Commits · 5ce9d7c1812942cb113ca689eb1fbb0b3a398506 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

03 Mar, 2010 3 commits

Richard Bowen authored Mar 03, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918531 13f79535-47bb-0310-9956-ffa450edef68

5ce9d7c1

Typo · 60fcfb56

Richard Bowen authored Mar 03, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918528 13f79535-47bb-0310-9956-ffa450edef68

60fcfb56

reflect assignment of CVE-2010-0434 · 9d130409

Jeff Trawick authored Mar 03, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918428 13f79535-47bb-0310-9956-ffa450edef68

9d130409

02 Mar, 2010 14 commits

Rebuild transformations. · 84d30561

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918034 13f79535-47bb-0310-9956-ffa450edef68

84d30561

Tell them how to increase ThreadLimit · d9b0c013

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918033 13f79535-47bb-0310-9956-ffa450edef68

d9b0c013

Rebuild transformations. · 0b4dd669

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918025 13f79535-47bb-0310-9956-ffa450edef68

0b4dd669

Reference Min/MaxSpareServers/Threads when talking about dynamically · 68d2d1d6

Richard Bowen authored Mar 02, 2010

configuring the side of the server pool.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918024 13f79535-47bb-0310-9956-ffa450edef68

68d2d1d6

Not sure if this is actually useful, but I've been asked often enough · cf39e73d

Richard Bowen authored Mar 02, 2010

that I think it's probably worth mentioning. On the other hand, if
someone can't grep the source code for '20000', I'm not sure they should
be encouraged ... ;-)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918022 13f79535-47bb-0310-9956-ffa450edef68

cf39e73d

Awkward phrasing. · 48561372

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918018 13f79535-47bb-0310-9956-ffa450edef68

48561372

Awkward phrasing. · f6fea86e

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918015 13f79535-47bb-0310-9956-ffa450edef68

f6fea86e

Cross-linking between (Min|Max)Spare(Servers|Threads). · 908a90b3

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918011 13f79535-47bb-0310-9956-ffa450edef68

908a90b3

'Address already in use' error message. · 36b560b7

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918003 13f79535-47bb-0310-9956-ffa450edef68

36b560b7

Another occurance of 'processes'. Rebuild transformations. · b1e60aae

Richard Bowen authored Mar 02, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918002 13f79535-47bb-0310-9956-ffa450edef68

b1e60aae

Rebuild transformation. · 7927c652

Richard Bowen authored Mar 02, 2010



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917997 13f79535-47bb-0310-9956-ffa450edef68

7927c652

None of the supposedly correct forms of the possessive of process sound · 889ea07e

Richard Bowen authored Mar 02, 2010

very awkward in this sentence. Rephrasing.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917996 13f79535-47bb-0310-9956-ffa450edef68

889ea07e

SECURITY: CVE-2010-0408 (cve.mitre.org) · 2fe8ec85

William A. Rowe Jr authored Mar 02, 2010

mod_proxy_ajp: Respond with HTTP_BAD_REQUEST when the body is not sent after
request headers indicate a request body is incoming; this is not a case of
HTTP_INTERNAL_SERVER_ERROR.

Submitted by: Niku Toivola <niku.toivola sulake.com>

rpluem, jim, wrowe



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917875 13f79535-47bb-0310-9956-ffa450edef68

2fe8ec85

SECURITY: CVE-2010-0425 (cve.mitre.org) · e9602aec

William A. Rowe Jr authored Mar 02, 2010

mod_isapi: Do not unload an isapi .dll module until the request
processing is completed, avoiding orphaned callback pointers.

Submitted by: Brett Gervasoni <brettg senseofsecurity.com>, trawick
Reviewed by: trawick, wrowe

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917870 13f79535-47bb-0310-9956-ffa450edef68

e9602aec

01 Mar, 2010 5 commits

Make sure we request the APR_FINFO_TYPE on the apr_dir_read() for wildcard · 3e64d02b
Graham Leggett authored Mar 01, 2010
```
configuration.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917759 13f79535-47bb-0310-9956-ffa450edef68
```
3e64d02b

When loading wildcards that are part of a path, only consider directories · ef549917

Graham Leggett authored Mar 01, 2010

and ignore other files. [Dan Poirier, Graham Leggett]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917735 13f79535-47bb-0310-9956-ffa450edef68

ef549917

overlooked for 10 years, impressive ;-) · 41fe4bae

William A. Rowe Jr authored Mar 01, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917615 13f79535-47bb-0310-9956-ffa450edef68

