Commits · 6688f9d102ad29d6bb4167d690ee495d709e47b6 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

22 Aug, 2014 1 commit

SECURITY: CVE-2013-5704 (cve.mitre.org) · 6688f9d1

William A. Rowe Jr authored Aug 22, 2014

core: HTTP trailers could be used to replace HTTP headers
late during request processing, potentially undoing or
otherwise confusing modules that examined or modified
request headers earlier.  Adds "MergeTrailers" directive to restore
legacy behavior.

Submitted by: Edward Lu, Yann Ylavic, Joe Orton, Eric Covener
Backports: r1610814
Reviewed by: covener, wrowe, ylavic



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1619884 13f79535-47bb-0310-9956-ffa450edef68

6688f9d1

21 Aug, 2014 3 commits

premature · 25b57f07

Eric Covener authored Aug 21, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1619447 13f79535-47bb-0310-9956-ffa450edef68

25b57f07

· fd170566

Eric Covener authored Aug 21, 2014

propose deflate tweak


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1619387 13f79535-47bb-0310-9956-ffa450edef68

fd170566

Votes. · 60a43c18

Yann Ylavic authored Aug 21, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1619381 13f79535-47bb-0310-9956-ffa450edef68

60a43c18

19 Aug, 2014 2 commits

Fix typo noticed by GilDawson · 802cd02a

Christophe Jaillet authored Aug 19, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1618966 13f79535-47bb-0310-9956-ffa450edef68

802cd02a

propose simple authz_core fix · 8ca8655e

Eric Covener authored Aug 19, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1618852 13f79535-47bb-0310-9956-ffa450edef68

8ca8655e

18 Aug, 2014 1 commit

Propose · 2ae4238c

Christophe Jaillet authored Aug 18, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1618547 13f79535-47bb-0310-9956-ffa450edef68

2ae4238c

16 Aug, 2014 1 commit

simple mod_proxy_fcgi fix · f5b1062c

Jeff Trawick authored Aug 16, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1618402 13f79535-47bb-0310-9956-ffa450edef68

f5b1062c

10 Aug, 2014 1 commit

propose silencing of ratelimit errors · b4cda3fc

Eric Covener authored Aug 10, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1617035 13f79535-47bb-0310-9956-ffa450edef68

b4cda3fc

09 Aug, 2014 2 commits

Rebuild. · 1898bd39

Lucien Gentis authored Aug 09, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1616962 13f79535-47bb-0310-9956-ffa450edef68

1898bd39

XML update. · 642b774c

Lucien Gentis authored Aug 09, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1616960 13f79535-47bb-0310-9956-ffa450edef68

642b774c

07 Aug, 2014 2 commits

Some doc changes for mod_authnz_fcgi. · 6d5dce22

Mike Rumph authored Aug 07, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1616382 13f79535-47bb-0310-9956-ffa450edef68

6d5dce22

Generated doc changes. · 50df7425

Mike Rumph authored Aug 07, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1616380 13f79535-47bb-0310-9956-ffa450edef68

50df7425

02 Aug, 2014 2 commits

use /var/log instead of /var/logs in examples · 92ee0b04

Eric Covener authored Aug 02, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1615363 13f79535-47bb-0310-9956-ffa450edef68

92ee0b04

Propose. · 51b0970f

Rainer Jung authored Aug 02, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1615346 13f79535-47bb-0310-9956-ffa450edef68

51b0970f

01 Aug, 2014 1 commit

Propose · d9fba79c

Christophe Jaillet authored Aug 01, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1615029 13f79535-47bb-0310-9956-ffa450edef68

d9fba79c

30 Jul, 2014 1 commit

Fix typo spotted in comment #2818 · 31663fb0

Christophe Jaillet authored Jul 30, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1614541 13f79535-47bb-0310-9956-ffa450edef68

31663fb0

26 Jul, 2014 3 commits

Rebuild. · 13670219

Lucien Gentis authored Jul 26, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1613702 13f79535-47bb-0310-9956-ffa450edef68

13670219

XML updates. · 3f6e8e8b

Lucien Gentis authored Jul 26, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1613701 13f79535-47bb-0310-9956-ffa450edef68

