]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
Merge r1610814, r1610686, r1610707 from trunk:
authorEric Covener <covener@apache.org>
Thu, 21 Aug 2014 17:33:48 +0000 (17:33 +0000)
committerEric Covener <covener@apache.org>
Thu, 21 Aug 2014 17:33:48 +0000 (17:33 +0000)
commit55b7b85f86d5f688ae4b6d4c5468df00040cd35b
tree46d1bd5fc413824f4c35e6499c8b7d17d48f548a
parent6dc5586d98a41d095818a95696a463d7dbd195b0
Merge r1610814, r1610686, r1610707 from trunk:

      *) SECURITY: CVE-2013-5704 (cve.mitre.org)
         core: HTTP trailers could be used to replace HTTP headers
         late during request processing, potentially undoing or
         otherwise confusing modules that examined or modified
         request headers earlier.  Adds "MergeTrailers" directive to restore
         legacy behavior.

    Submitted By: Edward Lu, Yann Ylavic, Joe Orton, Eric Covener
    Committed By: covener

Reviewed By:  covener, wrowe, rpluem

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1619489 13f79535-47bb-0310-9956-ffa450edef68
14 files changed:
CHANGES
STATUS
docs/manual/mod/core.xml
docs/manual/mod/mod_log_config.xml
include/ap_mmn.h
include/http_core.h
include/httpd.h
modules/http/http_filters.c
modules/http/http_request.c
modules/loggers/mod_log_config.c
modules/proxy/mod_proxy_http.c
modules/proxy/proxy_util.c
server/core.c
server/protocol.c