Here is an update to lighttpd 1.4.84.
- 1.4.84 - 2026-06-17 * [ci] use lua5.5-dev pacakge on alpine linux * [mod_authn_gssapi] cast to avoid compiler warning * [mod_mbedtls] build if mbedtls w/ reduced ciphers * [mod_deflate] fix 1.4.83 regression (fixes #3311) * [core] remove byte-range support for QUERY * [mod_staticfile] do not handle QUERY method * [core] _WIN32: support directory symlinks in fs_win32_readlinkUTF8 * [core] _WIN32: fix stat() on drive and directory roots in fs_win32_stati64UTF8 * [core] _WIN32: support stat() on local device path root - 1.4.83 - 2026-06-14 * [systemd] add RestrictAddressFamilies AF_NETLINK * [TLS] skip cert_is_active warnings for unset clock * [multiple] rename plugin_data statics per module * [mod_mbedtls] mbedtls 4.x removes mbedtls/ecp.h * [mod_mbedtls] mbedtls 4.x removes ECDH ciph suites * [core] clarify warning message * [multiple] http_status.[ch] * [core] single internal define for fs monitoring * [core] X-Sendfile shared code * [core] check for OTHER response headers earlier * [core] support Incremental header * [mod_magnet] resp_body_finished w/ r.resp_body:set() * [core] minor code tighten * [core] remove request_st member async_callback (unused) * [tests] t/test_http_status.c stub * [core] http_status_set_fin() handler_module = NULL * [mod_magnet] http_response_reset() before HANDLER_COMEBACK * [core] http_response_prepare() smaller funcs * [core] add continuation framework for response prep * [h2] add comment about zero-length payloads in padded frames * [mod_magnet] revert recent HANDLER_COMEBACK change * [core] remove small bit of commented out code * [core] do not generate no-longer-used plugin funcs * [core] minor code tighten * [h2] fix HTTP/1.1 upgrade: h2c * [h2] combine h2c code into h2_upgrade_h2c() * [h2] disable HTTP/1.1 upgrade: h2c by default * [core] clear trailer whitelist at startup * [core] static_assert sanity check for 64-bit off_t * [core] security: missing return on non-default path * [mod_magnet] modify reqbody_length after file append * [mod_openssl] check openssl func for NULL if mem err * [mod_*_dbi] proceed if third reconnect retry succeeds * [mod_ajp13] skip empty string (len == 65535) * [mod_ajp13] error if backend include LF in headers * [mod_deflate] translate '/' in etag to '~' for fn * [mod_deflate] mod_deflate_finished() shared code * [mod_authn_gssapi] warn if principal not in config * [mod_authn_gssapi] mod_authn_gssapi_construct_sprinc() * [core] support Range for QUERY * [multiple] make most module config thread-safe * [ci] tune build on freebsd * [mod_mbedtls] EC certs require drbg init * [ci] Bump actions/checkout from 5 to 6 (#147) * [multiple] quiet minor coverity warnings * [mod_extforward] HAProxy PROXY protocol extensions * [multiple] make most plugin objects instance-safe * [multiple] C99 designated initializers * [mod_auth] HTTP/2 response w/ multiple auth methods (fixes #3296) * [ci] Bump actions/cache from 4 to 5 * [doc] add comment to lighttpd.service * [core] add .rst .xsl .xslt to builtin mimetype.assign (fixes #3295) * [build] support lua 5.5 * [core] __attribute_packed__ * [mod_extforward] fix reading 'verify' from PROXY (fixes #3298) * [mod_extforward] adjust reading 'verify' from PROXY (#3298) * [core] fix Range requests with dynamic backends * [core] adjust safety factor for max-connections (fixes #3299) * [core] quiet coverity false positive * [mod_boringssl] add more const * [mod_openssl] add more const * [mod_openssl] update openssl version EOL message * [TLS] add PQC hybrid KEM to default TLS groups * spelling suggestions from codespell (fixes #3303) * [mod_maxminddb] sanity check snprintf of flt, dbl * [multiple] add some 'const' for gcc 16 warnings * [mod_sockproxy] configure after TLS SNI (fixes #3304) * [core] add sanity check to li_hex2bin() * [core] security: reject req header CGI conflicts * [core] security: reject