add vote for fix to CAN-2005-3357

move some approved backports to appropriate section

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@371625 13f79535-47bb-0310-9956-ffa450edef68

Merge r321500 from trunk:

* modules/http/http_request.c
  (ap_allow_methods): add missing va_end call

Submitted by: nd

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@371624 13f79535-47bb-0310-9956-ffa450edef68

Update to reflect a backported patch

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@371623 13f79535-47bb-0310-9956-ffa450edef68

Merge r125495 and r126224 from trunk:

* support/check_forensic: Fix temp file usage

Submitted By: Javier Fernandez-Sanguino Pen~a
Reviewed By: Thom May

* support/check_forensic: Fix script on platforms that do not have either
  mktemp or tempfile (such as Solaris).

Also tested on Darwin & FreeBSD.

Submitted by: jerenkrantz

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@371622 13f79535-47bb-0310-9956-ffa450edef68

Merge r332986 from trunk:

Add an Irish Translation

Authored by: Noirin
Reviewed by: Colm

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@371621 13f79535-47bb-0310-9956-ffa450edef68

* Add the fix for PR 37145 as showstopper

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@371475 13f79535-47bb-0310-9956-ffa450edef68

Add one more vote, after confirming on linux.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@371453 13f79535-47bb-0310-9956-ffa450edef68

cast some more votes.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@371452 13f79535-47bb-0310-9956-ffa450edef68

* Promote two proposals to acceptances.

    * Revert my -1 on a patch, now that 2.2 has been released
      and offers a choice.

    * cast some votes.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@371449 13f79535-47bb-0310-9956-ffa450edef68

update transformation

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@369245 13f79535-47bb-0310-9956-ffa450edef68

  Correct version and copyright generation, this involves 'long line'
  flavor of the first ASF copyright line; we could use the new macro
  AP_SERVER_COPYRIGHT and defined tokens from this file for versions,
  however this is 2.0 so not expecting that we will do so.

Backports; 368395

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@368397 13f79535-47bb-0310-9956-ffa450edef68

* Propose fix for PR37791 for backport

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@368152 13f79535-47bb-0310-9956-ffa450edef68

Update copyright current year to 2006

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@367477 13f79535-47bb-0310-9956-ffa450edef68

  Fix POSIX deprecation warnings in MSVC14 (Studio 2005)
  Backports fix 357702

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@357704 13f79535-47bb-0310-9956-ffa450edef68

* Committed as r357454

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@357455 13f79535-47bb-0310-9956-ffa450edef68

Backport of r357328 from trunk:

* Fix ap_http_chunk_filter to create correct chunks in the case that a
  flush bucket is pre- and postfixed by data buckets in the brigade.

Submitted by: Ruediger Pluem
Reviewed by: Justin Erenkrantz, Joe Orton, Jim Jagielski

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@357454 13f79535-47bb-0310-9956-ffa450edef68

* Add Justins and Joes vote as per discussion on the list

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@357338 13f79535-47bb-0310-9956-ffa450edef68

* Add proposal for backport

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@357333 13f79535-47bb-0310-9956-ffa450edef68

  Test _NMAKE_VER define to determine nmake -nologo behavior,
  and use $(MAKEOPT) -f syntax throughout to avoid problems
  on mingw, borland, etc.

Backport 357226 from trunk
Claiming platform maintainer privs to just fix this for VS2005

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@357228 13f79535-47bb-0310-9956-ffa450edef68

  Change the misleading message, apr's need to go in the build tree srclib/
  not the install target tree.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@356850 13f79535-47bb-0310-9956-ffa450edef68

Fix moderate security issue CVE-2005-3352 mod_imap cross-site scripting flaw

Submitted by: Mark Cox <mjc apache.org>
Reviewed by: jorton, mjc, fielding
PR: 37874

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@356279 13f79535-47bb-0310-9956-ffa450edef68

  Backport trivial typo fix identified by Jorge Schrauwen <info blackdot.be>
  applied already to 2.2 branch, not present in trunk.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@354027 13f79535-47bb-0310-9956-ffa450edef68

update transformation

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@353834 13f79535-47bb-0310-9956-ffa450edef68

back out accidental commit

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@353833 13f79535-47bb-0310-9956-ffa450edef68

Backporting httxt2dbm from 2.1/2.2

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@351840 13f79535-47bb-0310-9956-ffa450edef68

Merge r351819 from trunk:

Point the breadcrump links to the new docs index page.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@351821 13f79535-47bb-0310-9956-ffa450edef68

Merge the httxt2dbm backport votes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@351551 13f79535-47bb-0310-9956-ffa450edef68

Patch proposal for httxt2dbm

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@351549 13f79535-47bb-0310-9956-ffa450edef68

* Propose fix for PR37559 for backport

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@347969 13f79535-47bb-0310-9956-ffa450edef68

vote

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@345735 13f79535-47bb-0310-9956-ffa450edef68

