Subject: CVS commit: pkgsrc/www/mini_httpd
From: Wen Heping
Date: 2017-09-29 09:57:38
Message id: 20170929075738.43AEEFA9C@cvs.NetBSD.org

Log Message:
Update to 1.27

Upstream changes:
 New in version 1.27:

    Fixed bug that prevented binary CGI results from working. This bug was \ 
introduced in 1.23. Noticed and diagnosed by Qipeng Zhang.

New in version 1.26:

    Long-standing bug on FreeBSD using http but not https. Files were getting \ 
truncated at 1MB. This was due to improper usage of sendfile(2), and not testing \ 
the http path since I only use mini_httpd for https. Since Linux has a \ 
completely different sendfile(2) call, it was not affected. And since https does \ 
not use sendfile(2), it also was not affected.

New in version 1.25:

    Improvements to the FreeBSD startup script. (Craig Leres)
    Improvement to SSL support.

New in version 1.24:

    Disable SSLv2 to prevent DROWN attack.
    Fix binary POST request reading. (Erik Waling)

New in version 1.23:

    Fixed CVE-2015-1548, a buffer overflow via snprintf.

New in version 1.22:

    Don't do TCP_NOPUSH on SSL connections. It doesn't help and causes problems.
    Use memmove() for self-overlapping string copies instead of strcpy().

Files:
RevisionActionfile
1.28modifypkgsrc/www/mini_httpd/Makefile
1.11modifypkgsrc/www/mini_httpd/distinfo