• June 14, 2026
• in releases
• 4 min read

1.4.83

Important changes

• security fixes; bug fixes; tighten resource management

Highlights

• add PQC hybrid KEM X25519MLKEM768 to default TLS groups
• mod_sockproxy can now route connections based on TLS SNI
• mod_proxy proxy.header enhanced config for url-path mapping of response headers
• HTTP Incremental header support
• portability/compatibility with library updates (lighttpd dependencies)

BEHAVIOR CHANGES

• add PQC hybrid KEM X25519MLKEM768 to default TLS groups
  Reference: TLSRef guidelines
  https://docs.tlsref.org/server-side-tls.html
• HTTP/1.1 Upgrade: h2c has been deprecated; set default to disabled in lighttpd, but can still be enabled in config, and http2 prior knowledge is still enabled

Downloads

• lighttpd-1.4.83.tar.gz (GPG signature)
  • SHA256: 54f9598f6c07df0e9607c74bf6d2f6a45b0f420bcb0590bc5a01c5a6e3355f1a
• lighttpd-1.4.83.tar.xz (GPG signature)
  • SHA256: b3f878156480079f8a93903bd24d456074a0fbedb9b4d99fcd65df33b1f566f0
• SHA256 checksums
• SHA512 checksums