]>
git.ipfire.org Git - thirdparty/apache/httpd.git/log
Rainer Jung [Wed, 5 Jun 2013 14:47:30 +0000 (14:47 +0000)]
htdigest: Fix buffer overflow when reading digest
password file with very long lines.
PR 54893.
Backport of r1475878 from trunk resp.
r1476089 from 2.4.x resp. r1476242
from 2.2.x.
Proposed/Backported by: rjung
Reviewed by: minfrin, wrowe
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1489893 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Wed, 5 Jun 2013 14:44:02 +0000 (14:44 +0000)]
mod_ssl: Backport SSLHonorCipher
PR 28665.
Backport of r103832 and r103837 from trunk.
Proposed/Backported by: rjung
Reviewed by: humbedooh, wrowe
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1489890 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Wed, 5 Jun 2013 14:05:17 +0000 (14:05 +0000)]
Typos in config comments.
Backports of r290940, r713575 and r732816
from 2.4.x resp. r1489879 from 2.2.x.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1489881 13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Tue, 4 Jun 2013 22:01:26 +0000 (22:01 +0000)]
If we are holding a going-away party for 2.0, vote and promote a few patches
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1489652 13f79535 -47bb-0310-9956-
ffa450edef68
Guenter Knauf [Sat, 18 May 2013 20:30:30 +0000 (20:30 +0000)]
More NetWare build tweaks.
Make use of CFLAGS from environment.
Added default maxerrors value 1 so that the compiler breaks
after 1st error; can be overwritten with CC_MAX_ERRORS var.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1484176 13f79535 -47bb-0310-9956-
ffa450edef68
Guenter Knauf [Sat, 18 May 2013 03:21:50 +0000 (03:21 +0000)]
Use SVN revision for NetWare dev builds version info.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1484051 13f79535 -47bb-0310-9956-
ffa450edef68
Graham Leggett [Tue, 30 Apr 2013 15:07:51 +0000 (15:07 +0000)]
Vote.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1477681 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Fri, 26 Apr 2013 15:07:11 +0000 (15:07 +0000)]
Propose.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1476248 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Fri, 19 Apr 2013 08:55:08 +0000 (08:55 +0000)]
Update proposal and include the needed other
one in the patch.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1469748 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Fri, 19 Apr 2013 07:42:51 +0000 (07:42 +0000)]
Remove non-issue checked by three people.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1469724 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Fri, 19 Apr 2013 07:35:22 +0000 (07:35 +0000)]
Prevent a case of SSI timefmt-smashing with filter chains including
multiple INCLUDES filters:
* modules/filters/mod_include.c (add_include_vars): Drop unused
timefmt argument.
(add_include_vars_lazy): Take timefmt argument.
(get_include_var, handle_printenv): Pass time format from context.
PR: 39369
Backport of r757376 from trunk resp. r773352 from 2.2.x.
Submitted by: jorton
Backported by: rjung
Reviewed by: wrowe, humbedooh
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1469722 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Fri, 19 Apr 2013 07:29:32 +0000 (07:29 +0000)]
mod_rewrite: When evaluating a proxy rule in directory context,
do escape the filename by default, since mod_proxy will not
escape in that case due to the (deliberate) fixup hook ordering.
PR 46428
Backport of r757427 from trunk resp. r773351 from 2.2.x.
Submitted by: jorton/rpluem
Backported by: rjung
Reviewed by: wrowe, humbedooh
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1469721 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Fri, 19 Apr 2013 07:18:08 +0000 (07:18 +0000)]
Improve platform detection for bundled PCRE by updating config.guess
and config.sub.
Submitted by: rjung
Reviewed by: wrowe, humbedooh
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1469717 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Fri, 19 Apr 2013 05:36:51 +0000 (05:36 +0000)]
vote + promote
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1469701 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Thu, 4 Apr 2013 11:43:34 +0000 (11:43 +0000)]
looks like 2.0 is n/a for proxy timeout.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1464473 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Thu, 4 Apr 2013 11:40:34 +0000 (11:40 +0000)]
this showstopper is accounted for in the normal backport in the same section
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1464467 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Fri, 5 Oct 2012 02:53:32 +0000 (02:53 +0000)]
regression in rewrite patch definitely doesn't fly in mature releases
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1394350 13f79535 -47bb-0310-9956-
ffa450edef68
Eric Covener [Thu, 4 Oct 2012 01:57:19 +0000 (01:57 +0000)]
examples seem to not be an issue
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1393875 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Wed, 3 Oct 2012 18:15:20 +0000 (18:15 +0000)]
Comment, vote, propose.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1393644 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Wed, 3 Oct 2012 16:18:10 +0000 (16:18 +0000)]
Merge r1198940 from trunk resp. r1227280 from 2.2.x:
Fix integer overflow in ap_pregsub. This can be triggered e.g.
