• http://download.lighttpd.net/lighttpd/releases-1.4.x/ (Download)
• ftp://ftp.openbsd.org/pub/OpenBSD/distfiles// (Download)
• ftp://ftp.usa.openbsd.org/pub/OpenBSD/distfiles// (Download)

• ldap
• mysql

• (2010-02-02) Updated to version: lighttpd-1.4.25p1
• (2009-12-14) Updated to version: lighttpd-1.4.25p0
• (2009-11-26) Updated to version: lighttpd-1.4.25
• (2009-11-08) Updated to version: lighttpd-1.4.24p0
• (2009-10-28) Updated to version: lighttpd-1.4.24
• (2009-08-12) Updated to version: lighttpd-1.4.23p1
• (2009-06-22) Updated to version: lighttpd-1.4.23p0
• (2009-06-20) Updated to version: lighttpd-1.4.23
• (2009-03-17) Updated to version: lighttpd-1.4.22p0
• (2009-03-08) Updated to version: lighttpd-1.4.22

Log message:
SECURITY fix for CVE-2010-0295 DoS issue.
http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2010_01.txt
From Brad, ok ajacoutot@ jasper@
MFC ok william@

Log message:
SECURITY fix for CVE-2010-0295 DoS issue.
http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2010_01.txt
From Brad, ok ajacoutot@ jasper@

Log message:
MFC bugfix:
fix request parser to handle packets with splitted \r\n\r\n; from upstream
http://redmine.lighttpd.net/issues/2105
Requested by and ok Brad

Log message:
Add a patch from upstream via Brad; fix request parser to handle packets
with splitted \r\n\r\n. (http://redmine.lighttpd.net/issues/2105)

Log message:
MFC:
lighttpd-1.4.25
bugfix / stability update
requested by Brad, MAINTAINER
ok Brad, jasper@

Log message:
update to 1.4.25, from Brad

Log message:
add patches from upstream via Brad:
- disable warning "CLOSE-read"
- reset tlsext_server_name in connection_reset - fixes random
hostnames in the $HTTP["host"] conditional
- mod_fastcgi: fix mod_fastcgi packet parsing
- mod_fastcgi: Don't reconnect after connect() succeeded

Log message:
update to 1.4.24, from Brad (maintainer).

Log message:
Fix If-Modified-Since bug with daylight saving time; from upstream
repo via Brad.

Log message:
Add information about keep-alive connections to mod_status.
From upstream repo, via Brad.

Log message:
Bugfix update to 1.4.23; from Brad.

Log message:
remove internal spawn-fcgi in favour of a RUN_DEPENDS on www/spawn-fcgi

Log message:
update to 1.4.22, from Brad (maintainer). Fixes regressions with 1.4.21
(notably: default vhost in mod_simple_vhost, segfault in mod_scgi).

Log message:
update to 1.4.21 and tidy Makefile from Brad; lots of bug fixes.

Log message:
Upgrade to lighttpd 1.4.20. Large bug fix update.
Tested by a number of users.

Log message:
- Handle EINTR in mod_cgi during write()
- Fix mod_magnet to set con->mode = p->id if it generates content,
so returning 4xx/5xx doesn't append an error page
from brad@

Log message:
- tweak sample config file to chroot(), use kqueue and bind to ipv4 and ipv6
- install documentation
from brad@ (with the docs part from me)

Log message:
- fix typos in the previous ssl fix;
from lighttpd svn (changeset 2144); via brad@

Log message:
SECURITY FIX for http://secunia.com/advisories/29544/
lighttpd OpenSSL Error Queue Denial of Service Vulnerability
patches from upstream svn, via brad@

Log message:
upgrade to lighttpd 1.4.19. security and bug fix update. CVE-2008-1270
looks good jasper@

Log message:
- SECURITY FIX for CVE-2008-0983
( http://secunia.com/cve_reference/CVE-2008-0983/ )
- add a patch to fix issues with group permissions,
provided by Antti Harri ( already accepted upstream )
ok naddy@ brad@ (MAINTAINER)

Log message:
MFC (original commit rui@):
SECURITY: update lighttpd to 1.4.18, from brad.
Reference: http://secunia.com/advisories/26732/
worked done by brad@, ok sturm@

