linux/poky.git/meta/recipes-extended/lighttpd, branch master

The poky repository master branch is no longer being updated.

2025-11-07T13:31:53+00:00

You can either: a) switch to individual clones of bitbake, openembedded-core, meta-yocto and yocto-docs b) use the new bitbake-setup You can find information about either approach in our documentation: https://docs.yoctoproject.org/ Note that "poky" the distro setting is still available in meta-yocto as before and we continue to use and maintain that. Long live Poky! Some further information on the background of this change can be found in: https://lists.openembedded.org/g/openembedded-architecture/message/2179 Signed-off-by: Richard Purdie

lighttpd: upgrade 1.4.79 -> 1.4.81

2025-08-25T16:47:21+00:00

Remove "libev" configuration option, no longer in use since 1.4.80 Upstream changes 1.4.81: - security: fix to reject disallowed trailers 1.4.80: - detect and issue error trace for HTTP/2 MadeYouReset VU#767506 CVE-2025-8671 - stricter HTTP request/response header, trailer, and chunked validation/parsing - support HTTP response trailers - support HTTP request trailers merge to headers (if not streaming request body) - bug fixes (From OE-Core rev: 6054ad0b7a3cf8a6853bdedfdbf973742af58fea) Signed-off-by: Michael Opdenacker Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

lighttpd: upgrade 1.4.78 -> 1.4.79

2025-04-10T10:05:34+00:00

Changelog: =========== * [ci] update deps pkg names for lighttpd on Cygwin * [ci] MSYS detection kludge in tests/LightyTest.pm * [autotools] spelling Couldn't => Could not * [mod_openssl] revert SSL_CTX default cert assign * [mod_openssl] spelling in comment * [TLS] issue trace if unable to check/refresh cert * [ci] Cygwin Invoke-WebRequest -MaximumRetryCount 3 * [ci] Cygwin prefer D:\ drive * [ci] Cygwin remove redundant call to setup.exe * [core] set server.max-fds = 4096 if not specified * [core] clear Linux ambient capabilities, if any * [core] rename remove_pid_file() -> server_pid_file_remove() * [core] retry pidfile open on Linux * [doc] systemd lighttpd.service hardening * [doc] move TLS config to separate file tls.conf * [doc] systemd lighttpd.service hardening addition * [doc] systemd lighttpd*.socket activation examples * [core] default listen() backlog to SOMAXCONN * [ci] fix meson build execution selection (From OE-Core rev: 5066f75e7588a158111bedbf1ce9975e2d26c2c7) Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

lighttpd: upgrade 1.4.77 -> 1.4.78

2025-04-03T10:06:19+00:00

(From OE-Core rev: fd1799497b0c722c08b31b09567f94bbec1e88cd) Signed-off-by: Richard Purdie

lighttpd: upgrade 1.4.76 -> 1.4.77

2025-02-05T12:49:55+00:00

(From OE-Core rev: 64ddf2d833a6a4c17044f3665e28ad9546c3a424) Signed-off-by: Richard Purdie

recipes: Update WORKDIR references to UNPACKDIR

2024-05-02T14:15:51+00:00

Since we want to be able to stop unpacking to WORKDIR, correct the WORKDIR references in recipe do_compile/do_install tasks to use UNPACKDIR in the appropraite places instead. (From OE-Core rev: d73595df69667fe9d12ecd407b77a0b8dae2109c) Signed-off-by: Richard Purdie

lighttpd: upgrade 1.4.75 -> 1.4.76

2024-04-25T09:06:02+00:00

Changelog: ========== * [core] add default to builtin mimetype.assign * [core] add MPTCP support * [core] disable MPTCP support by default * [mod_expire] omit caching hdrs for 204 No Content * [mod_staticfile] noinline cold func * [core] GNU/Hurd preadv2() RWF_NOWAIT ENOTSUP * [core] special value for Linux POLLRDHUP on SPARC * [mod_openssl] define asn1 time w/ OPENSSL_NO_OCSP * [h2] VU#421644 HTTP/2 CONTINUATION Flood * [build] packdist.sh git archive; replace make dist * [core] gw_network_backend_write_error() cold func * [core] reduce syscalls in some backend connect * [core] defer TCP_FIN propagate if connect()ing * [ci] workaround some packaging issues in NetBSD 10 (From OE-Core rev: 09ee0fb9f36eb856354b551855323b8ca38c0e80) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