* Propose fix for PR37566 for backport.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@345685 13f79535-47bb-0310-9956-ffa450edef68

drop version reference from the property file; it's no longer needed

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@333069 13f79535-47bb-0310-9956-ffa450edef68

more URL fixes

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@333064 13f79535-47bb-0310-9956-ffa450edef68

update transformation

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@333062 13f79535-47bb-0310-9956-ffa450edef68

centralize versioning of httpd and docs urls

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@333057 13f79535-47bb-0310-9956-ffa450edef68

update transformation

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@332961 13f79535-47bb-0310-9956-ffa450edef68

vote

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@332727 13f79535-47bb-0310-9956-ffa450edef68

* Propose patch for backport

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@332662 13f79535-47bb-0310-9956-ffa450edef68

* Propose fix for PR37347 for backport

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@330635 13f79535-47bb-0310-9956-ffa450edef68

Warning about mixing +/- with bareword Options

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@330408 13f79535-47bb-0310-9956-ffa450edef68

Add CVE name that was allocated after release

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@330028 13f79535-47bb-0310-9956-ffa450edef68

update transformation

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@329546 13f79535-47bb-0310-9956-ffa450edef68

  Note release

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@329006 13f79535-47bb-0310-9956-ffa450edef68

Fix up the NetWare AWK script that extracts the version number so that it matches the new #defines in ap_release.h

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@328652 13f79535-47bb-0310-9956-ffa450edef68

Typo fix (from noodl@irc)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@328626 13f79535-47bb-0310-9956-ffa450edef68

Make changes suggested in bugzilla #37074, update transformation.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@328493 13f79535-47bb-0310-9956-ffa450edef68

vote

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@328134 13f79535-47bb-0310-9956-ffa450edef68

Update transformation to reflect fe80: -> 2001:db8:

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@328035 13f79535-47bb-0310-9956-ffa450edef68

fe80::/16 is for link-scope link-local addresses in IPv6, they are not
for going in Listen directives, VirtualHost blocks, or anything like
that, and won't work.

Perform a mass search and replace: 2001:db8 for fe80. 2001:db8 is the
IPv6 documentation prefix. See RFC3849 for more details.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@328032 13f79535-47bb-0310-9956-ffa450edef68

* Revert commit of r327601

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@327607 13f79535-47bb-0310-9956-ffa450edef68

* Move two backports from proposed to accepted, as they have enough votes now.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@327601 13f79535-47bb-0310-9956-ffa450edef68

* Add comments

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@327599 13f79535-47bb-0310-9956-ffa450edef68

* Add backport proposal for fixing PR37145

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@327597 13f79535-47bb-0310-9956-ffa450edef68

Add a vote. Tested on ubuntu, "reviewed" with vimdiff.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@327222 13f79535-47bb-0310-9956-ffa450edef68

Today a one-time change happens to all CAN- names as they are
renamed to CVE-.  Make this change to our changelog.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@326450 13f79535-47bb-0310-9956-ffa450edef68

Remove CGI block on OPTIONS method so that scripts can
respond to OPTIONS directly rather than via server default.

PR: 15242
Reviewed-by: Paul Querna, Andre Malo, William A. Rowe, Jr.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@326253 13f79535-47bb-0310-9956-ffa450edef68

mod_version was merged back. Remove that item.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@326139 13f79535-47bb-0310-9956-ffa450edef68

update transformation

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@326135 13f79535-47bb-0310-9956-ffa450edef68

adjust availability

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@326132 13f79535-47bb-0310-9956-ffa450edef68

merge mod_version_for_2.0.x branch back to branches/2.0.x
* merge 160788 to 326121 from branches/mod_version_for_2.0.x, but leave out
  generated docs files (will cleanly rebuild later)

Reviewed by: Paul Querna, Bill Rowe, (Justin Erenkrantz), me

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@326129 13f79535-47bb-0310-9956-ffa450edef68

votes++

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@321520 13f79535-47bb-0310-9956-ffa450edef68

bump version

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@321507 13f79535-47bb-0310-9956-ffa450edef68

propse small backport

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@321506 13f79535-47bb-0310-9956-ffa450edef68

Rpm packaging fix:
- Updated the apr and apr-util dependencies to require at least v0.9.7
- Stop trying to remove *.xml doc files, the httpd build does that already.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@312864 13f79535-47bb-0310-9956-ffa450edef68

  Onwards to 2.0.56-dev

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@312520 13f79535-47bb-0310-9956-ffa450edef68

  Prepare, at last, to tag 2.0.55

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@312518 13f79535-47bb-0310-9956-ffa450edef68

modules/ssl/ssl_engine_io.c (ssl_io_filter_init): Initialize the
nobuffer flag to zero since the structure is palloc'ed not pcalloc'ed.

PR: 35279
Backport: 189971
Author: jorton
Reviewed by: jerenkrantz, wrowe

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@307341 13f79535-47bb-0310-9956-ffa450edef68

backport from trunk and 2.2.x:

   SECURITY: CAN-2005-2700 (cve.mitre.org)
   mod_ssl: Fix a security issue where "SSLVerifyClient" was not
   enforced in per-location context if "SSLVerifyClient optional"
   was configured in the vhost configuration.

