Commits · 3da6ac77e792c642b1b08cec5f3b67e2ea510086 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

27 Aug, 2014 1 commit

Merge r1620932 from trunk: · 3da6ac77

Jim Jagielski authored Aug 27, 2014

Make up-to-date

Reviewed/backported by: jim


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1620934 13f79535-47bb-0310-9956-ffa450edef68

3da6ac77

23 Aug, 2014 8 commits

update transformation · 73abae71

Andre Malo authored Aug 23, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1620064 13f79535-47bb-0310-9956-ffa450edef68

73abae71

xforms · d29e0066

Eric Covener authored Aug 23, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1620015 13f79535-47bb-0310-9956-ffa450edef68

d29e0066

· bf4e06ef

Eric Covener authored Aug 23, 2014

xforms


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1620013 13f79535-47bb-0310-9956-ffa450edef68

bf4e06ef

fix compat info for 2.2 · 330e272b

Eric Covener authored Aug 23, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1620012 13f79535-47bb-0310-9956-ffa450edef68

330e272b

Rebuild · 068325a6

Lucien Gentis authored Aug 23, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1620010 13f79535-47bb-0310-9956-ffa450edef68

068325a6

XML update. · 95f9eb13

Lucien Gentis authored Aug 23, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1620009 13f79535-47bb-0310-9956-ffa450edef68

95f9eb13

Rebuild. · 1a1c004c

Lucien Gentis authored Aug 23, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1620008 13f79535-47bb-0310-9956-ffa450edef68

1a1c004c

XML update. · e0cdc5ad

Lucien Gentis authored Aug 23, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1620006 13f79535-47bb-0310-9956-ffa450edef68

e0cdc5ad

22 Aug, 2014 10 commits

Revert r1602714 per http://httpd.apache.org/docs/2.2/howto/ssi.html#comment_2915 · 95df8ede

Eric Covener authored Aug 22, 2014

which included 2.4/ap_expr info and examples.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1619923 13f79535-47bb-0310-9956-ffa450edef68

95df8ede

And we are at 2.2.30-dev · 80aef428

William A. Rowe Jr authored Aug 22, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1619851 13f79535-47bb-0310-9956-ffa450edef68

80aef428

Prepare to tag once again, at 2.2.29 · 658544c3

William A. Rowe Jr authored Aug 22, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1619849 13f79535-47bb-0310-9956-ffa450edef68

658544c3

2.2.28 was tagged, this is .29 already · 98f53e1b

William A. Rowe Jr authored Aug 22, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1619827 13f79535-47bb-0310-9956-ffa450edef68