lighttpd: upgrade 1.4.74 -> 1.4.75

2024-04-16T07:07:02+00:00

Changelog: ========== * [mod_redirect] url.redirect-code = 308 new default * [ls-hpack] more portability fixes for sys/queue.h * [ls-hpack] update version to 2.3.3 * [TLS] default to stronger ciphers w/ PFS and AEAD * [ci] apt-get install build-essential on Ubuntu * [ci] /usr/local/opt keg-only pkgs on Darwin(macOS) * [mod_authn_sasl] translate SASL_LOG_* to syslog * [build] include src/compat/sys/queue.h in tarball * [core] fdlog_openlog(), fdlog_closelog() * [mod_accesslog] fdlog_openlog() if using syslog * [cmake] fix LEMON_PATH with empty CMAKE_BUILD_TYPE * [ci] limit github ci to specific branches * [ci] prefer non-login shell for Cygwin CI build * [ci] prefer dash for Cygwin and MSYS2 builds * [mod_wstunnel] fix server.ping-interval w/ HTTP/2 * [mod_dirlisting] fix suffix display of '/' on file (fixes #3242) * [mod_openssl] use internal asn1_time fn on 32-bit (fixes #3244) * [mod_openssl] faster ASN1_TIME parse * [mod_wolfssl] faster ASN1_TIME parse * [doc] update TLS comment in sample lighttpd.conf (From OE-Core rev: a3c74e93469dd3a40a17dd04971f79af6701a2ad) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

lighttpd: upgrade 1.4.73 -> 1.4.74

2024-03-01T09:28:51+00:00

Changelog: http://www.lighttpd.net/2024/2/19/1.4.74/ (From OE-Core rev: 23e2aa465d3aa3fb4b61c53eb7b84249ed9b3c20) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

lighttpd: upgrade 1.4.72 -> 1.4.73

2023-11-05T11:28:40+00:00

Changelog: ============ * [core] add .mkv to mimetype.assign builtin defaults * [core] warn if out-of-range value for config short * [mod_openssl] set default curves for ossl < 1.1.0 * [mod_h2] parse HEADERS flags sooner * [mod_h2] check send window before defer frame rd * [mod_h2] send GOAWAY to excessive request flood * [mod_h2] h2_parse_headers_frame() adjust args * [mod_h2] h2_recv_headers() parse trailers earlier * [mod_h2] send GOAWAY to excessive request flood * [mod_h2] discard new streams after GOAWAY sent * [mod_h2] h2_discard_headers() to HPACK-decode hdrs * [core] parse entire server.http-parseopts list * [mod_wstunnel] Sec-WebSocket-Protocol only if req hdr * [mod_h2] disable h2proto if mod_h2 was not found * [core] omit dlopen trace for mod_h2, mod_deflate * [mod_h2] defer input parsing if large output queue * [mod_h2] defer frame handling if stream pend close * [mod_h2] detect and log HTTP/2 rapid reset attack * [core] honor MBEDTLS_USE_PSA_CRYPTO for hash,rand * [mod_mbedtls] honor MBEDTLS_USE_PSA_CRYPTO for rand * [core] comment out li_rand_bytes() (unused) * [mod_mbedtls] handle mbedtls 3.x partial write * [mod_h2] detect and log HTTP/2 rapid reset attack * [mod_h2] detect and log HTTP/2 rapid reset attack * [mod_openssl] warn if openssl version < 3.0.0 * [mod_openssl] include openssl/hmac.h for boringssl (From OE-Core rev: 5a39ce6614c97e1f919133dc718cc44d197c974f) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie