Commits · 404947824a978c89589d0fa59ada0ee1531bb147 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

11 Sep, 2009 2 commits

Security fix - this is presumed to fix CVE-2009-3095 (the disclosed · 40494782

Joe Orton authored Sep 11, 2009

information was limited so this has not been confirmed):

* modules/proxy/mod_proxy_ftp.c (proxy_ftp_handler): Fail if the
  decoded Basic credentials contain "special" characters.
  Thanks to Stefan Fritsch for analysis of this issue.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@814045 13f79535-47bb-0310-9956-ffa450edef68

40494782

Fix the RPM init.d script to correctly take into account the pid file · 15656f6d

Graham Leggett authored Sep 11, 2009

when starting and stopping the server. This prevents the init script
from blowing away other instances of httpd that might be running on the
same machine when someone attempts to stop the server.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813972 13f79535-47bb-0310-9956-ffa450edef68

15656f6d

10 Sep, 2009 7 commits

Fail server startup when mod_auth_digest is unable to · f8c7ff9c

Daniel Earl Poirier authored Sep 10, 2009

provide the security checks configured.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813396 13f79535-47bb-0310-9956-ffa450edef68

f8c7ff9c

hrmm · bf7e1c67

Jim Jagielski authored Sep 10, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813381 13f79535-47bb-0310-9956-ffa450edef68

bf7e1c67

doccs · 9d6b5385

Jim Jagielski authored Sep 10, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813379 13f79535-47bb-0310-9956-ffa450edef68

9d6b5385

veto-ed · 6876e93d

Jim Jagielski authored Sep 10, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813376 13f79535-47bb-0310-9956-ffa450edef68

6876e93d

* More style fixes. No functional changes. · 6a047020

Ruediger Pluem authored Sep 10, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813265 13f79535-47bb-0310-9956-ffa450edef68

6a047020

* Style fixes. No functional changes. · a0f40cec

Ruediger Pluem authored Sep 10, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813254 13f79535-47bb-0310-9956-ffa450edef68

a0f40cec

* Silence compiler warnings · 9da0cb92

Ruediger Pluem authored Sep 10, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813249 13f79535-47bb-0310-9956-ffa450edef68

9da0cb92

09 Sep, 2009 7 commits

mod_proxy_connect: The connect method doesn't work if the client is · 34aeb912

Graham Leggett authored Sep 09, 2009

connecting to the apache proxy through an ssl socket. Fixed.
PR: 29744.
Submitted by: Brad Boyer, Mark Cave-Ayland, Julian Gilbey, Fabrice Durand,
David Gence, Tim Dodge, Per Gunnar Hans, Emmanuel Elango, Kevin Croft,
Rudolf Cardinal


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813178 13f79535-47bb-0310-9956-ffa450edef68

34aeb912

Make sure the NULL terminator of the array is consistent with the other · 32f4d579

Graham Leggett authored Sep 09, 2009

elements in the array.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813165 13f79535-47bb-0310-9956-ffa450edef68

32f4d579

Update transformations. · d481af28

Graham Leggett authored Sep 09, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813128 13f79535-47bb-0310-9956-ffa450edef68

d481af28

<li> must be followed by a matching </li>. · b2c99c87

Graham Leggett authored Sep 09, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813127 13f79535-47bb-0310-9956-ffa450edef68

b2c99c87

mod_ssl: The error message when SSLCertificateFile is missing should at · e92fef18

Graham Leggett authored Sep 09, 2009

least give the name or position of the problematic virtual host definition.
[Stefan Fritsch sf sfritsch.de]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@813105 13f79535-47bb-0310-9956-ffa450edef68

e92fef18

mod_auth_digest: When qop is none, client doesn't send nonce count, · b3706dc4

Daniel Earl Poirier authored Sep 09, 2009

but module was segfaulting trying to check the nonce count anyway.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@812934 13f79535-47bb-0310-9956-ffa450edef68

b3706dc4

Nothing is installed within this tree · f074cb3b

William A. Rowe Jr authored Sep 09, 2009

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@812927 13f79535-47bb-0310-9956-ffa450edef68

f074cb3b

06 Sep, 2009 2 commits

Update the ab.xml file with the addition of the -u option to ab to · deecef4a

Graham Leggett authored Sep 06, 2009

support PUT requests.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@811869 13f79535-47bb-0310-9956-ffa450edef68

deecef4a

Add support for HTTP PUT to ab. · eba65d27

Graham Leggett authored Sep 06, 2009

Submiited by: Jeff Barnes <jbarnesweb yahoo.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@811806 13f79535-47bb-0310-9956-ffa450edef68

eba65d27

05 Sep, 2009 1 commit

Updates. · 61804eb3

Lucien Gentis authored Sep 05, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@811669 13f79535-47bb-0310-9956-ffa450edef68