Submitted by: Joe Orton
Reviewed by: wrowe, trawick

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@307220 13f79535-47bb-0310-9956-ffa450edef68

Commit Greg's patch to fix worker MPM memory leak.

Approved by: Greg, OtherBill, Jeff

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@307218 13f79535-47bb-0310-9956-ffa450edef68

  Almost a security hole, but certainly not for mod_echo.  Save other
  protocol modules a significant hole if based purely on mod_echo.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@307201 13f79535-47bb-0310-9956-ffa450edef68

Small updates to latex docs build so that I can produce
a new version.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@306831 13f79535-47bb-0310-9956-ffa450edef68

  docs/build/ should not exist (docs/manual/build/ already in svn:ignore).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@306827 13f79535-47bb-0310-9956-ffa450edef68

  httpd-docs procedures call for checking out build underneath
  the docs/ tree, so add this subdirectory as an svn ignore

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@306817 13f79535-47bb-0310-9956-ffa450edef68

update transformation

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@306796 13f79535-47bb-0310-9956-ffa450edef68

swap directive and module

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@306791 13f79535-47bb-0310-9956-ffa450edef68

vote on backport of CAN-2005-2970 patch

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@306515 13f79535-47bb-0310-9956-ffa450edef68

did somebody say something?

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@306496 13f79535-47bb-0310-9956-ffa450edef68

Merge r295104 from trunk:

Refresh the SSL FAQ to bring it a little closer to reality.

Submitted by: Noirin Plunkett <firebird nerdchic.net>
Reviewed by: Joe Orton

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@295114 13f79535-47bb-0310-9956-ffa450edef68

+1 for CAN-2005-2700

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@295079 13f79535-47bb-0310-9956-ffa450edef68

Force these cgi thingies to be treated as cgi.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@293165 13f79535-47bb-0310-9956-ffa450edef68

vote, note, propose

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@292954 13f79535-47bb-0310-9956-ffa450edef68

  Undo fat fingers of commit 292397

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@292398 13f79535-47bb-0310-9956-ffa450edef68

  Small fix to remove unused 'rv' variable from the excluded code path

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@292397 13f79535-47bb-0310-9956-ffa450edef68

fix svn:keywords properties

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@291272 13f79535-47bb-0310-9956-ffa450edef68

mod_ldap: Fix PR 36563. Keep track of the number of attributes retrieved from LDAP so that all of the values can be properly cached even if the value is NULL.

Reviewed by: bnicholes, minfrin, jim

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@291123 13f79535-47bb-0310-9956-ffa450edef68

Vote in PR 36563 patch. Tested on Sol8 and OS X/darwin

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@291118 13f79535-47bb-0310-9956-ffa450edef68

Add vote.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@290868 13f79535-47bb-0310-9956-ffa450edef68

Backport the use of apr_procattr_addrspace_set() to specify whether the new process should be started in the current address space or a new address space.  This should have no effect on most platforms other than NetWare.

Reviewed By: jjclar, bnicholes, trawick

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@290850 13f79535-47bb-0310-9956-ffa450edef68

update transformation

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@290758 13f79535-47bb-0310-9956-ffa450edef68

update German translation

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@290757 13f79535-47bb-0310-9956-ffa450edef68

  The more I consider this, the less that it seems possible to truly
  handle bodies in subrequests, ever.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@290742 13f79535-47bb-0310-9956-ffa450edef68

  Reformat some long-lines >80 and delete a number of truly dead (voted
  down) suggestions.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@290740 13f79535-47bb-0310-9956-ffa450edef68

  Very important to point out exactly where this is available and where
  it is not, since TraceEnable extended is likely to be used to confirm
  behavior between differing types of servers, including 1.3/2.0/2.2

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@290733 13f79535-47bb-0310-9956-ffa450edef68

Merge r233493 from trunk:

* srclib/pcre/pcre.c (read_repeat_counts): Check for integer overflow.

Obtained from: pcre 6.2 upstream
Reviewed by: jorton, nd, wrowe

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@290658 13f79535-47bb-0310-9956-ffa450edef68

update transformation

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@290562 13f79535-47bb-0310-9956-ffa450edef68

  Quiet a second error, bodyread is always set alongside bodylen,
  and we would never use the bodyread unless bodylen is set.

  However gcc4 doesn't like our style, so quiet the compiler.

Reported by: jorton

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@290561 13f79535-47bb-0310-9956-ffa450edef68

update German translation

Reviewed by: Kess

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@290560 13f79535-47bb-0310-9956-ffa450edef68

  We never call this function with 'nothing to do', however we aught to quiet
  gcc 4's assumption that we can 'return status;' without having performed
  any operation that sets status.

Reported by: jorton

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@290558 13f79535-47bb-0310-9956-ffa450edef68

fix TraceEnable docs

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@290544 13f79535-47bb-0310-9956-ffa450edef68

`build all`

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@290522 13f79535-47bb-0310-9956-ffa450edef68