Skip to content
CHANGES 580 KiB
Newer Older
Sander Striker's avatar
Sander Striker committed
Changes with Apache 2.0.49
  *) Correct UseCanonicalName Off to properly check incoming port number.
     [Jim Jagielski]

  *) Fix slow graceful restarts with prefork MPM.  [Joe Orton]

  *) Fix a problem with namespace mappings being dropped in mod_dav_fs;
     if any property values were set which defined namespaces these
     came out mangled in the PROPFIND response.  PR 11637.
     [Amit Athavale <amit_athavale persistent.co.in>]

  *) mod_dav: Return a WWW-auth header for MOVE/COPY requests where
     the destination resource gives a 401.  PR 15571.  [Joe Orton]

  *) SECURITY [CAN-2003-0020]: Escape arbitrary data before writing
     into the errorlog.  [André Malo]

  *) mod_autoindex / core: Don't fail to show filenames containing
     special characters like '%'. PR 13598.  [André Malo]
 
  *) mod_status: Report total CPU time accurately when using a threaded
     MPM.  PR 23795.  [Jeff Trawick]

  *) Fix memory leak in handling of request bodies during reverse
     proxy operations.  PR 24991. [Larry Toppi <larry.toppi citrix.com>]

  *) Win32 MPM: Implement MaxMemFree to enable setting an upper
     limit on the amount of storage used by the bucket brigades
     in each server thread. [Bill Stoddard]
Paul J. Reder's avatar
 
Paul J. Reder committed
  *) Modified the cache code to be header-location agnostic. Also
     fixed a number of other cache code bugs related to PR 15852.
     Includes a patch submitted by Sushma Rai <rsushma novell.com>.
     This fixes mod_mem_cache but not mod_disk_cache yet so I'm not
     closing the PR since that is what they are using. [Paul J. Reder]

  *) complain via error_log when mod_include's INCLUDES filter is
     enabled, but the relevant Options flag allowing the filter to run
     for the specific resource wasn't set, so that the filter won't
     silently get skipped. next remove itself, so the warning will be
     logged only once [Stas Bekman, Jeff Trawick, Bill Rowe]

Jeff Trawick's avatar
Jeff Trawick committed
  *) mod_info: HTML escape configuration information so it displays 
     correctly. PR 24232. [Thom May]
     
Jeff Trawick's avatar
Jeff Trawick committed
  *) Restore the ability to add a description for directories that
     don't contain an index file.  (Broken in 2.0.48) [André Malo]

  *) Fix a problem with the display of empty variables ("SetEnv foo") in
     mod_include.  PR 24734  [Markus Julen <mj zermatt.net>]

Joe Orton's avatar
Joe Orton committed
  *) mod_log_config: Log the minutes component of the timezone correctly.
     PR 23642.  [Hong-Gunn Chew <hgbug gunnet.org>]

Joe Orton's avatar
Joe Orton committed
  *) mod_proxy: Fix cases where an invalid status-line could be sent 
     to the client.  PR 23998.  [Joe Orton]

Joe Orton's avatar
Joe Orton committed
  *) mod_ssl: Fix segfaults at startup if other modules which use OpenSSL
     are also loaded.  [Joe Orton]

Joe Orton's avatar
Joe Orton committed
  *) mod_ssl: Use human-readable OpenSSL error strings in logs; use
     thread-safe interface for retrieving error strings.  [Joe Orton]

Paul J. Reder's avatar
 
Paul J. Reder committed
  *) mod_expires: Initialize ExpiresDefault to NULL instead of "" to
     avoid reporting an Internal Server error if it is used without
     having been set in the httpd.conf file. PR: 23748, 24459
     [Andre Malo, Liam Quinn  <liam htmlhelp.com>]

  *) mod_autoindex: Don't omit the <tr> start tag if the SuppressIcon
     option is set. PR 21668.  [Jesse Tie-Ten-Quee <highos highos.com>]

  *) mod_include no longer allows an ETag header on 304 responses.
     PR 19355. [Geoffrey Young <geoff apache.org>, André Malo]

Jeff Trawick's avatar
Jeff Trawick committed
  *) EBCDIC: Convert header fields to ASCII before sending (broken
     since 2.0.44). [Martin Kraemer]

Jeff Trawick's avatar
Jeff Trawick committed
  *) Fix the inability to log errors like exec failure in
     mod_ext_filter/mod_cgi script children.  This was broken after 
     such children stopped inheriting the error log handle.  
     [Jeff Trawick]

  *) Fix mod_info to use the real config file name, not the default
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     config file name.  [Aryeh Katz <aryeh secured-services.com>]
  *) Set the scoreboard state to indicate logging prior to running 
     logging hooks so that server-status will show 'L' for hung loggers
     instead of 'W'.  [Jeff Trawick]

Sander Striker's avatar
Sander Striker committed
Changes with Apache 2.0.48
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed

  *) SECURITY [CAN-2003-0789]: mod_cgid: Resolve some mishandling of
     the AF_UNIX socket used to communicate with the cgid daemon and
     the CGI script.  [Jeff Trawick]
Sander Striker's avatar
Sander Striker committed

