Commits · 5c415a501d12a05f2ff3621bf1189a4010f8fad3 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

31 Jul, 2006 1 commit

The Expect header XSS got a CVE name as it was proved you can influence the · 5c415a50

Mark J. Cox authored Jul 31, 2006

header if a user visits a site holding a malicious flash file.
IMO this is a flash flaw, but mark as security for future reference, although
only for 1.3. 2.0 and 2.2 both need to timeout before any XSS happens
reducing the risk.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@427039 13f79535-47bb-0310-9956-ffa450edef68

5c415a50

27 Jul, 2006 7 commits

· 9f70eac8

William A. Rowe Jr authored Jul 27, 2006

  Rebump after retag


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426185 13f79535-47bb-0310-9956-ffa450edef68

9f70eac8

· 6014f066

William A. Rowe Jr authored Jul 27, 2006

  Revert, missed one change to APACHE_RELEASE bit


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426181 13f79535-47bb-0310-9956-ffa450edef68

6014f066

· 253031ac

William A. Rowe Jr authored Jul 27, 2006

  Bump after tag


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426170 13f79535-47bb-0310-9956-ffa450edef68

253031ac

· 0a94eaaa

William A. Rowe Jr authored Jul 27, 2006

  Prepare to tag 1.3.37


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426166 13f79535-47bb-0310-9956-ffa450edef68

0a94eaaa

· 61329f63

William A. Rowe Jr authored Jul 27, 2006

  Wrong project name


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426162 13f79535-47bb-0310-9956-ffa450edef68

61329f63

SECURITY: CVE-2006-3747 (cve.mitre.org) · 5e490dde

Mark J. Cox authored Jul 27, 2006

mod_rewrite: Fix an off-by-one security problem in the ldap scheme
handling. For some RewriteRules this could lead to a pointer being
written out of bounds. Reported by Mark Dowd of McAfee.

Reviewed by: trawick, lars, jorton, wrowe, benl

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426146 13f79535-47bb-0310-9956-ffa450edef68

5e490dde

· 37d03a93

William A. Rowe Jr authored Jul 27, 2006

  Official home is http://svn.apache.org/repos/asf/httpd/httpd/dist/


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426108 13f79535-47bb-0310-9956-ffa450edef68

37d03a93

12 Jul, 2006 2 commits

update license header text · 75a283fb

Roy T. Fielding authored Jul 12, 2006

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@421184 13f79535-47bb-0310-9956-ffa450edef68

75a283fb

update according to board resolution · 80852768

Roy T. Fielding authored Jul 12, 2006

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@421131 13f79535-47bb-0310-9956-ffa450edef68

80852768

14 May, 2006 2 commits

And we are now 1.3.37-dev · 605ed7ea

Jim Jagielski authored May 14, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@406324 13f79535-47bb-0310-9956-ffa450edef68

605ed7ea

Get ready to tag 1.3.36 · 18efb977

Jim Jagielski authored May 14, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@406321 13f79535-47bb-0310-9956-ffa450edef68

18efb977

09 May, 2006 1 commit

Note intent to T&R 1.3.36 this Friday · bc7200a7

Jim Jagielski authored May 09, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@405423 13f79535-47bb-0310-9956-ffa450edef68

bc7200a7

08 May, 2006 1 commit

Back out 396294. This keeps HEAD in a non-regression state · 079e8352

Jim Jagielski authored May 08, 2006

and allows us to re-add/fix the functionality "later on"


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@405142 13f79535-47bb-0310-9956-ffa450edef68

079e8352

01 May, 2006 1 commit

And we are announced/released · 53e97320

Jim Jagielski authored May 01, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@398586 13f79535-47bb-0310-9956-ffa450edef68

53e97320

24 Apr, 2006 4 commits

And bump to 1.3.36-dev · c900f7da

Jim Jagielski authored Apr 24, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@396613 13f79535-47bb-0310-9956-ffa450edef68

c900f7da

Stand by for tagging · 804b15a5

Jim Jagielski authored Apr 24, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@396606 13f79535-47bb-0310-9956-ffa450edef68

804b15a5

Fix up some version numbers · b6d27d23

Jim Jagielski authored Apr 24, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@396604 13f79535-47bb-0310-9956-ffa450edef68

b6d27d23

Work on announcement · 4c5be72f

Jim Jagielski authored Apr 24, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@396531 13f79535-47bb-0310-9956-ffa450edef68

4c5be72f

23 Apr, 2006 1 commit

* Backport the include directive patch for 1.3 · 575d77b0

Colm MacCarthaigh authored Apr 23, 2006

  * Add a changelog entry for same

  * reorder the changelog to put security first.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@396294 13f79535-47bb-0310-9956-ffa450edef68

575d77b0

21 Apr, 2006 2 commits

Revert copyright date change patch. Wait until we have · 02b8f006

Jim Jagielski authored Apr 21, 2006

a universal policy and procedure... we cannot willy
nilly change the dates unless significant or
material changes are made.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@395984 13f79535-47bb-0310-9956-ffa450edef68

02b8f006

Recast a vote... · 4d16f1c8

Jim Jagielski authored Apr 21, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@395929 13f79535-47bb-0310-9956-ffa450edef68

