Skip to content
CHANGES 582 KiB
Newer Older
Sander Striker's avatar
Sander Striker committed
Changes with Apache 2.0.49
Joe Orton's avatar
Joe Orton committed
  *) Fix build with parallel make.  PR 24643.  [Joe Orton]

  *) mod_rewrite: In external rewrite maps lookup keys containing
     a newline now cause a lookup failure. PR 14453.
     [Cedric Gavage <cedric.gavage unixtech.be>, André Malo]

  *) Backport major overhaul of mod_include's filter parser from 2.1.
     The new parser code is expected to be more robust and should
     catch all of the edge cases that were not handled by the previous one.
     The 2.1 external API changes were hidden by a wrapper which is
     expected to keep the API backwards compatible.  [André Malo]

Paul J. Reder's avatar
 
Paul J. Reder committed
  *) Add a hook (insert_error_filter) to allow filters to re-insert
     themselves during processing of error responses. Enable mod_expires
     to use the new hook to include Expires headers in valid error
     responses. This addresses an RFC violation. It fixes PRs 19794,
     24884, and 25123. [Paul J. Reder]

  *) Add Polish translation of error messages.  PR 25101.
     [Tomasz Kepczynski <tomek jot23.org>]

  *) Add AP_MPMQ_MPM_STATE function code for ap_mpm_query. (Not yet
     supported for BeOS, OS/2, or Win32 MPMs.)  [Jeff Trawick,
     Brad Nicholes]

  *) Add mod_status hook to allow modules to add to the mod_status
     report.  [Joe Orton]

  *) Fix htdbm to generate comment fields in DBM files correctly.
     [Justin Erenkrantz]

  *) mod_dav: Use bucket brigades when reading PUT data. This avoids
     problems if the data stream is modified by an input filter. PR 22104.
     [Tim Robbins <tim robbins.dropbear.id.au>, André Malo]

Justin Erenkrantz's avatar
Justin Erenkrantz committed
  *) Fix RewriteBase directive to not add double slashes.  [André Malo]

  *) Improve 'configure --help' output for some modules.  [Astrid Keßler]

  *) Correct UseCanonicalName Off to properly check incoming port number.
     [Jim Jagielski]

  *) Fix slow graceful restarts with prefork MPM.  [Joe Orton]

  *) Fix a problem with namespace mappings being dropped in mod_dav_fs;
     if any property values were set which defined namespaces these
     came out mangled in the PROPFIND response.  PR 11637.
     [Amit Athavale <amit_athavale persistent.co.in>]

  *) mod_dav: Return a WWW-auth header for MOVE/COPY requests where
     the destination resource gives a 401.  PR 15571.  [Joe Orton]

  *) SECURITY [CAN-2003-0020]: Escape arbitrary data before writing
     into the errorlog.  [André Malo]

  *) mod_autoindex / core: Don't fail to show filenames containing
     special characters like '%'. PR 13598.  [André Malo]
 
  *) mod_status: Report total CPU time accurately when using a threaded
     MPM.  PR 23795.  [Jeff Trawick]

  *) Fix memory leak in handling of request bodies during reverse
     proxy operations.  PR 24991. [Larry Toppi <larry.toppi citrix.com>]

  *) Win32 MPM: Implement MaxMemFree to enable setting an upper
     limit on the amount of storage used by the bucket brigades
     in each server thread. [Bill Stoddard]
Paul J. Reder's avatar
 
Paul J. Reder committed
  *) Modified the cache code to be header-location agnostic. Also
     fixed a number of other cache code bugs related to PR 15852.
     Includes a patch submitted by Sushma Rai <rsushma novell.com>.
     This fixes mod_mem_cache but not mod_disk_cache yet so I'm not
     closing the PR since that is what they are using. [Paul J. Reder]

  *) complain via error_log when mod_include's INCLUDES filter is
     enabled, but the relevant Options flag allowing the filter to run
     for the specific resource wasn't set, so that the filter won't
     silently get skipped. next remove itself, so the warning will be
     logged only once [Stas Bekman, Jeff Trawick, Bill Rowe]

Jeff Trawick's avatar
Jeff Trawick committed
  *) mod_info: HTML escape configuration information so it displays 
     correctly. PR 24232. [Thom May]
     
Jeff Trawick's avatar
Jeff Trawick committed
  *) Restore the ability to add a description for directories that
     don't contain an index file.  (Broken in 2.0.48) [André Malo]

  *) Fix a problem with the display of empty variables ("SetEnv foo") in
     mod_include.  PR 24734  [Markus Julen <mj zermatt.net>]

Joe Orton's avatar
Joe Orton committed
  *) mod_log_config: Log the minutes component of the timezone correctly.
     PR 23642.  [Hong-Gunn Chew <hgbug gunnet.org>]

Joe Orton's avatar
Joe Orton committed
  *) mod_proxy: Fix cases where an invalid status-line could be sent 
     to the client.  PR 23998.  [Joe Orton]

Joe Orton's avatar
Joe Orton committed
  *) mod_ssl: Fix segfaults at startup if other modules which use OpenSSL
     are also loaded.  [Joe Orton]

Joe Orton's avatar
Joe Orton committed
  *) mod_ssl: Use human-readable OpenSSL error strings in logs; use
     thread-safe interface for retrieving error strings.  [Joe Orton]

