Changes 1.4.34:

* [mod_auth] explicitly link ssl for SHA1 (fixes 2517)
* [mod_extforward] fix compilation without IPv6, (not) using undefined var (fixes 2515, thx mm)
* [ssl] fix SNI handling; only use key+cert from SNI specific config (fixes 2525, CVE-2013-4508)
* [doc] update ssl.cipher-list recommendation
* [stat-cache] FAM: fix use after free (CVE-2013-4560)
* [stat-cache] fix FAM cleanup/fdevent handling
* [core] check success of setuid,setgid,setgroups (CVE-2013-4559)
* [ssl] fix regression from CVE-2013-4508 (client-cert sessions were broken)
* maintain physical.basedir (the "acting" doc-root as prefix of physical.path) in more places
* [core] decode URL before rewrite, enabling it to work in $HTTP["url"] conditionals (fixes 2526)
* [auto* build] remove -no-undefined from linker flags, as we actually link modules with undefined symbols (fixes 2533)
* [mod_mysql_vhost] fix memory leak on config init (2530)
* [mod_webdav] fix fd leak found with parfait (fixes 2530, thx kukackajiri)

4 files changed, 25 insertions, 8 deletions

diff --git a/www/lighttpd/Makefile b/www/lighttpd/Makefile
index da806b88bda..14874338ae9 100644
--- a/www/lighttpd/Makefile
+++ b/www/lighttpd/Makefile
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.42 2013/10/29 19:54:11 adam Exp $
+# $NetBSD: Makefile,v 1.43 2014/01/23 13:20:12 adam Exp $
 
-DISTNAME=	lighttpd-1.4.33
+DISTNAME=	lighttpd-1.4.34
 CATEGORIES=	www
 MASTER_SITES=	http://download.lighttpd.net/lighttpd/releases-1.4.x/
 EXTRACT_SUFX=	.tar.xz
diff --git a/www/lighttpd/distinfo b/www/lighttpd/distinfo
index 75c7f5ac1b8..1089c4a76a2 100644
--- a/www/lighttpd/distinfo
+++ b/www/lighttpd/distinfo
@@ -1,7 +1,8 @@
-$NetBSD: distinfo,v 1.25 2013/10/29 19:54:11 adam Exp $
+$NetBSD: distinfo,v 1.26 2014/01/23 13:20:12 adam Exp $
 
-SHA1 (lighttpd-1.4.33.tar.xz) = f309708105aadffba229a944d4c32423132119a5
-RMD160 (lighttpd-1.4.33.tar.xz) = 4b892ac678c9153e8200318f2bd71445190c1806
-Size (lighttpd-1.4.33.tar.xz) = 555248 bytes
-SHA1 (patch-doc_config_lighttpd.conf) = 1f5d884ec3cc9ee1ec18b51f0d25ca2a7aae0b8c
+SHA1 (lighttpd-1.4.34.tar.xz) = c1edd4ddbd24156c374594e27d63058ffe5dc726
+RMD160 (lighttpd-1.4.34.tar.xz) = 1454388519622068e9ca7579a09602c94b851eae
+Size (lighttpd-1.4.34.tar.xz) = 556080 bytes
+SHA1 (patch-doc_config_lighttpd.conf) = e8ae799f0915b83fda5ce8893fdbcab2eee9a512
+SHA1 (patch-src_fdevent_poll.c) = f5fe62f0b227d64dc717661a256567b4bd97f075
 SHA1 (patch-src_plugin.c) = 27b7a193c1f5867b5a1d2e2c5b289a0bf6368b39
diff --git a/www/lighttpd/patches/patch-doc_config_lighttpd.conf b/www/lighttpd/patches/patch-doc_config_lighttpd.conf
index bfa1eb07e22..9d7d5f54fcd 100644
--- a/www/lighttpd/patches/patch-doc_config_lighttpd.conf
+++ b/www/lighttpd/patches/patch-doc_config_lighttpd.conf
@@ -1,6 +1,7 @@
-$NetBSD: patch-doc_config_lighttpd.conf,v 1.1 2012/08/01 11:25:22 fhajny Exp $
+$NetBSD: patch-doc_config_lighttpd.conf,v 1.2 2014/01/23 13:20:12 adam Exp $
 
 Sane defaults.
+
 --- doc/config/lighttpd.conf.orig	2010-07-11 17:01:32.000000000 +0000
 +++ doc/config/lighttpd.conf
 @@ -13,11 +13,11 @@
diff --git a/www/lighttpd/patches/patch-src_fdevent_poll.c b/www/lighttpd/patches/patch-src_fdevent_poll.c
new file mode 100644
index 00000000000..b3262b1dd35
--- /dev/null
+++ b/www/lighttpd/patches/patch-src_fdevent_poll.c
@@ -0,0 +1,15 @@
+$NetBSD: patch-src_fdevent_poll.c,v 1.1 2014/01/23 13:20:12 adam Exp $
+
+Error fix.
+
+--- src/fdevent_poll.c.orig	2014-01-23 11:58:57.000000000 +0000
++++ src/fdevent_poll.c
+@@ -193,7 +193,7 @@ int fdevent_poll_init(fdevents *ev) {
+ int fdevent_poll_init(fdevents *ev) {
+ 	UNUSED(ev);
+ 
+-	log_error_write(srv, __FILE__, __LINE__,
++	log_error_write(ev->srv, __FILE__, __LINE__,
+ 		"s", "poll is not supported, try to set server.event-handler = \"select\"");
+ 
+ 	return -1;