4d16f1c8

19 Apr, 2006 7 commits

Ask a question, since I'm lazy until tomorrow :) · f6be3f4d

Jim Jagielski authored Apr 19, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@395401 13f79535-47bb-0310-9956-ffa450edef68

f6be3f4d

Add a note on why the fprintf's are there · d38fbc6b

Colm MacCarthaigh authored Apr 19, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@395297 13f79535-47bb-0310-9956-ffa450edef68

d38fbc6b

Note the proposed T/R and cast vote. If the fprintfs · c5478d4d

Jim Jagielski authored Apr 19, 2006

were removed, or somehow configurable, I'd switch to +1


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@395291 13f79535-47bb-0310-9956-ffa450edef68

c5478d4d

Update to 2006 · 88ec4115

Jim Jagielski authored Apr 19, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@395246 13f79535-47bb-0310-9956-ffa450edef68

88ec4115

Fix escaping of Expect error message · 3556d5c9

Mark J. Cox authored Apr 19, 2006

http://svn.apache.org/viewcvs?rev=394965&view=rev
+1: mjc, trawick, wrowe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@395171 13f79535-47bb-0310-9956-ffa450edef68

3556d5c9

· eaf41366

William A. Rowe Jr authored Apr 19, 2006

  Vote, vote and promote

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@395129 13f79535-47bb-0310-9956-ffa450edef68

eaf41366

· 914919df

William A. Rowe Jr authored Apr 19, 2006

  Vote

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@395127 13f79535-47bb-0310-9956-ffa450edef68

914919df

18 Apr, 2006 3 commits

What the hell, include a proposal to incorporate my 4 year old patch to my own · 6fbf9945

Colm MacCarthaigh authored Apr 18, 2006

personal favourite most annoying 1.3 bug. 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@395076 13f79535-47bb-0310-9956-ffa450edef68

6fbf9945

vote · 1c3a5fa7

Jeff Trawick authored Apr 18, 2006


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@394991 13f79535-47bb-0310-9956-ffa450edef68

1c3a5fa7

Unsure if acks are needed for 1.3 branch, but it can't hurt, add · bdb2132e

Mark J. Cox authored Apr 18, 2006

the expect header issue


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@394969 13f79535-47bb-0310-9956-ffa450edef68

bdb2132e

28 Feb, 2006 1 commit

TPF platform-specific changes: · 527a3bb9

David McCreedy authored Feb 28, 2006

Ensure children close their sockets upon shutdown.
Fix KeepAliveTimeOut and TimeOut processing.
Implement SIGUSR1 (graceful restart) and SIGHUP (restart now).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@381696 13f79535-47bb-0310-9956-ffa450edef68

527a3bb9

11 Jan, 2006 1 commit

Use ap_assert instead of assert in mod_log_forensic. · 80f3b24e

Garrett Rooney authored Jan 11, 2006

This fixes issue #38177.

* src/modules/standard/mod_log_forensic.c
  (log_escape, log_before): s/assert/ap_assert/

Noticed by: Wilson Cheung <wcheung ucsd.edu>
Patch by: Jim Jagielski
Approved by: Jeff Trawick, André Malo


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@367914 13f79535-47bb-0310-9956-ffa450edef68

80f3b24e

05 Jan, 2006 1 commit

Fixed broken apache_pb.gif link as pointed out · b6f7abd5

Jason S. Lingohr authored Jan 05, 2006

by Anthony Anderberg <ant@hutchtel.net>.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@366325 13f79535-47bb-0310-9956-ffa450edef68

b6f7abd5

16 Dec, 2005 1 commit

· 507c93e1

William A. Rowe Jr authored Dec 16, 2005

Backport, even to 1.3, the ability to build under devenv
of Visual Studio 2005. Endorse -f syntax to get folks
used to portable make semantics

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@357229 13f79535-47bb-0310-9956-ffa450edef68

507c93e1

12 Dec, 2005 1 commit

Fix moderate security issue CVE-2005-3352 mod_imap cross-site scripting flaw · a37a43fc

Mark J. Cox authored Dec 12, 2005

Submitted by: Mark Cox <mjc apache.org>
Reviewed by: jorton, mjc, fielding
PR: 37874


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@356278 13f79535-47bb-0310-9956-ffa450edef68

a37a43fc

02 Dec, 2005 1 commit

Try to help all the people coming in from search engines who · 25df5513

Joshua Slive authored Dec 02, 2005

wind up at the wrong docs by including pointers back to the
doc index in the 1.3 docs.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@351825 13f79535-47bb-0310-9956-ffa450edef68

25df5513

03 Nov, 2005 1 commit
- Made suggested changes as mentioned in Bug# 37331 by ian_bruce@fastmail.fm. · ca6dcc52
  Jason S. Lingohr authored Nov 03, 2005
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@330436 13f79535-47bb-0310-9956-ffa450edef68
```
  ca6dcc52
31 Oct, 2005 1 commit

Minor make file changes to allow the clib prelude to be replaced · 9393926b

Bradley Nicholes authored Oct 31, 2005

Submitted by: Guenter Knauf 

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@329856 13f79535-47bb-0310-9956-ffa450edef68

9393926b