Log message:
SECURITY: update lighttpd to 1.4.18, from brad.
Reference: http://secunia.com/advisories/26732/
ok jasper@

Log message:
Change Brads email address for now, so people can reach him instead of
getting bounces or 550s. Bump pkgnames. While here, remove quotes from
comments.
prompted by espie@

Log message:
update lighttpd to 1.4.17, from brad.
ok jasper@

Log message:
security update to 1.4.16, fixes multiple vulnerabilities
Reference: http://secunia.com/advisories/26130/
from brad

Log message:
security update to 1.4.16, fixes multiple vulnerabilities
Reference: http://secunia.com/advisories/26130/
from brad

Log message:
target:: -> target: typo cleanup; no functional change, no pkg bump
from brad

Log message:
update lighttpd to 1.4.16
ok brad (maintainer), simon@

Log message:
roll in some distribution patches which fix multiple vulnerabilities.
Reference: http://secunia.com/advisories/26130/
ok kili@, simon@

Log message:
- remove description of non-existent flavor (from MAINTAINER)
- bump PKGNAME

Log message:
update lighttpd to 1.4.15, from brad
ok bernd@

Log message:
add a daemon user for lighttpd, from brad.
ok kili@

Log message:
more base64 checksums

Log message:
Fix a possible 99% cpu bug when a client connection is dropped.
See http://trac.lighttpd.net/trac/wiki/Release-1.4.13-patches.
Submitted by Frank Denis. Thanks!
ok brad@

Log message:
say goodbye to GNU land.

Log message:
Fix WANTLIB after openldap changes.

Log message:
enable lua by default so mod_magnet and mod_cml can use it. bump package.
discussed and ok by jolan@ and brad@.

Log message:
upgrade to lighttpd 1.4.13

Log message:
upgrade to lighttpd 1.4.12

Log message:
new style libs

Log message:
upgrade to lighttpd 1.4.11

Log message:
don't set umask to 0 when daemonizing (changed upstream as well)
from Matthias Kilian <kili at outback.escape.de>
ok brad

Log message:
mod_cgi is resetting physical.path
>From lighttpd Trac

Log message:
upgrade to lighttpd 1.4.10

Log message:
upgrade to lighttpd 1.4.9

Log message:
fix a crash with mod_proxy if the Host: header is empty.
>From lighttpd Trac

Log message:
upgrade to lighttpd 1.4.8

Log message:
fix wantlib for ldap flavor

Log message:
upgrade to lighttpd 1.4.7
the performance for high-concurrency, large file transfers has
improved dramatically.

Log message:
upgrade to lighttpd 1.4.6

Log message:
missed this

Log message:
add mysql and ldap FLAVORs as well as re-enabling SSL.

Log message:
remove the bz2 dependency as it's non-standard to use bz2 with mod_compress
anyway and remove the MySQL plug-in since it's useless until a proper
FLAVOR is added.

Log message:
DON'T CUT CORNERS.
Bump PKGNAME.

Log message:
add libm to WANTLIB.
"go ahead" brad@

Log message:
upgrade to lighttpd 1.4.5

Log message:
upgrade to lighttpd 1.4.4

Log message:
- disable SSL support for the time being until it actually works.
http://trac.lighttpd.net/trac/ticket/93
- add USE_LIBTOOL

Log message:
upgrade to lighttpd 1.3.15

Log message:
use --libdir instead of patching the Makefile

Log message:
upgrade to lighttpd 1.3.14

Log message:
upgrade to lighttpd 1.3.13

Log message:
upgrade to lighttpd 1.3.11

Log message:
upgrade to lighttpd 1.3.10
From: Ben Lovett <ben at tilderoot dot com>

Log message:
upgrade to lighttpd 1.3.8

Log message:
SIZE

Log message:
upgrade to lighttpd 1.3.7

Log message:
Add WANTLIB markers

Log message:
upgrade to lighttpd 1.3.6

Log message:
upgrade to lighttpd 1.3.4

Log message:
upgrade to lighttpd 1.3.3
license: QPL -> BSD

Log message:
better