possible XSS for a site where untrusted users can upload files to
a location with MultiViews enabled. [Niels Heinen <heinenn google.com>]
+ *) mod_ldap: Treat the "server unavailable" condition as a transient
+ error with all LDAP SDKs. [Filip Valder <filip.valder vsb.cz>]
+
*) core: Add filesystem paths to access denied / access failed messages.
[Eric Covener]
2.2.x patch: http://people.apache.org/~rjung/patches/htdbm-htpasswd-handling_crypt_failure-2_2.patch
+1: rjung, trawick, wrowe
- * include/util_ldap.h: Treat LDAP_UNAVAILABLE as a transient error
- with non-MS LDAP SDKs; seen with OpenLDAP against Novell eDirectory.
- Submitted by: Filip Valder <filip.valder vsb.cz> (via RH bugzilla)
- trunk patch: http://svn.apache.org/viewvc?view=revision&revision=1348036
- 2.4.x patch: http://svn.apache.org/viewvc?view=revision&revision=1362056
- 2.2.x patch: http://people.apache.org/~rjung/patches/treat_ldap_unavailable_transient-2_2.patch
- +1: rjung, fuankg, wrowe
-
PATCHES PROPOSED TO BACKPORT FROM TRUNK:
[ New proposals should be added at the end of the list ]
#include "apr_time.h"
#include "apr_ldap.h"
-#if APR_HAS_MICROSOFT_LDAPSDK
+#ifdef LDAP_UNAVAILABLE
#define AP_LDAP_IS_SERVER_DOWN(s) ((s) == LDAP_SERVER_DOWN \
||(s) == LDAP_UNAVAILABLE)
#else