Commits · 532a5ff3f23462bebe50a32b04a59e399b5c907f · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Jul 14, 2003

When the top-level directory section for / was added for the sake · 532a5ff3

Roy T. Fielding authored Jul 14, 2003

of performance and to allow automount symlinks to be followed, we
mistakenly opened access to the entire directory system by default.
I noticed this because all of the /~user directories are available
by default without any restrictions, which is a bad idea for anything
other than one server within a department of shared users. However,
it also makes it easier to serve files anywhere on disk by mistake,
and makes other URI-handling bugs more severe than they would be
otherwise. Therefore, this patch reinstates access control to deny
access to all files other than under DocumentRoot, icons, and manual,
until additional directory/locations are explicitly allowed by the admin.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100593 13f79535-47bb-0310-9956-ffa450edef68

532a5ff3

oops... add missing <br />s · 377f74d8

Andre Malo authored Jul 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100592 13f79535-47bb-0310-9956-ffa450edef68

377f74d8

update transformation · 8008f6fa

Andre Malo authored Jul 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100591 13f79535-47bb-0310-9956-ffa450edef68

8008f6fa

document new Action modifier · 4c6112c6

Andre Malo authored Jul 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100590 13f79535-47bb-0310-9956-ffa450edef68

4c6112c6

Introduce the "virtual" modifier to the Action directive, · 3521e6f0

Andre Malo authored Jul 14, 2003

which allows the use of handlers for virtual locations.

PR:	8431


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100589 13f79535-47bb-0310-9956-ffa450edef68

3521e6f0

Update transformation. · 0ed27b07

Yoshiki Hayashi authored Jul 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100588 13f79535-47bb-0310-9956-ffa450edef68

0ed27b07

Update Japanese translation. · c5ac88a0

Yoshiki Hayashi authored Jul 14, 2003

Submitted by: Hiroaki KAWAI <hawk@bcl.t.u-tokyo.ac.jp>
Reviewed by: Yoshiki Hayashi

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100587 13f79535-47bb-0310-9956-ffa450edef68

c5ac88a0

Update Japanese translation. · bad0f5e5

Yoshiki Hayashi authored Jul 14, 2003

Submitted by:	Hiroaki KAWAI <hawk@bcl.t.u-tokyo.ac.jp>, Yoshiki Hayashi


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100586 13f79535-47bb-0310-9956-ffa450edef68

bad0f5e5

Update Japanese translation. · dddcc117

Yoshiki Hayashi authored Jul 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100585 13f79535-47bb-0310-9956-ffa450edef68

dddcc117

Update Japanese translation. · 08b6cfb8

Yoshiki Hayashi authored Jul 14, 2003

Submitted by:	Hiroaki KAWAI <hawk@bcl.t.u-tokyo.ac.jp>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100584 13f79535-47bb-0310-9956-ffa450edef68

08b6cfb8

Update Japanese translation. · d4064cda

Yoshiki Hayashi authored Jul 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100583 13f79535-47bb-0310-9956-ffa450edef68

d4064cda

Update transformation. · cf04aea0

Yoshiki Hayashi authored Jul 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100582 13f79535-47bb-0310-9956-ffa450edef68

cf04aea0

Update Japanese translation. · 48d6514a

Yoshiki Hayashi authored Jul 14, 2003

Sumitted by:	Hiroaki KAWAI <hawk@bcl.t.u-tokyo.ac.jp>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100581 13f79535-47bb-0310-9956-ffa450edef68

48d6514a

The name of HOOK_ORDER is changed to APR_HOOK_ORDER. · 0aba8f78

Yoshiki Hayashi authored Jul 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100580 13f79535-47bb-0310-9956-ffa450edef68

0aba8f78

Jul 13, 2003

Answer Jeff and Andres concerns regarding ssl-std.conf.in · 13d30946

Thom May authored Jul 13, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100576 13f79535-47bb-0310-9956-ffa450edef68

13d30946

Jul 12, 2003

Typo. PR#21539 · fec198ff

Erik Abele authored Jul 12, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100573 13f79535-47bb-0310-9956-ffa450edef68

fec198ff

update transformation · fa7e45ba

Andre Malo authored Jul 12, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100571 13f79535-47bb-0310-9956-ffa450edef68

fa7e45ba

be consistent in case · 84a2b50a

Andre Malo authored Jul 12, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100569 13f79535-47bb-0310-9956-ffa450edef68

84a2b50a

let mod_speling use the current AcceptPathInfo setting. · 327c3e49

Andre Malo authored Jul 12, 2003

Default is: reject

PR: 21059


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100566 13f79535-47bb-0310-9956-ffa450edef68

327c3e49

sync · 9922f72a

Andre Malo authored Jul 12, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100563 13f79535-47bb-0310-9956-ffa450edef68