Paul J. Reder's avatar
 
Paul J. Reder committed
  *) mod_expires: Initialize ExpiresDefault to NULL instead of "" to
     avoid reporting an Internal Server error if it is used without
     having been set in the httpd.conf file. PR: 23748, 24459
     [Andre Malo, Liam Quinn  <liam htmlhelp.com>]

  *) mod_autoindex: Don't omit the <tr> start tag if the SuppressIcon
     option is set. PR 21668.  [Jesse Tie-Ten-Quee <highos highos.com>]

  *) mod_include no longer allows an ETag header on 304 responses.
     PR 19355. [Geoffrey Young <geoff apache.org>, André Malo]

Jeff Trawick's avatar
Jeff Trawick committed
  *) EBCDIC: Convert header fields to ASCII before sending (broken
     since 2.0.44). [Martin Kraemer]

Jeff Trawick's avatar
Jeff Trawick committed
  *) Fix the inability to log errors like exec failure in
     mod_ext_filter/mod_cgi script children.  This was broken after 
     such children stopped inheriting the error log handle.  
     [Jeff Trawick]

  *) Fix mod_info to use the real config file name, not the default
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     config file name.  [Aryeh Katz <aryeh secured-services.com>]
  *) Set the scoreboard state to indicate logging prior to running 
     logging hooks so that server-status will show 'L' for hung loggers
     instead of 'W'.  [Jeff Trawick]

Sander Striker's avatar
Sander Striker committed
Changes with Apache 2.0.48
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed

  *) SECURITY [CAN-2003-0789]: mod_cgid: Resolve some mishandling of
     the AF_UNIX socket used to communicate with the cgid daemon and
     the CGI script.  [Jeff Trawick]
Sander Striker's avatar
Sander Striker committed

William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
  *) SECURITY [CAN-2003-0542]: Fix buffer overflows in mod_alias and 
     mod_rewrite which occurred if one configured a regular expression 
     with more than 9 captures.  [André Malo]
  *) mod_include: fix segfault which occured if the filename was not
     set, for example, when processing some error conditions.
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     PR 23836.  [Brian Akins <bakins web.turner.com>, André Malo]
  *) fix the config parser to support <Foo>..</Foo> containers (no
     arguments in the opening tag) supported by httpd 1.3. Without
     this change mod_perl 2.0's <Perl> sections are broken.
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     ["Philippe M. Chiasson" <gozer cpan.org>]
  *) mod_cgid: fix a hash table corruption problem which could
     result in the wrong script being cleaned up at the end of a
     request.  [Jeff Trawick]

  *) Update httpd-*.conf to be clearer in describing the connection
     between AddType and AddEncoding for defining the meaning of
     compressed file extensions. [Roy Fielding]

  *) mod_rewrite: Don't die silently when failing to open RewriteLogs.
     PR 23416.  [André Malo]

Paul J. Reder's avatar
 
Paul J. Reder committed
  *) mod_rewrite: Fix mod_rewrite's support of the [P] option to send
     rewritten request using "proxy:". The code was adding multiple "proxy:"
     fields in the rewritten URI. PR: 13946.
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     [Eider Oliveira <eider bol.com.br>]
Paul J. Reder's avatar
 
Paul J. Reder committed

Martin Kraemer's avatar
Martin Kraemer committed
  *) cache_util: Fix ap_check_cache_freshness to check max_age, smax_age, and
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     expires as directed in RFC 2616. [Thomas Castelle <tcastelle generali.fr>]
Paul J. Reder's avatar
 
Paul J. Reder committed

Thom May's avatar
Thom May committed
  *) Ensure that ssl-std.conf is generated at configure time, and switch
Andre Malo's avatar
Andre Malo committed
     to using the expanded config variables to work the same as
     httpd-std.conf PR: 19611
Thom May's avatar
Thom May committed
     [Thom May]

Sander Striker's avatar
Sander Striker committed
  *) mod_ssl: Fix segfaults after renegotiation failure. PR 21370
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     [Hartmut Keil <Hartmut.Keil adnovum.ch>]
Sander Striker's avatar
Sander Striker committed

Sander Striker's avatar
Sander Striker committed
  *) mod_autoindex: If a directory contains a file listed in the
     DirectoryIndex directive, the folder icon is no longer replaced
     by the icon of that file. PR 9587.
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     [David Shane Holden <dpejesh yahoo.com>]
Sander Striker's avatar
Sander Striker committed

Sander Striker's avatar
Sander Striker committed
  *) Fixed mod_usertrack to not get false positive matches on the
     user-tracking cookie's name.  PR 16661.
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     [Manni Wood <manniwood planet-save.com>]
Sander Striker's avatar
Sander Striker committed

Sander Striker's avatar
Sander Striker committed
  *) mod_cache: Fix the cache code so that responses can be cached
     if they have an Expires header but no Etag or Last-Modified
     headers. PR 23130.
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     [<bjorn exoweb.net>]
Sander Striker's avatar
Sander Striker committed

  *) mod_log_config: Fix %b log format to write really "-" when 0 bytes
     were sent (e.g. with 304 or 204 response codes).  [Astrid Keßler]

  *) Modify ap_get_client_block() to note if it has seen EOS.
     [Justin Erenkrantz]

  *) Fix a bug, where mod_deflate sometimes unconditionally compressed the
     content if the Accept-Encoding header contained only other tokens than
     "gzip" (such as "deflate"). PR 21523.  [Joe Orton, André Malo]

Jeff Trawick's avatar
Jeff Trawick committed
  *) Avoid an infinite recursion, which occured if the name of an included
Loading
Loading full blame...