Commits · 70d1093a28b22b6c356561dbd0dfd06cef7cddeb · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Mar 08, 2012

Jim Jagielski authored Mar 08, 2012

Fix insecure handling of LD_LIBRARY_PATH that could lead to the
current working directory to be searched for DSOs

CVE-2012-0883

Submitted by: sf
Reviewed/backported by: jim


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1298453 13f79535-47bb-0310-9956-ffa450edef68

70d1093a

Merge r1293717 from trunk: · 46f53a78

Jim Jagielski authored Mar 08, 2012

Pass the EOS bucket down the filter chain

PR: 52766

Submitted by: sf
Reviewed/backported by: jim


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1298451 13f79535-47bb-0310-9956-ffa450edef68

46f53a78

promote 2 backports · e41093fb

Jim Jagielski authored Mar 08, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1298450 13f79535-47bb-0310-9956-ffa450edef68

e41093fb

votes · 1cbc5c55

Jim Jagielski authored Mar 08, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1298449 13f79535-47bb-0310-9956-ffa450edef68

1cbc5c55

Transformations. · a4ced57b

Richard Bowen authored Mar 08, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1298255 13f79535-47bb-0310-9956-ffa450edef68

a4ced57b

mod_proxy_html is no longer a third-party modules. · 6a2a0d5e

Richard Bowen authored Mar 08, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1298254 13f79535-47bb-0310-9956-ffa450edef68

6a2a0d5e

Mar 07, 2012

propose PR52845 change to "DirectoryIndex disabled" to clobber current · b7f2380b

Eric Covener authored Mar 07, 2012

dirconfig, not just parent.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1297969 13f79535-47bb-0310-9956-ffa450edef68

b7f2380b

two short votes · c399135f

Eric Covener authored Mar 07, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1297967 13f79535-47bb-0310-9956-ffa450edef68

c399135f

Rebuild transformations. · bb0a6ff7

Richard Bowen authored Mar 07, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1297837 13f79535-47bb-0310-9956-ffa450edef68

bb0a6ff7

Trivial s/a/an/ typo correction. · 589cba96

Richard Bowen authored Mar 07, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1297836 13f79535-47bb-0310-9956-ffa450edef68

589cba96

Mar 06, 2012

Backport DEFAULT_REL_RUNTIMEDIR support for mod_slotmem_shm · e11a14ab

Jim Jagielski authored Mar 06, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1297561 13f79535-47bb-0310-9956-ffa450edef68

e11a14ab

Apply Igor's patch to 2.4 as well. · 3177eb81

Richard Bowen authored Mar 06, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1297490 13f79535-47bb-0310-9956-ffa450edef68

3177eb81

Mar 05, 2012

Rebuild transformations · c3483566

Richard Bowen authored Mar 05, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1296928 13f79535-47bb-0310-9956-ffa450edef68

c3483566

Modules get installed to ./modules not ./libexec · bac19068

Richard Bowen authored Mar 05, 2012

(https://issues.apache.org/bugzilla/show_bug.cgi?id=52454)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1296925 13f79535-47bb-0310-9956-ffa450edef68

bac19068

As per https://issues.apache.org/bugzilla/show_bug.cgi?id=51746 mention · 2384d398

Richard Bowen authored Mar 05, 2012

that subjectAltName and wildcard certs are viable solutions.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1296922 13f79535-47bb-0310-9956-ffa450edef68

2384d398

As per https://issues.apache.org/bugzilla/show_bug.cgi?id=49562 , remove · cee1acb0

Richard Bowen authored Mar 05, 2012

references to a Makefile that no longer exist.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1296917 13f79535-47bb-0310-9956-ffa450edef68

cee1acb0

Mar 04, 2012

Add note about external PCRE dependency · 5b7fd309

Sander Temme authored Mar 04, 2012

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1296736 13f79535-47bb-0310-9956-ffa450edef68

5b7fd309

Rebuild transformations · 8beff93c

Richard Bowen authored Mar 04, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1296728 13f79535-47bb-0310-9956-ffa450edef68

8beff93c

Mar 03, 2012

Updates. · bc38e90c

Lucien Gentis authored Mar 03, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1296679 13f79535-47bb-0310-9956-ffa450edef68

bc38e90c

Mar 02, 2012

propose · 1fc07098

Stefan Fritsch authored Mar 02, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1296430 13f79535-47bb-0310-9956-ffa450edef68