with mod_setenvif via a malicious .htaccess
CVE-2011-3607
http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/
Submitted by: sf
Reviewed/backported by: rjung
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1393580 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Wed, 3 Oct 2012 16:13:16 +0000 (16:13 +0000)]
Revert commit r1392042.
It was voted as backport of r1227280 from 2.2.x,
instead applied was r1198940 from trunk, which
breaks compilation (wrong return type, non-existing
APR macro). The 2.2 revision has these fixed.
Will apply the 2.2 revision next, since the vote
was actually for that one.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1393578 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Mon, 1 Oct 2012 00:49:45 +0000 (00:49 +0000)]
AllowAnyURI
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1392152 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Sun, 30 Sep 2012 15:52:37 +0000 (15:52 +0000)]
votes
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1392052 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Sun, 30 Sep 2012 15:50:21 +0000 (15:50 +0000)]
*) SECURITY: CVE-2012-0053 (cve.mitre.org)
Fix an issue in error responses that could expose "httpOnly" cookies
when no custom ErrorDocument is specified for status code 400.
[Eric Covener]
r1234837 on 2.0.x:
http://people.apache.org/~trawick/2.0-CVE-2012-0053-r1234837.patch
+1: trawick, rjung, jim
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1392050 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Sun, 30 Sep 2012 15:48:25 +0000 (15:48 +0000)]
initgroups
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1392047 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Sun, 30 Sep 2012 15:47:39 +0000 (15:47 +0000)]
protot
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1392046 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Sun, 30 Sep 2012 15:47:15 +0000 (15:47 +0000)]
Promote
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1392045 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Sun, 30 Sep 2012 15:46:35 +0000 (15:46 +0000)]
Vote
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1392044 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Sun, 30 Sep 2012 15:44:46 +0000 (15:44 +0000)]
SECURITY: CVE-2012-0031 (cve.mitre.org)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1392043 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Sun, 30 Sep 2012 15:42:25 +0000 (15:42 +0000)]
Merge r1198940 from trunk:
Fix integer overflow in ap_pregsub. This can be triggered e.g.
with mod_setenvif via a malicious .htaccess
CVE-2011-3607
http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/
Submitted by: sf
Reviewed/backported by: jim
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1392042 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Sun, 30 Sep 2012 15:37:05 +0000 (15:37 +0000)]
propose T&R
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1392040 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Sun, 30 Sep 2012 15:36:25 +0000 (15:36 +0000)]
Already in
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1392039 13f79535 -47bb-0310-9956-
ffa450edef68
André Malo [Tue, 11 Sep 2012 20:27:54 +0000 (20:27 +0000)]
update transformation
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1383600 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Sat, 11 Aug 2012 12:39:25 +0000 (12:39 +0000)]
bad header doxygen: ap_rflush does not return the number
of bytes flushed, it returns 0 on success, -1 on error.
Should be CTR.
Backport of r1368393 and r1368396 from trunk
resp. r1371930 from 2.4.x and r1371931 from 2.2.x.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1371934 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Sun, 29 Jul 2012 17:31:15 +0000 (17:31 +0000)]
Vote.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1366878 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sat, 14 Jul 2012 10:02:02 +0000 (10:02 +0000)]
xforms (let's start with the English versions)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1361510 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sat, 14 Jul 2012 09:55:31 +0000 (09:55 +0000)]
Let's try a test again
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1361509 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sat, 14 Jul 2012 09:54:20 +0000 (09:54 +0000)]
Change the wording a bit (thankee, adaptr)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1361508 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sat, 14 Jul 2012 09:50:11 +0000 (09:50 +0000)]
Test out a page with the notice on
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1361505 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Sat, 14 Jul 2012 09:49:36 +0000 (09:49 +0000)]
- Add a notice to each page that this documentation is no longer maintained (though not at EoL), and that the reader should look at the 2.2 or 2.4 documentation instead.