William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
  *) SECURITY [CAN-2003-0542]: Fix buffer overflows in mod_alias and 
     mod_rewrite which occurred if one configured a regular expression 
     with more than 9 captures.  [André Malo]
  *) mod_include: fix segfault which occured if the filename was not
     set, for example, when processing some error conditions.
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     PR 23836.  [Brian Akins <bakins web.turner.com>, André Malo]
  *) fix the config parser to support <Foo>..</Foo> containers (no
     arguments in the opening tag) supported by httpd 1.3. Without
     this change mod_perl 2.0's <Perl> sections are broken.
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     ["Philippe M. Chiasson" <gozer cpan.org>]
  *) mod_cgid: fix a hash table corruption problem which could
     result in the wrong script being cleaned up at the end of a
     request.  [Jeff Trawick]

  *) Update httpd-*.conf to be clearer in describing the connection
     between AddType and AddEncoding for defining the meaning of
     compressed file extensions. [Roy Fielding]

  *) mod_rewrite: Don't die silently when failing to open RewriteLogs.
     PR 23416.  [André Malo]

Paul J. Reder's avatar
 
Paul J. Reder committed
  *) mod_rewrite: Fix mod_rewrite's support of the [P] option to send
     rewritten request using "proxy:". The code was adding multiple "proxy:"
     fields in the rewritten URI. PR: 13946.
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     [Eider Oliveira <eider bol.com.br>]
Paul J. Reder's avatar
 
Paul J. Reder committed

Martin Kraemer's avatar
Martin Kraemer committed
  *) cache_util: Fix ap_check_cache_freshness to check max_age, smax_age, and
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     expires as directed in RFC 2616. [Thomas Castelle <tcastelle generali.fr>]
Paul J. Reder's avatar
 
Paul J. Reder committed

Thom May's avatar
Thom May committed
  *) Ensure that ssl-std.conf is generated at configure time, and switch
Andre Malo's avatar
Andre Malo committed
     to using the expanded config variables to work the same as
     httpd-std.conf PR: 19611
Thom May's avatar
Thom May committed
     [Thom May]

Sander Striker's avatar
Sander Striker committed
  *) mod_ssl: Fix segfaults after renegotiation failure. PR 21370
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     [Hartmut Keil <Hartmut.Keil adnovum.ch>]
Sander Striker's avatar
Sander Striker committed

Sander Striker's avatar
Sander Striker committed
  *) mod_autoindex: If a directory contains a file listed in the
     DirectoryIndex directive, the folder icon is no longer replaced
     by the icon of that file. PR 9587.
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     [David Shane Holden <dpejesh yahoo.com>]
Sander Striker's avatar
Sander Striker committed

Sander Striker's avatar
Sander Striker committed
  *) Fixed mod_usertrack to not get false positive matches on the
     user-tracking cookie's name.  PR 16661.
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     [Manni Wood <manniwood planet-save.com>]
Sander Striker's avatar
Sander Striker committed

Sander Striker's avatar
Sander Striker committed
  *) mod_cache: Fix the cache code so that responses can be cached
     if they have an Expires header but no Etag or Last-Modified
     headers. PR 23130.
William A. Rowe Jr's avatar
 
William A. Rowe Jr committed
     [<bjorn exoweb.net>]
Sander Striker's avatar
Sander Striker committed

  *) mod_log_config: Fix %b log format to write really "-" when 0 bytes
     were sent (e.g. with 304 or 204 response codes).  [Astrid Keßler]

  *) Modify ap_get_client_block() to note if it has seen EOS.
     [Justin Erenkrantz]

  *) Fix a bug, where mod_deflate sometimes unconditionally compressed the
     content if the Accept-Encoding header contained only other tokens than
     "gzip" (such as "deflate"). PR 21523.  [Joe Orton, André Malo]

Jeff Trawick's avatar
Jeff Trawick committed
  *) Avoid an infinite recursion, which occured if the name of an included
     config file or directory contained a wildcard character. PR 22194.
     [André Malo]

  *) mod_ssl: Fix a problem setting variables that represent the
     client certificate chain.  PR 21371  [Jeff Trawick]

  *) Unix: Handle permissions settings for flock-based mutexes in 
     unixd_set_global|proc_mutex_perms().  Allow the functions to be
     called for any type of mutex.  PR 20312  [Jeff Trawick]

  *) ab: Work over non-loopback on Unix again. PR 21495. [Jeff Trawick]

Jeff Trawick's avatar
Jeff Trawick committed
  *) Fix a misleading message from the some of the threaded MPMs when 
     MaxClients has to be lowered due to the setting of ServerLimit.  
     [Jeff Trawick]

Jeff Trawick's avatar
Jeff Trawick committed
  *) Lower the severity of the "listener thread didn't exit" message
     to debug, as it is of interest only to developers.  PR 9011
     [Jeff Trawick]

  *) MPMs: The bucket brigades subsystem now honors the MaxMemFree setting.
     [Cliff Woolley, Jean-Jacques Clar]

  *) Install config.nice into the build/ directory to make
     minor version upgrades easier. [Joshua Slive]

Stas Bekman's avatar
Stas Bekman committed
  *) Fix mod_deflate so that it does not call deflate() without checking
     first whether it has something to deflate. (Currently this causes
     deflate to generate a fatal error according to the zlib spec.)
     PR 22259. [Stas Bekman]

Sander Striker's avatar
Sander Striker committed
  *) mod_ssl: Fix FakeBasicAuth for subrequest.  Log an error when an
     identity spoof is encountered.
     [Sander Striker]

  *) mod_rewrite: Ignore RewriteRules in .htaccess files if the directory
     containing the .htaccess file is requested without a trailing slash.
     PR 20195.  [André Malo]

Loading
Loading full blame...