1fc07098

Correct ordering of query string following use of QSA · d20b3e10

Richard Bowen authored Mar 02, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1296181 13f79535-47bb-0310-9956-ffa450edef68

d20b3e10

Feb 29, 2012

Rebuild · a9247a54

Richard Bowen authored Feb 29, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1295298 13f79535-47bb-0310-9956-ffa450edef68

a9247a54

Fix directive name as per https://issues.apache.org/bugzilla/show_bug.cgi?id=52798 · 75386c47
Richard Bowen authored Feb 29, 2012
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1295293 13f79535-47bb-0310-9956-ffa450edef68
```
75386c47

Feb 28, 2012

Reflect changes · f159f106

Jim Jagielski authored Feb 28, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294764 13f79535-47bb-0310-9956-ffa450edef68

f159f106

never too early to plan :) · 8ccf45b9

Jim Jagielski authored Feb 28, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294604 13f79535-47bb-0310-9956-ffa450edef68

8ccf45b9

remove · f37d040b

Jim Jagielski authored Feb 28, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294603 13f79535-47bb-0310-9956-ffa450edef68

f37d040b

Merge r1294471 from trunk: · 97d0a2d6

Jim Jagielski authored Feb 28, 2012

properly free the GENERAL_NAMEs, as pointed out in PR 32652

Submitted by: kbrand
Reviewed/backported by: jim


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294602 13f79535-47bb-0310-9956-ffa450edef68

97d0a2d6

remove · 2ec928be

Jim Jagielski authored Feb 28, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294601 13f79535-47bb-0310-9956-ffa450edef68

2ec928be

Merge r1243651 from trunk: · 8e1b81e6

Jim Jagielski authored Feb 28, 2012

Check during config test that directories for access logs exist

PR 29941

Submitted by: sf
Reviewed/backported by: jim


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294600 13f79535-47bb-0310-9956-ffa450edef68

8e1b81e6

promote · 0375dcfa

Jim Jagielski authored Feb 28, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294599 13f79535-47bb-0310-9956-ffa450edef68

0375dcfa

Vote · 9affdd3e

Jim Jagielski authored Feb 28, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294597 13f79535-47bb-0310-9956-ffa450edef68

9affdd3e

Vote. · 3034cf96

Graham Leggett authored Feb 28, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294524 13f79535-47bb-0310-9956-ffa450edef68

3034cf96

propose · a3f01ea1

Kaspar Brand authored Feb 28, 2012

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294473 13f79535-47bb-0310-9956-ffa450edef68

a3f01ea1

Feb 27, 2012

Backport: · bc06a41c

Graham Leggett authored Feb 27, 2012

AIX: Add missing build scripts.
Submitted by: Michael Felt <mamfelt gmail com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294373 13f79535-47bb-0310-9956-ffa450edef68

bc06a41c

Backport: · da71abcd

Graham Leggett authored Feb 27, 2012

AIX: Update the build to support AIX packages.
Submitted by: Michael Felt <mamfelt gmail com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294368 13f79535-47bb-0310-9956-ffa450edef68

da71abcd

Merge r1292043: · 25fcd8ed

Stefan Fritsch authored Feb 27, 2012

Add AP_HAVE_C99 to make correct check for C99 less onerous
Using __STDC_VERSION__ without checking if it is defined causes warnings
on C89.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294162 13f79535-47bb-0310-9956-ffa450edef68

25fcd8ed

Merge 1293534, 1293535: · f0f182c0

Stefan Fritsch authored Feb 27, 2012

Fix compiler warnings with C89
Submitted by: Daniel Shahaf <danielsh elego de>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294160 13f79535-47bb-0310-9956-ffa450edef68

f0f182c0

Merge r1293708: · c6333024

Stefan Fritsch authored Feb 27, 2012

Enable per-module loglevel for mod_xml2enc and mod_proxy_html


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294159 13f79535-47bb-0310-9956-ffa450edef68

c6333024

Adjust formatting · 49d6313a

Stefan Fritsch authored Feb 27, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294158 13f79535-47bb-0310-9956-ffa450edef68

49d6313a

Merge r1293405: · e0d11687

Stefan Fritsch authored Feb 27, 2012

Fix AddOutputFilterByType brown paper bag crash bug
Initialize pointers, fix off-by-one.
PR: 52755


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1294157 13f79535-47bb-0310-9956-ffa450edef68

e0d11687