e823068113
This release addresses the following security problems: http://www.lighttpd.net/security/lighttpd_sa_2008_04.txt http://www.lighttpd.net/security/lighttpd_sa_2008_05.txt http://www.lighttpd.net/security/lighttpd_sa_2008_06.txt http://www.lighttpd.net/security/lighttpd_sa_2008_07.txt Also note that libpcre is now explicitly enabled
REQUIREMENTS PRE-INSTALL POST-INSTALL lighttpd runs as a different user ('lighttpd') by default for security reasons. Do the following after installing the port: useradd -s /bin/false lighttpd groupadd lighttpd touch /var/www/logs/access_log touch /var/www/logs/error_log chown lighttpd:lighttpd /var/www/logs/* If you wish to enable SSL support, uncomment the relevant lines in /etc/lighttpd.conf and generate a self-signed certificate: openssl req -new -x509 \ -keyout /etc/ssl/certs/lighttpd.pem -out /etc/ssl/certs/lighttpd.pem \ -days 365 -nodes PRECAUTION