61804eb3

03 Sep, 2009 1 commit

An error detect question in comments · e432b88b

Jim Jagielski authored Sep 03, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@811009 13f79535-47bb-0310-9956-ffa450edef68

e432b88b

02 Sep, 2009 3 commits

xforms · 51422938

Jim Jagielski authored Sep 02, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@810478 13f79535-47bb-0310-9956-ffa450edef68

51422938

doccos for soon to be reverted code. · 517fbd06

Jim Jagielski authored Sep 02, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@810477 13f79535-47bb-0310-9956-ffa450edef68

517fbd06

Changed the name of the IRC channel a while back. Fixing it in the FAQ · 27310e02
Richard Bowen authored Sep 02, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@810464 13f79535-47bb-0310-9956-ffa450edef68
```
27310e02

01 Sep, 2009 4 commits

Now that we have actual released versions after 2.2.11, drop the · 379cf598

Eric Covener authored Sep 01, 2009

awkward/confusing exclusive phrasing of "after 2.2.11".



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@810187 13f79535-47bb-0310-9956-ffa450edef68

379cf598

Remove unused conf variable. · bbf84b08

Paul Querna authored Sep 01, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@809938 13f79535-47bb-0310-9956-ffa450edef68

bbf84b08

Check return value from ap_pass_brigade incase we are buffering and a client disconnects. · 16a03b0b
Paul Querna authored Sep 01, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@809928 13f79535-47bb-0310-9956-ffa450edef68
```
16a03b0b
Initialize len to 0, since for some logic paths it might be unset. · 54bbb20c
Paul Querna authored Sep 01, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@809907 13f79535-47bb-0310-9956-ffa450edef68
```
54bbb20c

31 Aug, 2009 3 commits

Support mod_rewrite's %{varname} variables in ap_expr default expression parser · 81fd92d2
Nick Kew authored Aug 31, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@809768 13f79535-47bb-0310-9956-ffa450edef68
```
81fd92d2

Graham Leggett authored Aug 31, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@809665 13f79535-47bb-0310-9956-ffa450edef68

e6788f95

moved "finfo.mtime = 0;" after var declaration; · 0812ecd5

Guenter Knauf authored Aug 31, 2009

removed tab.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@809440 13f79535-47bb-0310-9956-ffa450edef68

0812ecd5

30 Aug, 2009 2 commits

Typo and updates. · 5373a273

Lucien Gentis authored Aug 30, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@809335 13f79535-47bb-0310-9956-ffa450edef68

5373a273

Fix up doc note on ProxyPassMatch quirks - this wording seems to have · 74decfe8

Nick Kew authored Aug 30, 2009

got accepted in 2.2.x.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@809241 13f79535-47bb-0310-9956-ffa450edef68

74decfe8

28 Aug, 2009 8 commits

Document ServerTokens Set "One Big Happy Family Server" · 4b9031f9

Jim Jagielski authored Aug 28, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808966 13f79535-47bb-0310-9956-ffa450edef68

4b9031f9

And additional ServerTokens improvement... · 62541784

Jim Jagielski authored Aug 28, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808965 13f79535-47bb-0310-9956-ffa450edef68

62541784

Update docs xforms and mappings · c1d707b1

Jim Jagielski authored Aug 28, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808910 13f79535-47bb-0310-9956-ffa450edef68

c1d707b1

Make code match warning message: disable nonce-checking · 2d76c3ec

Daniel Earl Poirier authored Aug 28, 2009

if shared memory isn't available.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808903 13f79535-47bb-0310-9956-ffa450edef68

2d76c3ec

Don't let the server start if user has asked for qop=auth-int · a8e47525

Daniel Earl Poirier authored Aug 28, 2009

with mod_auth_digest. The server can't provide it because it's
not implemented yet.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808901 13f79535-47bb-0310-9956-ffa450edef68

a8e47525

Update all xforms · 44196f8f

Jim Jagielski authored Aug 28, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808896 13f79535-47bb-0310-9956-ffa450edef68

44196f8f

OK, might as well finish this... Allow ServerTokens Off · 15f0f61c

Jim Jagielski authored Aug 28, 2009


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808895 13f79535-47bb-0310-9956-ffa450edef68

15f0f61c

push_connection, push_server also targetted for export, no? · bb8d62c9
William A. Rowe Jr authored Aug 28, 2009
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@808727 13f79535-47bb-0310-9956-ffa450edef68
```
bb8d62c9