From owner-fhttpd@phobos.illtel.denver.co.us Thu Mar 26 13:40:18 1998 Received: (from majordomo@localhost) by phobos.illtel.denver.co.us (8.8.8/8.6.9) id NAA10072 for fhttpd-outgoing; Thu, 26 Mar 1998 13:40:18 -0800 Date: Thu, 26 Mar 1998 13:40:10 -0800 (PST) From: Alex Belits To: fhttpd@phobos.illtel.denver.co.us Subject: [fhttpd] servproc-fix patch Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-fhttpd@phobos.illtel.denver.co.us Precedence: bulk If anyone hasn't seen the update on the web site -- I have posted a patch for fhttpd 0.3.3 that fixes problems with large POST uploads. Patch affects servproc.c file and therefore all modules. -- Alex - fhttpd information: http://phobos.illtel.denver.co.us/pub/fhttpd/ list archive: http://phobos.illtel.denver.co.us/ml/fhttpd/ From owner-fhttpd@phobos.illtel.denver.co.us Thu Mar 26 13:45:35 1998 Received: (from majordomo@localhost) by phobos.illtel.denver.co.us (8.8.8/8.6.9) id NAA10113 for fhttpd-outgoing; Thu, 26 Mar 1998 13:45:35 -0800 Date: Thu, 26 Mar 1998 13:45:29 -0800 (PST) From: Alex Belits To: fhttpd@phobos.illtel.denver.co.us Subject: [fhttpd] PHP3 Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-fhttpd@phobos.illtel.denver.co.us Precedence: bulk Again, I'm a bit late with posting here -- it is on the web page for a while now. PHP 3.0 Release Candidate version is out, and it can be built as fhttpd module now. I haven't made any usable documentation for its use as the module, but I hope, it's pretty obvious now because it mimicks fhttpd-file module behavior. There may be some fhttpd-related changes in the final release, however it works fine now. See http://www.php.net -- Alex - fhttpd information: http://phobos.illtel.denver.co.us/pub/fhttpd/ list archive: http://phobos.illtel.denver.co.us/ml/fhttpd/ From owner-fhttpd@phobos.illtel.denver.co.us Fri Mar 27 05:13:36 1998 Received: (from majordomo@localhost) by phobos.illtel.denver.co.us (8.8.8/8.6.9) id FAA01442 for fhttpd-outgoing; Fri, 27 Mar 1998 05:13:36 -0800 Date: Fri, 27 Mar 1998 05:13:22 -0800 (PST) From: Alex Belits To: fhttpd@phobos.illtel.denver.co.us Subject: [fhttpd] Security bugfix Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-fhttpd@phobos.illtel.denver.co.us Precedence: bulk I have found rather serious security bug that existed for a long time -- buffer overflow that potentially can be exploited remotely, and released fhttpd 0.3.4 with the fix. I have found this bug by myself, so it's unlikely that anyone managed to exploit it, but the possib;e exploit can be pretty simple, so please, upgrade all older versions. fhttpd 0.3.4 also has POST buffering bugfix that was released previously, and coredump on error in remote modules (harmless). I haven't included any code that is under development now in this version, new features will be in 0.3.5. -- Alex - fhttpd information: http://phobos.illtel.denver.co.us/pub/fhttpd/ list archive: http://phobos.illtel.denver.co.us/ml/fhttpd/ From owner-fhttpd@phobos.illtel.denver.co.us Mon Mar 30 19:03:46 1998 Received: (from majordomo@localhost) by phobos.illtel.denver.co.us (8.8.8/8.6.9) id TAA27867 for fhttpd-outgoing; Mon, 30 Mar 1998 19:03:46 -0800 Date: Mon, 30 Mar 1998 19:03:35 -0800 (PST) From: Alex Belits To: fhttpd@phobos.illtel.denver.co.us Subject: [fhttpd] Patches again -- this time for minor problems Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-fhttpd@phobos.illtel.denver.co.us Precedence: bulk I have released patches for fhttpd 0.3.4 to fix minor but rather annoying problem with inconsistent errors handling in fhttpd and fhttpd-file, and more serious BSD and Solaris wrong handling of If-Modified-Since -- if anyone noticed that file, changed on the server, running *BSD or Solaris often still appears unchanged for the client (server insists that it's "Not Modified", so one should either clear the cache on the client or touch the file a day later on the server), this is the fix for that. All patches since fhttpd 0.3.4 are in http://phobos.illtel.denver.co.us/pub/fhttpd/all-current-fixes -- Alex P.S. I'm testing/fixing fhttpd 0.3.5 now -- user-file, user-CGI and user-modules work, and it's possible that I'll rather call it 0.4.0 because major piece of functionality is added. I don't know if new log handling will be in that release though. - fhttpd information: http://phobos.illtel.denver.co.us/pub/fhttpd/ list archive: http://phobos.illtel.denver.co.us/ml/fhttpd/