3f6e8e8b

fix a 2.4.10 regression in mod_ldap (noticed by me in a very obscure test case) · 83dd231d
Eric Covener authored Jul 26, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1613684 13f79535-47bb-0310-9956-ffa450edef68
```
83dd231d

25 Jul, 2014 2 commits

Merge r1613526 from trunk: · cf4b1efb

Eric Covener authored Jul 25, 2014

no status during if_walk



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1613527 13f79535-47bb-0310-9956-ffa450edef68

cf4b1efb

Merge r1613524 from trunk: · edc9de59

Eric Covener authored Jul 25, 2014

call out some variables that aren't set during <if>



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1613525 13f79535-47bb-0310-9956-ffa450edef68

edc9de59

24 Jul, 2014 1 commit

Merge r1613318 from trunk: · f3eab3d3

Eric Covener authored Jul 24, 2014

two commenters were confused authnprovideralias
providing special config to authz providers

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1613319 13f79535-47bb-0310-9956-ffa450edef68

f3eab3d3

21 Jul, 2014 1 commit

Applied in r1611758. · 25d4e1d7

Rainer Jung authored Jul 21, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1612259 13f79535-47bb-0310-9956-ffa450edef68

25d4e1d7

20 Jul, 2014 3 commits

Rebuild. · e658a186

Lucien Gentis authored Jul 20, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1612095 13f79535-47bb-0310-9956-ffa450edef68

e658a186

XML updates. · 34c43032

Lucien Gentis authored Jul 20, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1612093 13f79535-47bb-0310-9956-ffa450edef68

34c43032

Propose · fdb48e81

Christophe Jaillet authored Jul 20, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1612069 13f79535-47bb-0310-9956-ffa450edef68

fdb48e81

19 Jul, 2014 5 commits

Rebuild. · 21a50231

Lucien Gentis authored Jul 19, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1611933 13f79535-47bb-0310-9956-ffa450edef68

21a50231

XML Updates. · f8ce751a

Lucien Gentis authored Jul 19, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1611931 13f79535-47bb-0310-9956-ffa450edef68

f8ce751a

Propose · 8a2ae075

Christophe Jaillet authored Jul 19, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1611928 13f79535-47bb-0310-9956-ffa450edef68

8a2ae075

Fix doxygen comments. · af9b7789

Christophe Jaillet authored Jul 19, 2014

In trunk: r1611210 , r1611252, r1611481, r1611919

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1611925 13f79535-47bb-0310-9956-ffa450edef68

af9b7789

Propose · 4100609e

Christophe Jaillet authored Jul 19, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1611867 13f79535-47bb-0310-9956-ffa450edef68

4100609e

18 Jul, 2014 8 commits

fix latex build · 101d5c5e

Andre Malo authored Jul 18, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1611814 13f79535-47bb-0310-9956-ffa450edef68

101d5c5e

update transformation · 3916dc6f

Andre Malo authored Jul 18, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1611788 13f79535-47bb-0310-9956-ffa450edef68

3916dc6f

Merge r1611600 from trunk: · f4a6fb7d

Rainer Jung authored Jul 18, 2014

Silence compiler warning:
mod_authnz_fcgi.c:580:44: warning: 'orspbuflen'
may be used uninitialized in this function.

Not true but annoying.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1611758 13f79535-47bb-0310-9956-ffa450edef68

f4a6fb7d

backport for mod_lua: Don't quote values in cookies; Make IE happy again [#56734] · d4743ed8
Daniel Gruno authored Jul 18, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1611744 13f79535-47bb-0310-9956-ffa450edef68
```
d4743ed8

Yes · ce9eab94

William A. Rowe Jr authored Jul 18, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1611715 13f79535-47bb-0310-9956-ffa450edef68

ce9eab94

just make it shut up · e9d005de

Jeff Trawick authored Jul 18, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1611707 13f79535-47bb-0310-9956-ffa450edef68

e9d005de

Vote up, note patch (non-2.2) for defect identified by Yann · dd394199

William A. Rowe Jr authored Jul 18, 2014

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1611677 13f79535-47bb-0310-9956-ffa450edef68

dd394199

Propose. · a2083787

Rainer Jung authored Jul 18, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1611603 13f79535-47bb-0310-9956-ffa450edef68

a2083787