commit lighttpd for openSUSE:Factory

[Source-Sync]

Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package lighttpd for openSUSE:Factory 
checked in at 2023-01-23 18:31:21
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/lighttpd (Old)
 and      /work/SRC/openSUSE:Factory/.lighttpd.new.32243 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "lighttpd"

Mon Jan 23 18:31:21 2023 rev:57 rq:1060197 version:1.4.68

Changes:
--------
--- /work/SRC/openSUSE:Factory/lighttpd/lighttpd.changes        2022-11-16 
15:44:24.056100822 +0100
+++ /work/SRC/openSUSE:Factory/.lighttpd.new.32243/lighttpd.changes     
2023-01-23 18:31:45.811987945 +0100
@@ -1,0 +2,33 @@
+Sat Jan 21 21:48:12 UTC 2023 - Andreas Stieger <andreas.stie...@gmx.de>
+
+- update to 1.4.68:
+  * TLS modules now default to using stronger, modern ciphers and
+    will default to allow client preference in selecting ciphers.
+    Allowing client preference in selecting ciphers is safe to do along
+    with restrictions to use modern ciphers supporting PFS, and is
+    better for mobile users without AES hardware acceleration.
+    Legacy ciphers can still be configured in lighttpd.conf using
+    `ssl.openssl.ssl-conf-cmd`, as long as the ciphers are supported by
+    the underlying TLS libraries. https://wiki.lighttpd.net/Docs_SSL
+    new defaults:
+    “CipherString” => 
“EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384”,
+    “Options” => “-ServerPreference”
+    old defaults:
+    “CipherString” => “HIGH”,
+    “Options” => “ServerPreference”
+  * Deprecated TLS options have been removed.
+    – ssl.honor-cipher-order
+    – ssl.dh-file
+    – ssl.ec-curve
+    – ssl.disable-client-renegotiation
+    – ssl.use-sslv2
+    – ssl.use-sslv3
+    See https://wiki.lighttpd.net/Docs_SSL for replacements with
+    `ssl.openssl.ssl-conf-cmd`, but prefer lighttpd defaults instead.
+  * Deprecated: mod_evasive has been removed
+  * Deprecated: mod_secdownload has been removed
+  * Deprecated: mod_uploadprogress has been removed
+  * Deprecated: mod_usertrack has been removed
+    These four modules can be replaced with a few lines of LUA.
+
+-------------------------------------------------------------------

Old:
----
  lighttpd-1.4.67.tar.xz
  lighttpd-1.4.67.tar.xz.asc

New:
----
  lighttpd-1.4.68.tar.xz
  lighttpd-1.4.68.tar.xz.asc

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ lighttpd.spec ++++++
--- /var/tmp/diff_new_pack.IOQRIZ/_old  2023-01-23 18:31:46.647993105 +0100
+++ /var/tmp/diff_new_pack.IOQRIZ/_new  2023-01-23 18:31:46.659993180 +0100
@@ -26,7 +26,7 @@
   %define _fillupdir %{_localstatedir}/adm/fillup-templates
 %endif
 Name:           lighttpd
-Version:        1.4.67
+Version:        1.4.68
 Release:        0
 Summary:        A Secure, Fast, Compliant, and Very Flexible Web Server
 License:        BSD-3-Clause
@@ -344,7 +344,6 @@
 %{_libdir}/%{name}/mod_cgi.so
 %{_libdir}/%{name}/mod_deflate.so
 %{_libdir}/%{name}/mod_dirlisting.so
-%{_libdir}/%{name}/mod_evasive.so
 %{_libdir}/%{name}/mod_evhost.so
 %{_libdir}/%{name}/mod_expire.so
 %{_libdir}/%{name}/mod_extforward.so
@@ -355,16 +354,13 @@
 %{_libdir}/%{name}/mod_redirect.so
 %{_libdir}/%{name}/mod_rewrite.so
 %{_libdir}/%{name}/mod_scgi.so
-%{_libdir}/%{name}/mod_secdownload.so
 %{_libdir}/%{name}/mod_setenv.so
 %{_libdir}/%{name}/mod_simple_vhost.so
 %{_libdir}/%{name}/mod_ssi.so
 %{_libdir}/%{name}/mod_staticfile.so
 %{_libdir}/%{name}/mod_sockproxy.so
 %{_libdir}/%{name}/mod_status.so
-%{_libdir}/%{name}/mod_uploadprogress.so
 %{_libdir}/%{name}/mod_userdir.so
-%{_libdir}/%{name}/mod_usertrack.so
 %{_libdir}/%{name}/mod_vhostdb.so
 %{_libdir}/%{name}/mod_wstunnel.so
 %{_libdir}/%{name}/mod_authn_dbi.so

++++++ lighttpd-1.4.67.tar.xz -> lighttpd-1.4.68.tar.xz ++++++
++++ 14496 lines of diff (skipped)