LiteSpeed Web Server v5.4.10
In this release: new features, bug fixes, and more!
[New Feature] Add ForceSecureCookie configuration directive to enforce "secure" and "SameSite" cookie attributes. This directive can be set in an Apache config file at the server or vhost level, or in the document root directory's .htaccess file.
[New Feature] Allow LiteSpeed Cache for WordPress plugin to use ESI combine sub-requests to improve ESI performance.
[New Feature] Update cPanel plugin to automatically apply new ECC certificates generated through the plugin.
[Improvement] Apply Expires header to a partial response for a range request.
[Improvement] Improve PHP default handler for DirectAdmin.
[Improvement] Update bundled WHM plugin to v4.1.2 with improved WP cache scan logic.
[Bug Fix] Avoid stapling expired OCSP responses.
[Bug Fix] Properly apply URL encoding for Location URL generated by a rewrite rule.
[Bug Fix] HTTP3/IETF QUIC: close immediately if crypto session can't be initialized.
[Bug Fix] Close down HTTP3/QUIC streams reset by peer in a timely manner.
[Bug Fix] Normalize IPv6 addresses to properly reuse existing listener sockets.
[Bug Fix] Update Python application handler internal URL to avoid being blocked when .py suffix is blocked.
[Bug Fix] Apply header operations for pages generated by python/nodejs applications.
[Bug Fix] Properly detect HTTP/2 GREASE frame and GREASE settings entry, avoiding protocol errors.
[Bug Fix] Avoid releasing cache objects too early.
[Bug Fix] Address a rare crash in ESI parser.
[Bug Fix] Force apply ACL configuration changes when client access level is cached in SHM.
[Bug Fix] Reset per client concurrent connection counter stored in SHM when server restarts.
[Bug Fix] For directory auto index, avoid a blank file name when special characters are in the name.
[Tuning] Automatically detect and neutralize bad rewrite rules that cause looping proxy to the same server.
[Tuning] Install alt-python38 wsgi-lsapi binary from source if rpm package is not available.
[Tuning] Add PHP 8.0 auto detection.
Please remember, there may be some delay between this announcement and the ability to auto-update. If you don't want to wait, you can update manually via the following command: `/usr/local/lsws/admin/misc/lsup.sh -f -v 5.4.10`
Thursday, October 8, 2020