- Add a link to the 2.2 version of each document, if such a doc exists.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1361504 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Fri, 13 Jul 2012 19:41:27 +0000 (19:41 +0000)]
xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1361348 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Gruno [Fri, 13 Jul 2012 19:35:30 +0000 (19:35 +0000)]
Add a canonical link to all pages, so search engines will prefer 2.2 over 2.0
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1361345 13f79535 -47bb-0310-9956-
ffa450edef68
Guenter Knauf [Thu, 3 May 2012 17:13:05 +0000 (17:13 +0000)]
NetWare build system: added vars for Linux build.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1333556 13f79535 -47bb-0310-9956-
ffa450edef68
André Malo [Mon, 9 Apr 2012 21:42:41 +0000 (21:42 +0000)]
update transformation
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1311473 13f79535 -47bb-0310-9956-
ffa450edef68
Daniel Ruggeri [Sat, 31 Mar 2012 02:31:24 +0000 (02:31 +0000)]
Correct SSLCipherSuite + documentation (move rather than add)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1307700 13f79535 -47bb-0310-9956-
ffa450edef68
Roy T. Fielding [Sat, 17 Mar 2012 09:10:36 +0000 (09:10 +0000)]
merge with trunk r1301894
Unregistered media types in common use, according to Wikipedia and MS.
New IANA media types as of 2012 Mar 16 18:55 PDT.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1301897 13f79535 -47bb-0310-9956-
ffa450edef68
Rich Bowen [Wed, 29 Feb 2012 03:00:34 +0000 (03:00 +0000)]
We no longer maintain a list of companies providing commercial httpd
support.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1294956 13f79535 -47bb-0310-9956-
ffa450edef68
André Malo [Fri, 10 Feb 2012 22:03:53 +0000 (22:03 +0000)]
enter manpage section assignments
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1242955 13f79535 -47bb-0310-9956-
ffa450edef68
André Malo [Fri, 10 Feb 2012 22:02:21 +0000 (22:02 +0000)]
update transformation
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1242954 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Mon, 30 Jan 2012 16:51:06 +0000 (16:51 +0000)]
need a hint on a reference to jorton stuff
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1237775 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Mon, 30 Jan 2012 15:50:29 +0000 (15:50 +0000)]
explain the HTTP 0.9 issue with the existing (committed) CVE-2011-3368
solution
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1237730 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Mon, 30 Jan 2012 13:29:37 +0000 (13:29 +0000)]
CVE-2011-3348: nothing to fix, original problem
only applied to mod_proxy_ajp which does not
exist in 2.0.x.
CVE-2010-2068: added comment. I think nothing
to fix either, but mor eeyes welcome.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1237644 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Sun, 29 Jan 2012 18:20:06 +0000 (18:20 +0000)]
point to clean patch for CVE-2011-3368/CVE-2011-4317
I'm fine with proceeding with this in order to have a consistent
solution for 2.0/2.2/2.4, but I should figure out the HTTP 0.9
failure with just the original 3368 patch since we're not supposed
to require the 4317 fix on 2.0.x.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1237406 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Sun, 29 Jan 2012 00:11:09 +0000 (00:11 +0000)]
3368/4317 notes/proposal
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1237185 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Sat, 28 Jan 2012 21:03:38 +0000 (21:03 +0000)]
vote, propose
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1237165 13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Sat, 28 Jan 2012 20:41:52 +0000 (20:41 +0000)]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1237159 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Sat, 28 Jan 2012 20:12:32 +0000 (20:12 +0000)]
propose patch for CVE-2012-0031 on 2.0.x (older patch wouldn't quite apply)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1237152 13f79535 -47bb-0310-9956-
ffa450edef68
Greg Ames [Fri, 27 Jan 2012 21:48:39 +0000 (21:48 +0000)]
vote for the 2.2.x pregsub patch
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1236900 13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Fri, 27 Jan 2012 15:35:01 +0000 (15:35 +0000)]
Load up on SECURITY showstoppers to a final 2.0.65 tag; everything missing
from 2.0 CHANGES so far. Current 2.0 fixes may need further review as
already noted in STATUS
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1236717 13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Tue, 17 Jan 2012 22:54:48 +0000 (22:54 +0000)]
Fix out of date info
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1232628 13f79535 -47bb-0310-9956-
ffa450edef68
Guenter Knauf [Thu, 15 Dec 2011 21:36:33 +0000 (21:36 +0000)]
Added backport proposal.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1214962 13f79535 -47bb-0310-9956-
ffa450edef68
Guenter Knauf [Thu, 15 Dec 2011 21:05:01 +0000 (21:05 +0000)]
Removed tabs, fixed C++ comments, added prototypes.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1214957 13f79535 -47bb-0310-9956-
ffa450edef68
Guenter Knauf [Thu, 15 Dec 2011 17:41:18 +0000 (17:41 +0000)]
Removed tabs, fixed C++ comments, added prototypes.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1214887 13f79535 -47bb-0310-9956-
ffa450edef68
Hiroaki Kawai [Mon, 28 Nov 2011 00:57:21 +0000 (00:57 +0000)]
fix typo.