9922f72a

minor style changes · adb2d82e

Jeff Trawick authored Jul 12, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100562 13f79535-47bb-0310-9956-ffa450edef68

adb2d82e

Update for PR16938 task. · e424ad17

Jason S. Lingohr authored Jul 12, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100558 13f79535-47bb-0310-9956-ffa450edef68

e424ad17

Added more content. · 07b14871

Jason S. Lingohr authored Jul 12, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100557 13f79535-47bb-0310-9956-ffa450edef68

07b14871

Jul 11, 2003

· 100b13b6

William A. Rowe Jr authored Jul 11, 2003

Note a list discussion topic I brought up, both items received some
positive feedback so far.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100552 13f79535-47bb-0310-9956-ffa450edef68

100b13b6

Update comment after removal of tmp_headers in r1.132. · d0e6cbf2

Joe Orton authored Jul 11, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100550 13f79535-47bb-0310-9956-ffa450edef68

d0e6cbf2

Jul 10, 2003

Minor cleanups: · 521a0963

Joe Orton authored Jul 10, 2003

* fdqueue.c (ap_queue_info_term, ap_queue_interrupt_all):
Remove redundant conditionals.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100542 13f79535-47bb-0310-9956-ffa450edef68

521a0963

Minor cleanup: · f6f3d280

Joe Orton authored Jul 10, 2003

* pod.c (pod_signal_internal): apr_file_write() is defined to
never return EINTR, so don't check for that case.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100541 13f79535-47bb-0310-9956-ffa450edef68

f6f3d280

Use three-argument form of AC_DEFINE everywhere; remove acconfig.h · 66b8dece

Joe Orton authored Jul 10, 2003

and the warning message from autoconf 2.5x.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100540 13f79535-47bb-0310-9956-ffa450edef68

66b8dece

Pick up getpid() prototype. · bf5ca913

Joe Orton authored Jul 10, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100539 13f79535-47bb-0310-9956-ffa450edef68

bf5ca913

Try to be clearer in describing the connection between AddType and · 8f5a7b5c

Roy T. Fielding authored Jul 10, 2003

AddEncoding for defining the meaning of compressed file extensions.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100538 13f79535-47bb-0310-9956-ffa450edef68

8f5a7b5c

add typemap and update transformation · 101717d5

Andre Malo authored Jul 10, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100533 13f79535-47bb-0310-9956-ffa450edef68

101717d5

Updated to reference the "Relevant Standards" document. · dac5c3e6

Jason S. Lingohr authored Jul 10, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100530 13f79535-47bb-0310-9956-ffa450edef68

dac5c3e6

Initial add of the "Relevant Standards" page. · 98ec0157

Jason S. Lingohr authored Jul 10, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100529 13f79535-47bb-0310-9956-ffa450edef68

98ec0157

Jul 09, 2003

Sync with IANA registry and W3C recommended types, the latter being · 796a324a

Roy T. Fielding authored Jul 09, 2003

necessary because the W3C committees are too lame to finish their
own type registrations. Nevertheless, they are already in use.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100524 13f79535-47bb-0310-9956-ffa450edef68

796a324a

remove bogus content type overrides from the default config · 6066db85
Roy T. Fielding authored Jul 09, 2003
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100521 13f79535-47bb-0310-9956-ffa450edef68
```
6066db85

do not put active IfModule directives around config lines that · 2a09f471

Roy T. Fielding authored Jul 09, 2003

are commented out -- that is just a waste of processing.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100520 13f79535-47bb-0310-9956-ffa450edef68

2a09f471

httpd.spec should be removed by make extraclean · 98718231

Roy T. Fielding authored Jul 09, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100519 13f79535-47bb-0310-9956-ffa450edef68

98718231

Forward port patch for CAN-2003-0192 from 2.0. · cd2c6d3a

Sander Striker authored Jul 09, 2003

SECURITY [CAN-2003-0192]: Fixed a bug whereby certain sequences
of per-directory renegotiations and the SSLCipherSuite directive
being used to upgrade from a weak ciphersuite to a strong one
could result in the weak ciphersuite being used in place of the
strong one. [Ben Laurie]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100518 13f79535-47bb-0310-9956-ffa450edef68

cd2c6d3a

Forward port patch for CAN-2003-0253 from 2.0. · 9bc02aba

Sander Striker authored Jul 09, 2003

SECURITY [CAN-2003-0253]: Fixed a bug in prefork MPM causing
temporary denial of service when accept() on a rarely accessed port
returns certain errors.  Reported by Saheed Akhtar
<S.Akhtar@talis.com>.  [Jeff Trawick]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100517 13f79535-47bb-0310-9956-ffa450edef68

9bc02aba

Forward port security patch for CAN-2003-0254 from 2.0. · 46e359cd

Sander Striker authored Jul 09, 2003

SECURITY [CAN-2003-0254]: Fixed a bug in ftp proxy causing denial
of service when target host is IPv6 but proxy server can't create
IPv6 socket.  Fixed by the reporter.  [Yoshioka Tsuneo
<tsuneo.yoshioka@f-secure.com>]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100516 13f79535-47bb-0310-9956-ffa450edef68

46e359cd