invalid Content-Length from backend (fixes #3309) * [mod_gnutls] avoid double-free in error path (unlikely) * [core] update for nettle 4.x digest func signatures * [mod_deflate] more precisely match If-None-Match * [core] attempt recovery on stat_cache EMFILE (fixes #3308) * [core] option to close unused socket after restart * [cmake] use find_package() with PCRE2 * [h2] update ls-hpack * [mod_openssl] use OSSL_STORE_open for alt schemas * [mod_dirlisting] faster client-side sort on huge listings * [mod_dirlisting] additional minor javascript optim * [mod_proxy] adjust proxy.header config parsing * [mod_proxy] config opt for urlpath map resp hdrs (fixes #3300) * [core] allow server.max-fds up to 1048576 * [tests] add tests for http_cgi.c varname encoding * [mod_wstunnel] code size reduction * [core] reduce struct gw_plugin_config size * [mod_wstunnel] RFC 6455 ??5 compliance * [ci] remove wolfssl from CI on Debian/Ubuntu * [multiple] limit queue size to slow backends * [core] use tempfiles for HTTP/1.1 upgraded backend * [core] adjust trace for server.max-connections * [doc] update doc/initscripts.txt * [mod_wstunnel] disable hybi-00; obsolete * [mod_wstunnel] adjust parsing extended frame lens * [cmake] fix typos for mbedtls, tfpsacrypto libs * [mod_wstunnel] reduce handler_ctx struct size * [mod_wstunnel] stricter RFC 6455 compliance * [mod_wstunnel] optimize unmasking client payload * [core] propagate backend errs for h2 to RST_STREAM * [core] propagate backend errs for HTTP/1.1 chunked * [core] check another cond before calling cold func * [core] update rand.c for nettle 4.x digest funcs * [mod_wolfssl] workaround wolfssl code smells * [mod_mbedtls] disable DHParameters w/ PSA crypto * [TLS] debug.log-ssl-noise set TLS lib debug level * [mod_mbedtls] workaround mbedtls 4.1.0 bug * [mod_mbedtls] session tkts psa_alg w/ mbedtls 4.x * [mod_gnutls] test for PQC hybrid group support * [ci] use windows-2025-vs2026 and VS 2026 * [ci] use default FreeBSD package source * [ci] NetBSD pkg_add -u Index: Makefile =================================================================== RCS file: /cvs/ports/www/lighttpd/Makefile,v retrieving revision 1.184 diff -u -p -u -p -r1.184 Makefile --- Makefile 13 Mar 2026 21:48:11 -0000 1.184 +++ Makefile 18 Jun 2026 04:13:53 -0000 @@ -1,6 +1,6 @@ COMMENT= secure, fast, compliant, and very flexible web-server -DISTNAME= lighttpd-1.4.82 +DISTNAME= lighttpd-1.4.84 CATEGORIES= www net SITES= https://download.lighttpd.net/lighttpd/releases-1.4.x/ EXTRACT_SUFX= .tar.xz @@ -64,15 +64,11 @@ post-install: ${INSTALL_DATA_DIR} ${PREFIX}/share/examples/lighttpd/vhosts.d ${INSTALL_DATA} ${WRKSRC}/doc/outdated/*.txt \ ${PREFIX}/share/doc/lighttpd - ${INSTALL_DATA} ${WRKSRC}/doc/config/lighttpd.conf \ - ${PREFIX}/share/examples/lighttpd - ${INSTALL_DATA} ${WRKSRC}/doc/config/lighttpd.annotated.conf \ - ${PREFIX}/share/examples/lighttpd - ${INSTALL_DATA} ${WRKSRC}/doc/config/modules.conf \ + ${INSTALL_DATA} ${WRKSRC}/doc/config/*.conf \ ${PREFIX}/share/examples/lighttpd ${INSTALL_DATA} ${WRKSRC}/doc/config/conf.d/*.conf \ ${PREFIX}/share/examples/lighttpd/conf.d - ${INSTALL_DATA} ${WRKSRC}/doc/config/vhosts.d/vhosts.template \ + ${INSTALL_DATA} ${WRKSRC}/doc/config/vhosts.d/vhosts.template \ ${PREFIX}/share/examples/lighttpd/vhosts.d ${INSTALL_DATA} /dev/null \ ${PREFIX}/share/examples/lighttpd/access.log Index: distinfo =================================================================== RCS file: /cvs/ports/www/lighttpd/distinfo,v retrieving revision 1.77 diff -u -p -u -p -r1.77 distinfo --- distinfo 13 Mar 2026 21:48:11 -0000 1.77 +++ distinfo 18 Jun 2026 04:13:53 -0000 @@ -1,2 +1,2 @@ -SHA256 (lighttpd-1.4.82.tar.xz) = q/50OR+cvWarFU6gfmTxlNvn6QbvTtR+s7DztGJGyWI= -SIZE (lighttpd-1.4.82.tar.xz) = 883352 +SHA256 (lighttpd-1.4.84.tar.xz) = B23UO+yPK6nObbfnyn6K1yJxzVKYBerSQAtW76oCb3A= +SIZE (lighttpd-1.4.84.tar.xz) = 895228