Submitted by: OKANO Takayoshi <kano _at_ na.rim.or.jp>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1206951 13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Fri, 11 Nov 2011 18:03:50 +0000 (18:03 +0000)]
Folks, this is becoming a problem with change and commit log messages,
this is not the only recent offender or offense.
* byterange: Range of '0-' returns 206.
Please convey sense of direction in the dimension of time? Was this
* byterange: Range of '0-' now returns 206.
or
* byterange: Correct erronious return values of 206 for Range '0-'.
kthxbye
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1201000 13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Fri, 11 Nov 2011 16:47:44 +0000 (16:47 +0000)]
Remove oh-so-stale 'reservation'.
Need to determine if proposed patch is the same as Jeff's work
https://dist.apache.org/repos/dist/release/httpd/patches/apply_to_2.0.64/
or which subset/superset it covers, before I can vote it up.
Disappointing that this maintenance effort appears forked.
Add another showstopper to reflect that absolute uri fixes
aught to be added to any 2.0.x release.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1200942 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Mon, 17 Oct 2011 04:46:40 +0000 (04:46 +0000)]
Remove comment.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1184995 13f79535 -47bb-0310-9956-
ffa450edef68
Nilgun Belma Buguner [Sun, 9 Oct 2011 02:40:32 +0000 (02:40 +0000)]
update transformations.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1180526 13f79535 -47bb-0310-9956-
ffa450edef68
Nilgun Belma Buguner [Sun, 9 Oct 2011 02:40:02 +0000 (02:40 +0000)]
update for sync with English docs.
Translated by: Nilgün Belma Bugüner <nilgun belgeler.org>
Reviewed by: Orhan Berent <berent belgeler.org>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1180525 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Fri, 7 Oct 2011 13:16:01 +0000 (13:16 +0000)]
Backported.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1180031 13f79535 -47bb-0310-9956-
ffa450edef68
Joe Orton [Fri, 7 Oct 2011 13:15:01 +0000 (13:15 +0000)]
Merge r1179239 from trunk:
SECURITY (CVE-2011-3368): Prevent unintended pattern expansion in some
reverse proxy configurations by strictly validating the request-URI:
* server/protocol.c (read_request_line): Send a 400 response if the
request-URI does not match the grammar from RFC 2616. This ensures
the input string for RewriteRule et al really is an absolute path.
Reviewed by: jim, rjung, jorton
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1180030 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Wed, 5 Oct 2011 23:26:55 +0000 (23:26 +0000)]
Vote.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1179473 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Wed, 5 Oct 2011 18:47:28 +0000 (18:47 +0000)]
note re: comment
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1179376 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Wed, 5 Oct 2011 18:42:28 +0000 (18:42 +0000)]
Add these as showstoppers...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1179375 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Sat, 1 Oct 2011 11:26:03 +0000 (11:26 +0000)]
Propose.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1177966 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Thu, 29 Sep 2011 09:31:38 +0000 (09:31 +0000)]
Add backport proposal for MaxRanges configuration
directive and ap_set_accept_ranges() utility function.
With that 2.0.x should be on par with 2.2.x w.r.t.
Ranges.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1177239 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Wed, 28 Sep 2011 15:49:02 +0000 (15:49 +0000)]
Vote, comment.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1176929 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Tue, 27 Sep 2011 14:46:57 +0000 (14:46 +0000)]
Update
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1176407 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Mon, 26 Sep 2011 19:08:45 +0000 (19:08 +0000)]
backport req
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1176001 13f79535 -47bb-0310-9956-
ffa450edef68
Guenter Knauf [Wed, 14 Sep 2011 11:22:31 +0000 (11:22 +0000)]
Some more NetWare build fixes and improvements.