41fe4bae

in preparation of fixing 2.2 branch, change again, now to a cast-less solution · 91fdaf5d
William A. Rowe Jr authored Mar 01, 2010
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917611 13f79535-47bb-0310-9956-ffa450edef68
```
91fdaf5d

test svn update · 7e61d6c0

Philip M. Gollucci authored Mar 01, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917386 13f79535-47bb-0310-9956-ffa450edef68

7e61d6c0

28 Feb, 2010 3 commits

Update transformation. · 55a908e4

Rainer Jung authored Feb 28, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917242 13f79535-47bb-0310-9956-ffa450edef68

55a908e4

Correct referenced OpenSSL version now that 0.9.8m · 8d0a0238

Rainer Jung authored Feb 28, 2010

was released.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917235 13f79535-47bb-0310-9956-ffa450edef68

8d0a0238

Add mod_reqtimeout line to Windows default configuration. · 24ba779e

Stefan Fritsch authored Feb 28, 2010

Submitted by: Gregg L. Smith <lists glewis com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917151 13f79535-47bb-0310-9956-ffa450edef68

24ba779e

27 Feb, 2010 3 commits

Use portable apr_snprintf in rotatelogs. · e76d6bb5

Graham Leggett authored Feb 27, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917029 13f79535-47bb-0310-9956-ffa450edef68

e76d6bb5

Create the pidfile world readable by adding APR_FPROT_WREAD. Use · 4b86d701

Graham Leggett authored Feb 27, 2010

non-deprecated versions of the APR constants.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917005 13f79535-47bb-0310-9956-ffa450edef68

4b86d701

Try open the pid file twice, once before daemonisation so we can see any · 0ff31547

Graham Leggett authored Feb 27, 2010

error, and once after daemonisation so the child's pid is logged correctly.
Patch by Jeff Trawick.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@917002 13f79535-47bb-0310-9956-ffa450edef68

0ff31547

26 Feb, 2010 5 commits

build mod_reqtimeout on Windows · 285c8327

Jeff Trawick authored Feb 26, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@916866 13f79535-47bb-0310-9956-ffa450edef68

285c8327

* modules/ssl/ssl_engine_config.c (ssl_cmd_SSLInsecureRenegotiation): · 6052186d

Joe Orton authored Feb 26, 2010

  Tweak wording as suggested by trawick.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@916817 13f79535-47bb-0310-9956-ffa450edef68

6052186d

fix base addr of mod_serf · 15e47b6c

Jeff Trawick authored Feb 26, 2010

Submitted by: Gregg L. Smith <lists@glewis.com>
Reviewed by:  trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@916804 13f79535-47bb-0310-9956-ffa450edef68

15e47b6c

spelling · 807b9e24

Jeff Trawick authored Feb 26, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@916789 13f79535-47bb-0310-9956-ffa450edef68

807b9e24

* modules/ssl/ssl_engine_kernel.c (ssl_hook_Access): Dump the SSL · cdedbd11

Joe Orton authored Feb 26, 2010

error stack if reneg fails; this will give a big hint for failures
due to secure reneg.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@916733 13f79535-47bb-0310-9956-ffa450edef68

cdedbd11

25 Feb, 2010 4 commits

fix properties · 376dffcf

Andre Malo authored Feb 25, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@916478 13f79535-47bb-0310-9956-ffa450edef68

376dffcf

validate xml · 782f531a

Andre Malo authored Feb 25, 2010


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@916477 13f79535-47bb-0310-9956-ffa450edef68

782f531a

Update transforms · d2874b62

Daniel Earl Poirier authored Feb 25, 2010

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@916381 13f79535-47bb-0310-9956-ffa450edef68

d2874b62

Add -L option to create a hard link to the current log file. · b93eb47d

Daniel Earl Poirier authored Feb 25, 2010

PR: 48761
Submitted by: <lindon orthanc.ca>
With additional changes by: poirier


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@916377 13f79535-47bb-0310-9956-ffa450edef68

b93eb47d

24 Feb, 2010 2 commits

missing file from r915660, major MMN bump already in original revision · 78d29cb0

Eric Covener authored Feb 24, 2010

for this file.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@915923 13f79535-47bb-0310-9956-ffa450edef68

78d29cb0

make some sense of the difference between "Client" and "Global" certs in mod_ldap. · 1957b836

Eric Covener authored Feb 24, 2010

PR46541

Submitted By: Paul Reder, Eric Covener
Reviewed By: Eric Covener



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@915660 13f79535-47bb-0310-9956-ffa450edef68

1957b836

23 Feb, 2010 1 commit

mod_negotiation: Preserve query string over multiviews negotiation. · 481cc464

Nick Kew authored Feb 23, 2010

PR 33112
Joergen Thomsen


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@915407 13f79535-47bb-0310-9956-ffa450edef68

481cc464