Commits · 411826e16abbd0a724abf76c51b80f473b9e02d8 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

02 Aug, 2007 1 commit

FreeBSD 6 · 411826e1

Jim Jagielski authored Aug 02, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@562230 13f79535-47bb-0310-9956-ffa450edef68

411826e1

31 Jul, 2007 1 commit

Fix section match. · 343942fb

Joshua Slive authored Jul 31, 2007

PR: 33466


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@561440 13f79535-47bb-0310-9956-ffa450edef68

343942fb

24 Jul, 2007 1 commit

SECURITY: CVE-2006-5752 (cve.mitre.org) · 6fdf5a72

Jeff Trawick authored Jul 24, 2007

mod_status: Fix a possible XSS attack against a site with a public
server-status page and ExtendedStatus enabled, for browsers which
perform charset "detection". Reported by Stefan Esser. [Joe Orton]

Joe's patch was tweaked ever so slightly by me, then reviewed
by Joe and Sander T.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@559142 13f79535-47bb-0310-9956-ffa450edef68

6fdf5a72

05 Jul, 2007 1 commit

Note pid table changes: SECURITY: CVE-2007-3304 (cve.mitre.org) · 0445b3de

Jim Jagielski authored Jul 05, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@553551 13f79535-47bb-0310-9956-ffa450edef68

0445b3de

04 Jul, 2007 1 commit

Add '*.a' to svn:ignore to ignore library archives. · 663f4246

Joe Orton authored Jul 04, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@553239 13f79535-47bb-0310-9956-ffa450edef68

663f4246

04 Jun, 2007 3 commits

* It does not matter if this pid is still in the scoreboard or not. We need to · 6fc9eb8a

Ruediger Pluem authored Jun 04, 2007

  remove it from our pid table in any case.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@544218 13f79535-47bb-0310-9956-ffa450edef68

6fc9eb8a

Only remove from pid table when we've reaped a child, · 546e0e7e

Jim Jagielski authored Jun 04, 2007

that is, when we know it's gone.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@544149 13f79535-47bb-0310-9956-ffa450edef68

546e0e7e

Use ap_snprintf() · cb2bb54a

Jim Jagielski authored Jun 04, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@544148 13f79535-47bb-0310-9956-ffa450edef68

cb2bb54a

01 Jun, 2007 3 commits

Some comments... Yes, a 64 char array is overkill, but so · 4c152c78

Jim Jagielski authored Jun 01, 2007

what :) Also, in this section we later on unset as well,
but also encapsulate the logic here as well.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@543663 13f79535-47bb-0310-9956-ffa450edef68

4c152c78

more cleanus of pid_table for killed/waited-for kiddies · 0d943090

Jim Jagielski authored Jun 01, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@543634 13f79535-47bb-0310-9956-ffa450edef68

0d943090

Add in parent process PID table, to provide for · d40b21e0

Jim Jagielski authored Jun 01, 2007

a check against the pid values located in the
scoreboard.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@543511 13f79535-47bb-0310-9956-ffa450edef68