Added sort function to awk export script to eleminate
need for external sort; removed DAV import file and
generate it now at compile time from headers; moved
some link parameters from commandline to def file.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1170539 13f79535 -47bb-0310-9956-
ffa450edef68
Guenter Knauf [Mon, 12 Sep 2011 16:01:17 +0000 (16:01 +0000)]
Some netWare build tweaks.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1169809 13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Mon, 12 Sep 2011 02:15:47 +0000 (02:15 +0000)]
RM warning text
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1169596 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Fri, 9 Sep 2011 16:00:43 +0000 (16:00 +0000)]
Update xfers
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1167261 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Fri, 9 Sep 2011 15:57:39 +0000 (15:57 +0000)]
bump up
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1167260 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Fri, 9 Sep 2011 14:33:52 +0000 (14:33 +0000)]
Add <lowprio20 gmail.com> for regression fix (thx otherbill!)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1167215 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Fri, 9 Sep 2011 14:07:38 +0000 (14:07 +0000)]
CVE-2011-3192
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1167184 13f79535 -47bb-0310-9956-
ffa450edef68
Jim Jagielski [Fri, 9 Sep 2011 14:02:30 +0000 (14:02 +0000)]
checked ok
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1167175 13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Fri, 9 Sep 2011 13:05:38 +0000 (13:05 +0000)]
Looks great, thanks Jeff!
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1167145 13f79535 -47bb-0310-9956-
ffa450edef68
Jeff Trawick [Fri, 9 Sep 2011 11:02:41 +0000 (11:02 +0000)]
try to herd some cats
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1167091 13f79535 -47bb-0310-9956-
ffa450edef68
Rich Bowen [Thu, 5 May 2011 13:36:58 +0000 (13:36 +0000)]
Add BSD-specific note about core dumping. (Via mi+apache aldan.algebra.com)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1099788 13f79535 -47bb-0310-9956-
ffa450edef68
Roy T. Fielding [Tue, 3 May 2011 20:15:58 +0000 (20:15 +0000)]
sync with trunk
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1099227 13f79535 -47bb-0310-9956-
ffa450edef68
Rich Bowen [Fri, 8 Apr 2011 14:44:02 +0000 (14:44 +0000)]
hernan gonzalez <hgonzalez gmail.com> points out that the USER_AGENT
strings were probably more accurate with the leading ^ anchor.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1090280 13f79535 -47bb-0310-9956-
ffa450edef68
Rich Bowen [Fri, 8 Apr 2011 14:32:17 +0000 (14:32 +0000)]
Remove unnecessary anchors in various rewrite examples. Rebuilding other
changes.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1090270 13f79535 -47bb-0310-9956-
ffa450edef68
Guenter Knauf [Tue, 5 Apr 2011 01:53:21 +0000 (01:53 +0000)]
Fixed sysinclude; removed tab.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1088846 13f79535 -47bb-0310-9956-
ffa450edef68
William A. Rowe Jr [Sun, 20 Mar 2011 21:43:55 +0000 (21:43 +0000)]
Drop obscure 1.3 change backrefs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1083581 13f79535 -47bb-0310-9956-
ffa450edef68
Guenter Knauf [Sun, 20 Mar 2011 18:58:27 +0000 (18:58 +0000)]
Removed dav_get_limit_xml_body() from mod_dav.h.
This was a forgotten prototype hanging around for close
to 11 years where no code for existed (see r85816);
now removed from all branches per wrowe's permission.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1083536 13f79535 -47bb-0310-9956-
ffa450edef68
Guenter Knauf [Wed, 2 Mar 2011 22:24:36 +0000 (22:24 +0000)]
Commented NetWare build debug output which breaks make 3.82.
(backport from r789553).
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1076438 13f79535 -47bb-0310-9956-
ffa450edef68
Rich Bowen [Sun, 16 Jan 2011 16:01:53 +0000 (16:01 +0000)]
Rebuilds changes to mod_autoindex.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1059593 13f79535 -47bb-0310-9956-
ffa450edef68
Rich Bowen [Sun, 16 Jan 2011 15:58:58 +0000 (15:58 +0000)]
Merges changes from trunk as per tid50417
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1059591 13f79535 -47bb-0310-9956-
ffa450edef68
Rainer Jung [Mon, 3 Jan 2011 15:37:41 +0000 (15:37 +0000)]
Update copyright year.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@
1054656 13f79535 -47bb-0310-9956-
ffa450edef68