APACHE 2.0 STATUS: -*-text-*-
-Last modified at [$Date: 2004/08/26 20:25:54 $]
+Last modified at [$Date: 2004/08/26 20:50:17 $]
Release:
*) [SECURITY] mod_ssl: Fix potential input filter segfaults in SPECULATIVE mode.
http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/ssl/ssl_engine_io.c?r1=1.125&r2=1.126
PR: 30134
- +1: jorton, trawick
+ +1: jorton, trawick, jerenkrantz
*) unixd_accept: Eliminate now-unnecessary apr_os_sock_get() call.
http://cvs.apache.org/viewcvs.cgi/httpd-2.0/os/unix/unixd.c?r1=1.66&r2=1.67
- +1: jorton, trawick
+ +1: jorton, trawick, jerenkrantz
*) Prevent byterange filter doing its thang for a CGI which returns a Content-Range
http://cvs.apache.org/viewcvs.cgi/httpd-2.0/server/util_script.c?r1=1.89&r2=1.90
- +1: jorton, trawick, nd
+ +1: jorton, trawick, nd, jerenkrantz
*) mod_ssl: Add ssl_is_https optional hook.
http://www.apache.org/~jorton/mod_ssl-2.0-ishttps.diff
Solve this by introducing the "virtual" modifier to the Action
directive. PR 28553.
modules/mappers/mod_actions.c: r1.32, r1.34
- +1: nd
+ jerenkrantz: Icky side-effect of the *t == '0' check.
+ +1: nd, jerenkrantz
*) allow symlinks on directories to be processed by Include directives
and stop possible recursion by a counter. PR 28492
server/config.c: r1.175
- +1: nd
+ +1: nd, jerenkrantz
*) mod_log_config: Cleanup log_header_out function to allow multiple headers
like Set-Cookie to be logged properly. PR 27787 (2.0 + 1.3)
modules/loggers/mod_log_config.c: r1.116
+ jerenkrantz asks: Isn't this what apr_table_merge is for?
+1: nd
*) Fix memory leak in mod_rewrite. PR 27862. (2.0 + 1.3)
*) mod_include: remove "recursive-include" check, it's no longer
necessary and forbids legal actions.
modules/filters/mod_include.c: r1.296
+ jerenkrantz: ISTR, we forbid recursive checks elsewhere, but I've
+ completely forgotten where.
+1: nd
*) mod_dav: Send an EOS at the end of the multistatus brigade.