^UwN.MXiutMM`g\,P }%fP G>ϐ:|GwPR9NuTctSp-}rS.zp8x p؈{m_X0 #F <gOnHChE:/HbA AZ鴠BFLΔ-$t &d#Z}~+,Е`{P|$EEeĐEpe;'l@?L׸aB:4a5ܣ("5 Bj )ۜ],Ik!MC"rһW)gԵ4oL^w&Dڵ˛ \vU;-(xPGUlp6aA8D2KMc> -/ez2=]ű1hL@Trw!2lM鼣# ?FhjfzZ'>s:+p|g5Q] 'bH''-#ڔE8i+X9u.qcmjÕەB:::* ZcqVX[Xk.,~BS&3Inn7{YB JYeh e3i_;qpT{eLkqf- c_vc)wG`sIވ[RT?Z7ҍTwQȎȂ&t.LͽEM8ԞXJKH@| ʞ*RK;AbieUdF"!^pZr4 1w,P8trᜯ#PJ#\"bV>q{6M9{U|D3+F<G8ɠS.V]i-arьӥ\Ϟ\-syCZLkgKD\u/ɴ[R؅9)v[2"&gjFy}]vf56eL&X@dPli}6{1kwՆ=8rNK p)6hFc28'#=[9t\lpE-N5/Gw9aξݚFDCK tU-'EJMvY ,XA{N93Yt_rL[$V^ԴX=Q2@pFj|FDXTZvČXQXu1)j8^V:͡Rw#bE Y*|7M}0g(V1%dsu K)邔K@ך3XvFPq˘\S6#{[<"1bb3:wZx# %D{0|@'^b^F\+OQ+K?Y0Q$~C/ kDj|s=J lG $:G cUy2-&K8tImv`|/B\^rW'.,7U|&G!$/W43fu5I6B?l?abg**F[<^>#zg @Wx>048$gC9lv҅s5G^B(EP3[Ehf:H[Fkx49lPX9<)OBD%؎N+^ۋl@tmd#ֽQzQPszmR[e#v NտL|a4`5/e} vU`H 0T)9ߪ<xZ7/Ӄ͐Y.ap H"' w D6Ec x5LhZݢՆSgG(F`El fw|X$Uj0A($C3A K=+n]8r1&^!.Vq9,1uj{- #>Q?8 4H:; $E_+݆kn 4ճT6M(r Ŋ$Tmi ֥QK&xl=mdNj<*Qhwkgbvx;>:xw&>c,BJÀ ? Gak{.Q%sWr=bdͶ(*켴&d5>b\ ]i>W tm[zV Csv) Nf݁,R#Mc ڣ)޵`+TM4M+N EoR;3[DuSnGp${uE×YDYa? әX˜ ?x"C+ۘ-/+UShȆ :X6/3_Zڔ‘~Ozq"CW u壓_@2e~2{NdTO5w"t(n@H,܃ѣJf[-Io@[f'_2jL Yg| |_lN eBk/i9rH2e v;X(cv/f ((TYzYcT %;$"^r7E|:Y1smfip `mhvOY~$+k|Ŕ.eZrcY;շP8F<(~(5`69Œh92t.:hFGf7)frR7O$Oz[CǾmKqUbBQCJLalH@v/# kL8QYwHjsn_`$LUGDW]`Z[j^ҝO0C^fOu%v`8U65ͮYyVHp!BUBob Ϥ>#- CUSj^@&긘F9F05`Y_zēnwfuv٪W0T|Efs}Ej >\L)&H2vtπs+8U{(Cޣ(;&H1Qu$R4/̓~C>2VpqVef9EL!RBɬÝؐ얁ųK̒ҔZެyֆ _:7pjV2jG?7[?uZg76`շNY,.hR?v JhxKK?Xxh5WBWo0ǸML?Wr Lvrv 3-4ɯ~34eCH?WW@:d@?_y ُO=uɮK `6|yڍ@:{Md\J@Ӎڱh=;H3.yqiRtU-wb Lqnx]oEZsN)R{AFrnW]v#ST+y݋ @ 9 ~ռH lYrljeyY!YdBhHYZ} zbMTgE> !A$vZ9X!5;)0@=b5 t!B:bbSu-}69ޏ$(ƣTp .نIgyK ero<#wvĤK'(;KyNTmm J,I~Mk=5K`8mFзRK9I[ w+uv H s֗^<UT-au#4 >L,cB@d6+49ӭkTC1HjސL0ʅT+'u|EVC}֎a Be7i6gɕq-&u0ljq2pgX='Y*>2FOmGbհdmy ,-ϵ-, T[CH^-}>zҲEiH̽,gN1Y8ل'Egg"(m:ϓP`٬:&%YrLhDA\C'o?]rLWW/r+3g &ѸLmr k7{bzdu ŷ߃ƥ=~C6_8fLX&O4\blGq/٬AW4\Q6]$9bp&0 b:#&d1LL\!e*L(X3Q$VV 3h^S _o{fau:fjL0d۰ܤOq桋Y|̯hJFV>*poxQX KR\-u0oXɗW JuWӌH@9O:2Q ؜Yޛ.A87[r[0M=S Tp sJ>UV}QWTu2oV'BjSP_\T?F2(Vhj6J~±6cpU-Ԓ쳳XΆk5xh wK 1tL~F,;u..I8Ln #f?;Z}e_JR4 S e-[Hi+yBk UIAzw:KcsI[#&`H˯\"obCQ?H +nƑ0LI'(^ 9꽚~7h;:Mu`qU 2MGcc9>V -qv }c6țHnq1<qGƝy= pcJL<0/bTht?eY +/2v|h22~9ro7 ޳bW' ׌&'A}@ ٺ"Hvp9B]g R|suISt8 6NYM5:A.Jl;.휧TG^DF?n+X" Nu4HQh0FSN3^v?0H.3jK:J1T N^H \+<8 pk&ߍֳuIk9L!%ݬ\}C$K|;] E4@80~w z*="ᖏDVL9i{45d0hVD\)ªO!CqtOgp8Y*w@e$m{Pڠܚ?d=/GUCD )؅<"EdZ(rŇJMphLq2 ZfD1`OT%چ!tVj $ = ae68.VÈKdi#-6tJq2G$Dzhw0%4,f 7 ~(Vuy(R\HKLP[[j\6o̓j Qq3k*>_KX5u|I>SAc Q8)#:TTvTseeR_- kZ^n(!KF!o3((ʆ9!|6FP+gQ|G'q>չ\p Ȕ~"DK^izNl`zYN^# àyXjN,9*zq2:L0btL*߉w Ql.|KKȏaϼ"n5Q k y$C@TKM' c^aѠ#d$R5i-P}ֆɐҦJI>γ̖SW\7pCTjm.q cEm‹b; \z@CCfIzuGp*}ͳqʖҏ ƨ7$,FG-Z7V %2i\4nΧ|D2DGY!=VYe v2vU=˰A ]hև=J&HvHWLT8e xn&y(cOX5 ڈ  'rF*-耎6KAM=E1ii=%Oll@Ǫ ?IZca9??BMT9^ 8iל<Ƶu߯K`K,YRr ~;H㾤d,'5ɉK {+KSRa\)N}*XcP0RjGOeUArPBsQ| YZ