d40b21e0

31 May, 2007 1 commit
- Properly null-terminate the tpf_server_name string (in TPF-only code). · 69cb1a3d
  David McCreedy authored May 31, 2007
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@543050 13f79535-47bb-0310-9956-ffa450edef68
```
  69cb1a3d
01 May, 2007 1 commit

port r532162 to the 1.3.x stable branch · 3e3c4063

Greg Stein authored May 01, 2007

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@533996 13f79535-47bb-0310-9956-ffa450edef68

3e3c4063

24 Apr, 2007 1 commit

moved XLFLAGS to the .opt file so that external libs can be added; · 3918e65d

Guenter Knauf authored Apr 24, 2007

added new var XDCDATA and removed xdcdata setting from mis-used XLFLAGS;
moved some copyright from .opt to .def file since -copy option doesnt accept commas.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@531666 13f79535-47bb-0310-9956-ffa450edef68

3918e65d

27 Mar, 2007 1 commit

Backport Order fix. · 3324dfbf

Joshua Slive authored Mar 27, 2007


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@522952 13f79535-47bb-0310-9956-ffa450edef68

3324dfbf

11 Jan, 2007 1 commit

About time to note this · ba7a6947

William A. Rowe Jr authored Jan 11, 2007

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@495144 13f79535-47bb-0310-9956-ffa450edef68

ba7a6947

28 Nov, 2006 1 commit

Tweak Allow/Deny tagging. · 18b840de

Chris Pepper authored Nov 28, 2006

	Tweak tense.
	Update Allow/Deny match table.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@479902 13f79535-47bb-0310-9956-ffa450edef68

18b840de

26 Nov, 2006 1 commit

Reword Order section to make 3-pass design clearer. · 100ef7a8

Chris Pepper authored Nov 26, 2006

	Add table showing results of match combinations.
	Fix some tenses.
	Fix case of CENTER & IP Address.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@479297 13f79535-47bb-0310-9956-ffa450edef68

100ef7a8

18 Aug, 2006 1 commit

Incorporated feedback from the TPF Users Group conference. · e7dc0500

David McCreedy authored Aug 18, 2006

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@432760 13f79535-47bb-0310-9956-ffa450edef68

e7dc0500

31 Jul, 2006 1 commit

The Expect header XSS got a CVE name as it was proved you can influence the · 5c415a50

Mark J. Cox authored Jul 31, 2006

header if a user visits a site holding a malicious flash file.
IMO this is a flash flaw, but mark as security for future reference, although
only for 1.3. 2.0 and 2.2 both need to timeout before any XSS happens
reducing the risk.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@427039 13f79535-47bb-0310-9956-ffa450edef68

5c415a50

27 Jul, 2006 7 commits

· 9f70eac8

William A. Rowe Jr authored Jul 27, 2006

  Rebump after retag


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426185 13f79535-47bb-0310-9956-ffa450edef68

9f70eac8

· 6014f066

William A. Rowe Jr authored Jul 27, 2006

  Revert, missed one change to APACHE_RELEASE bit


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426181 13f79535-47bb-0310-9956-ffa450edef68

6014f066

· 253031ac

William A. Rowe Jr authored Jul 27, 2006

  Bump after tag


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426170 13f79535-47bb-0310-9956-ffa450edef68

253031ac

· 0a94eaaa

William A. Rowe Jr authored Jul 27, 2006

  Prepare to tag 1.3.37


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426166 13f79535-47bb-0310-9956-ffa450edef68

0a94eaaa

· 61329f63

William A. Rowe Jr authored Jul 27, 2006

  Wrong project name


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426162 13f79535-47bb-0310-9956-ffa450edef68

61329f63

SECURITY: CVE-2006-3747 (cve.mitre.org) · 5e490dde

Mark J. Cox authored Jul 27, 2006

mod_rewrite: Fix an off-by-one security problem in the ldap scheme
handling. For some RewriteRules this could lead to a pointer being
written out of bounds. Reported by Mark Dowd of McAfee.

Reviewed by: trawick, lars, jorton, wrowe, benl

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426146 13f79535-47bb-0310-9956-ffa450edef68

5e490dde

· 37d03a93

William A. Rowe Jr authored Jul 27, 2006

  Official home is http://svn.apache.org/repos/asf/httpd/httpd/dist/


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426108 13f79535-47bb-0310-9956-ffa450edef68

37d03a93

12 Jul, 2006 2 commits

update license header text · 75a283fb

Roy T. Fielding authored Jul 12, 2006

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@421184 13f79535-47bb-0310-9956-ffa450edef68

75a283fb

update according to board resolution · 80852768

Roy T. Fielding authored Jul 12, 2006

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@421131 13f79535-47bb-0310-9956-ffa450edef68

80852768

14 May, 2006 2 commits

And we are now 1.3.37-dev · 605ed7ea

Jim Jagielski authored May 14, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@406324 13f79535-47bb-0310-9956-ffa450edef68

605ed7ea

Get ready to tag 1.3.36 · 18efb977

Jim Jagielski authored May 14, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@406321 13f79535-47bb-0310-9956-ffa450edef68

18efb977

09 May, 2006 1 commit

Note intent to T&R 1.3.36 this Friday · bc7200a7

Jim Jagielski authored May 09, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@405423 13f79535-47bb-0310-9956-ffa450edef68

bc7200a7

08 May, 2006 1 commit

Back out 396294. This keeps HEAD in a non-regression state · 079e8352

Jim Jagielski authored May 08, 2006

and allows us to re-add/fix the functionality "later on"


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@405142 13f79535-47bb-0310-9956-ffa450edef68

079e8352

01 May, 2006 1 commit

And we are announced/released · 53e97320

Jim Jagielski authored May 01, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@398586 13f79535-47bb-0310-9956-ffa450edef68

53e97320

24 Apr, 2006 4 commits

And bump to 1.3.36-dev · c900f7da

Jim Jagielski authored Apr 24, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@396613 13f79535-47bb-0310-9956-ffa450edef68

c900f7da

Stand by for tagging · 804b15a5

Jim Jagielski authored Apr 24, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@396606 13f79535-47bb-0310-9956-ffa450edef68

804b15a5

Fix up some version numbers · b6d27d23

Jim Jagielski authored Apr 24, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@396604 13f79535-47bb-0310-9956-ffa450edef68

b6d27d23

Work on announcement · 4c5be72f

Jim Jagielski authored Apr 24, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@396531 13f79535-47bb-0310-9956-ffa450edef68

4c5be72f

23 Apr, 2006 1 commit

* Backport the include directive patch for 1.3 · 575d77b0

Colm MacCarthaigh authored Apr 23, 2006

  * Add a changelog entry for same

  * reorder the changelog to put security first.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@396294 13f79535-47bb-0310-9956-ffa450edef68

575d77b0

21 Apr, 2006 1 commit

Revert copyright date change patch. Wait until we have · 02b8f006

Jim Jagielski authored Apr 21, 2006

a universal policy and procedure... we cannot willy
nilly change the dates unless significant or
material changes are made.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@395984 13f79535-47bb-0310-9956-ffa450edef68

02b8f006