- next is 1.4.51

CMakeLists.txt

@@ -10,7 +10,7 @@ enable_testing()
 
 set(CPACK_PACKAGE_VERSION_MAJOR 1)
 set(CPACK_PACKAGE_VERSION_MINOR 4)
-set(CPACK_PACKAGE_VERSION_PATCH 50)
+set(CPACK_PACKAGE_VERSION_PATCH 51)
 set(CPACK_PACKAGE_VERSION "${CPACK_PACKAGE_VERSION_MAJOR}.${CPACK_PACKAGE_VERSION_MINOR}.${CPACK_PACKAGE_VERSION_PATCH}")
 
 set(CPACK_RESOURCE_FILE_LICENSE "${CMAKE_SOURCE_DIR}/COPYING")

NEWS

@@ -3,6 +3,8 @@
 NEWS
 ====
 
+- 1.4.51
+
 - 1.4.50 - 2018-08-13
   * [mod_extforward] allow explict IPs to be untrusted (#2860)
   * [core] fix crash if 'host' empty in config (fixes #2876)
@@ -61,6 +63,8 @@ NEWS
   * [build] add missing file for test_burl
   * [core] quell insignificant coverity warning
   * [core] extend server.http-parseopts
+  * [mod_alias] security: path traversal in mod_alias (in some use cases) (fixes #2898)
+  * [core] security: use-after-free after invalid Range request (fixes #2899)
 
 - 1.4.49 - 2018-03-11
   * [core] adjust offset if response header blank line

SConstruct

@@ -12,7 +12,7 @@ except NameError:
 	string_types = str
 
 package = 'lighttpd'
-version = '1.4.50'
+version = '1.4.51'
 
 underscorify_reg = re.compile('[^A-Z0-9]')
 def underscorify(id):

configure.ac

@@ -14,7 +14,7 @@ dnl - if an argument uses more than one line and is not a single
 dnl   function call, the argument should be on different lines than the
 dnl   wrapping braces
 AC_PREREQ(2.60)
-AC_INIT([lighttpd], [1.4.50], [contact@lighttpd.net])
+AC_INIT([lighttpd], [1.4.51], [contact@lighttpd.net])
 AC_CONFIG_SRCDIR([src/server.c])
 AC_CONFIG_HEADER([config.h])
 AC_CONFIG_MACRO_DIR([m4])

meson.build

@@ -1,4 +1,4 @@
-project('lighttpd', 'c', version: '1.4.50', default_options : ['c_std=c11'])
+project('lighttpd', 'c', version: '1.4.51', default_options : ['c_std=c11'])
 
 subdir('src')
 subdir('tests')