pkgsrc-Users archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
lighttpd 1.4.79 released
Dear package maintainers:
lighttpd 1.4.79 has been released!
https://wiki.lighttpd.net/Release-1_4_79
Please package and publish lighttpd 1.4.79.
Important changes
* hardened systemd lighttpd.service
* bug fix for mod_openssl using both ECDSA and RSA certs
BEHAVIOR CHANGES
lighttpd-provided hardened systemd lighttpd.service may need admin-overrides
on non-typical systems (less popular distros) using lighttpd-provided systemd
lighttpd.service and which also run lighttpd as root, or run CGI scripts
as root, to manage the system. To create overrides, `systemctl edit lighttpd`
and edit /etc/systemd/system/lighttpd.service.d/override.conf
In contrast, many popular distros configure lighttpd to drop privileges from
root and to run as an unprivileged user, e.g. 'lighttpd' or 'www-data'.
These systems are unlikely to be affected by the hardened and more secure
systemd lighttpd.service configuration.
If your distro package requires any other patches that might be
upstreamed into lighttpd, please let me know.
Please let me know if you have any questions or issues. Thank you!
Cheers, Glenn
Home |
Main Index |
Thread Index |
Old Index