98f53e1b

Re-built all convmap, and picked up the missing new directive plus other bits · a88f4bd9
William A. Rowe Jr authored Aug 22, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1619821 13f79535-47bb-0310-9956-ffa450edef68
```
a88f4bd9

And on to 2.2.29 maintenance · dba964d8

William A. Rowe Jr authored Aug 22, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1619761 13f79535-47bb-0310-9956-ffa450edef68

dba964d8

Prepare to tag 2.2.28 · 05026d55

William A. Rowe Jr authored Aug 22, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1619759 13f79535-47bb-0310-9956-ffa450edef68

05026d55

Resequence CHANGES chronologically and by severity · 4e543650

William A. Rowe Jr authored Aug 22, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1619755 13f79535-47bb-0310-9956-ffa450edef68

4e543650

core: Detect incomplete request and response bodies, log an error and · 3332af01

William A. Rowe Jr authored Aug 22, 2014

forward it to the underlying filters. 

PR: 55475
Submitted by: Yann Ylavic
Reviewed by: ylavic, wrowe, rpluem
Backports: r1538776


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1619754 13f79535-47bb-0310-9956-ffa450edef68

3332af01

mod_deflate: Handle Zlib header and validation bytes received in multiple · 15c8bdbc

William A. Rowe Jr authored Aug 22, 2014

chunks.

PR: 46146, 55666
Submitted by: Yann Ylavic
Reviewed by: ylavic, wrowe, rpluem
Backports: r1572655, r1572663, r1572668, r1572669, r1572670, r1572671, r1573224, r1586745, r1587594, r1587639, r1590509, r1603156, r1604353



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1619753 13f79535-47bb-0310-9956-ffa450edef68

15c8bdbc

21 Aug, 2014 4 commits

Merge r1610814, r1610686, r1610707 from trunk: · 16e241ed

Eric Covener authored Aug 21, 2014

      *) SECURITY: CVE-2013-5704 (cve.mitre.org)
         core: HTTP trailers could be used to replace HTTP headers
         late during request processing, potentially undoing or
         otherwise confusing modules that examined or modified
         request headers earlier.  Adds "MergeTrailers" directive to restore
         legacy behavior.

    Submitted By: Edward Lu, Yann Ylavic, Joe Orton, Eric Covener
    Committed By: covener

Reviewed By:  covener, wrowe, rpluem
 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1619489 13f79535-47bb-0310-9956-ffa450edef68

16e241ed

Comment on possible trailers CVE delay. · 877b3138

Mike Rumph authored Aug 21, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1619446 13f79535-47bb-0310-9956-ffa450edef68

877b3138

mention quirk of the trailers CVE · ce30e64d

Eric Covener authored Aug 21, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1619385 13f79535-47bb-0310-9956-ffa450edef68

ce30e64d

fix comment · 31880154

Eric Covener authored Aug 21, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1619384 13f79535-47bb-0310-9956-ffa450edef68

31880154

14 Aug, 2014 1 commit

* Vote and promote · 26ad2093

Ruediger Pluem authored Aug 14, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1617949 13f79535-47bb-0310-9956-ffa450edef68

26ad2093

09 Aug, 2014 1 commit

drop showstopper, lone report and no followup or recreate · fb57d962

Eric Covener authored Aug 09, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1617000 13f79535-47bb-0310-9956-ffa450edef68

fb57d962

26 Jul, 2014 3 commits

Rebuild · 48bd5f56

Lucien Gentis authored Jul 26, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1613704 13f79535-47bb-0310-9956-ffa450edef68

48bd5f56

XML update. · 77e85774

Lucien Gentis authored Jul 26, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1613703 13f79535-47bb-0310-9956-ffa450edef68

77e85774

add a showstopper Jeff might have found on users@ · 66033c17

Eric Covener authored Jul 26, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1613655 13f79535-47bb-0310-9956-ffa450edef68

66033c17

24 Jul, 2014 1 commit

Merge r1613318 from trunk: · ee207b10

Eric Covener authored Jul 24, 2014

two commenters were confused authnprovideralias
providing special config to authz providers

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1613320 13f79535-47bb-0310-9956-ffa450edef68

ee207b10

18 Jul, 2014 11 commits

Backported. · 5caaecaa

Yann Ylavic authored Jul 18, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1611818 13f79535-47bb-0310-9956-ffa450edef68

5caaecaa

fix latex build · c6ea7c42

Andre Malo authored Jul 18, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1611817 13f79535-47bb-0310-9956-ffa450edef68

c6ea7c42

Follow up to r1611813: add missing CHANGE · 72c773a6

Yann Ylavic authored Jul 18, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1611816 13f79535-47bb-0310-9956-ffa450edef68

72c773a6

Merge r1572630, r1572611, r1572967, r1573229 from trunk: · 13978f5c

Yann Ylavic authored Jul 18, 2014

Redo what was reverted in r1572627.
Don't reuse a SSL backend connection whose SNI differs. PR 55782.
This may happen when ProxyPreserveHost is on and the proxy-worker
handles connections to different Hosts.


Follows up r1572606.
MMN minor bump required by proxy_conn_rec change.


mod_proxy: follows up r1572630.
Don't reuse a SSL backend connection with no SNI for a request requiring SNI.


mod_proxy: Add comment and avoid ternary operator as condition (no functional change).


Submitted by: ylavic
Reviewed by: ylavic, rpluem, wrowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1611813 13f79535-47bb-0310-9956-ffa450edef68

13978f5c

v4 for PR 46146. · 01b9a3cd

Yann Ylavic authored Jul 18, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1611809 13f79535-47bb-0310-9956-ffa450edef68

01b9a3cd

Merge r1572092 from trunk: · 2fd9e170

Yann Ylavic authored Jul 18, 2014

mod_deflate: fix decompression of files larger than 4GB. According to RFC1952,
Input SIZE (compLen) contains the size of the original input data modulo 2^32.

PR: 56062
Submitted by: Lukas Bezdicka
Reviewed by: ylavic, breser, wrowe



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1611806 13f79535-47bb-0310-9956-ffa450edef68

2fd9e170

update transformation · 409529b5

Andre Malo authored Jul 18, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1611796 13f79535-47bb-0310-9956-ffa450edef68

409529b5

mod_deflate proposal v3. · ed57c906

Yann Ylavic authored Jul 18, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1611771 13f79535-47bb-0310-9956-ffa450edef68

ed57c906

That's the ticket · 070d8977

William A. Rowe Jr authored Jul 18, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1611768 13f79535-47bb-0310-9956-ffa450edef68

070d8977

Fix mod_deflate proposal. · 678b007a

Yann Ylavic authored Jul 18, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1611766 13f79535-47bb-0310-9956-ffa450edef68

678b007a

Vote up, two are promoted as accepted, defect identified in ylavic's patch · d2ca29e3
William A. Rowe Jr authored Jul 18, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1611672 13f79535-47bb-0310-9956-ffa450edef68
```
d2ca29e3