Commits · 99f9da5c79bc0de71f0982ac1c47a615d86b8b62 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

24 Jan, 2012 3 commits

Backport trunk revisions 1209432 and 1233604: · 99f9da5c

Jeff Trawick authored Jan 24, 2012

SECURITY: CVE-2011-4317 (cve.mitre.org)
Resolve additional cases of URL rewriting with ProxyPassMatch or
RewriteRule, where particular request-URIs could result in undesired
backend network exposure in some configurations.

Submitted by: jorton
Reviewed by: trawick, covener, gregames


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1235443 13f79535-47bb-0310-9956-ffa450edef68

99f9da5c

vote for a couple CVE patches · dd72441b

Greg Ames authored Jan 24, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1235418 13f79535-47bb-0310-9956-ffa450edef68

dd72441b

vote/comment on header field echo · 8170adbb

Jeff Trawick authored Jan 24, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1235203 13f79535-47bb-0310-9956-ffa450edef68

8170adbb

23 Jan, 2012 1 commit

propose CVE-2012-0053 · 53794199

Eric Covener authored Jan 23, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1234841 13f79535-47bb-0310-9956-ffa450edef68

53794199

22 Jan, 2012 1 commit

vote · 7a64de94

Eric Covener authored Jan 22, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1234527 13f79535-47bb-0310-9956-ffa450edef68

7a64de94

20 Jan, 2012 1 commit

alternative solution for CVE-2011-4317 · 8ab3c751

Jeff Trawick authored Jan 20, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1233920 13f79535-47bb-0310-9956-ffa450edef68

8ab3c751

18 Jan, 2012 1 commit

what's in a URI · 5deebd01

Jeff Trawick authored Jan 18, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1232665 13f79535-47bb-0310-9956-ffa450edef68

5deebd01

17 Jan, 2012 3 commits

Fix out of date info · 5ed16a27

William A. Rowe Jr authored Jan 17, 2012

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1232627 13f79535-47bb-0310-9956-ffa450edef68

5ed16a27

Fix out of date info · 2d8405e9

William A. Rowe Jr authored Jan 17, 2012

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1232626 13f79535-47bb-0310-9956-ffa450edef68

2d8405e9

make formatting of CVE-2012-0031 match other CVE's and · 1db31e0b

Eric Covener authored Jan 17, 2012

re-wrap.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1232264 13f79535-47bb-0310-9956-ffa450edef68

1db31e0b

15 Jan, 2012 1 commit

Remove old proposal that has been obsoleted by r1227293 · 215dfebf

Stefan Fritsch authored Jan 15, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1231785 13f79535-47bb-0310-9956-ffa450edef68

215dfebf

14 Jan, 2012 1 commit

Merge r1231446from trunk: · 6f997cf5

Takashi Sato authored Jan 14, 2012

Fix the request/response header error

Submitted by: INOUE Seiichiro <inoue ariel-networks.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1231454 13f79535-47bb-0310-9956-ffa450edef68

6f997cf5

13 Jan, 2012 2 commits

Merge r1230069 from trunk: · dcf8bc4e

Jim Jagielski authored Jan 13, 2012

Submitted by: jorton
Reviewed/backported by: jim

SECURITY (CVE-2012-0031) patch


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1231058 13f79535-47bb-0310-9956-ffa450edef68

dcf8bc4e

Votes · 288eff66

Jim Jagielski authored Jan 13, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1231051 13f79535-47bb-0310-9956-ffa450edef68

288eff66

11 Jan, 2012 3 commits

vote&promote scoreboard CVE · 4f39fbff

Eric Covener authored Jan 11, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1230138 13f79535-47bb-0310-9956-ffa450edef68

4f39fbff

vote · b004e32b

Jeff Trawick authored Jan 11, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1230128 13f79535-47bb-0310-9956-ffa450edef68

b004e32b

Add another. · f897c87b

Joe Orton authored Jan 11, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1230073 13f79535-47bb-0310-9956-ffa450edef68

f897c87b

10 Jan, 2012 3 commits

update transformations · f58c3b2c

Takashi Sato authored Jan 10, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1229801 13f79535-47bb-0310-9956-ffa450edef68

f58c3b2c

Merge r1229116 from trunk: · 44d88764

Takashi Sato authored Jan 10, 2012

Add <glossary> to nroff.xsl and revert r1222335(r1226330) partially.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1229791 13f79535-47bb-0310-9956-ffa450edef68

44d88764

remove outdated remark about backport · 34ea5294

Eric Covener authored Jan 10, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1229552 13f79535-47bb-0310-9956-ffa450edef68

34ea5294

09 Jan, 2012 6 commits

xforms · 417e9d44

Jim Jagielski authored Jan 09, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1229259 13f79535-47bb-0310-9956-ffa450edef68

417e9d44

Fix typo · ea3d9035

Takashi Sato authored Jan 09, 2012

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1229237 13f79535-47bb-0310-9956-ffa450edef68

ea3d9035

Fix English Revisions. · cee30a98

Takashi Sato authored Jan 09, 2012

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1229218 13f79535-47bb-0310-9956-ffa450edef68

cee30a98

Add a new Japanese translation. · e2606253

Takashi Sato authored Jan 09, 2012

Submitted by: INOUE Seiichiro <inoue ariel-networks.com>
Reviewed by: takashi

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1229101 13f79535-47bb-0310-9956-ffa450edef68

e2606253

Improve translation (or sync to trunk/2.4) · 6e77049d

Takashi Sato authored Jan 09, 2012

Submitted by: takashi
Reviewed by: AkahoriShunsuke <a.shunsuke2002 gmail.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1229058 13f79535-47bb-0310-9956-ffa450edef68

6e77049d

Update Japanese translation. · 44c2b71a

Takashi Sato authored Jan 09, 2012

English Revesion: r1212598

Submitted by: INOUE Seiichiro <inoue ariel-networks.com>
Reviewed by: KIKUCHI Tokio <tokio.kikuchi gmail.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1229053 13f79535-47bb-0310-9956-ffa450edef68

44c2b71a

08 Jan, 2012 1 commit

Merge r1228894 from trunk: · 9d65e407

Eric Covener authored Jan 08, 2012

rewrite guesses URL or Filesystem in server context, but treats everything
as a URL in per-dir context.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1228896 13f79535-47bb-0310-9956-ffa450edef68

9d65e407

07 Jan, 2012 1 commit

Add new Japanese translations. · c5e88353

Takashi Sato authored Jan 07, 2012

Submitted by: KIKUCHI Tokio <tokio.kikuchi gmail.com>
Reviewed by: INOUE Seiichiro <inoue ariel-networks.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1228569 13f79535-47bb-0310-9956-ffa450edef68

c5e88353

06 Jan, 2012 2 commits

Feedback, propose, vote and stuff · 0c0d4bd6

William A. Rowe Jr authored Jan 06, 2012

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1228326 13f79535-47bb-0310-9956-ffa450edef68

0c0d4bd6

Revert r1227860; proposing for backport · 8302f97c

William A. Rowe Jr authored Jan 06, 2012

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1228269 13f79535-47bb-0310-9956-ffa450edef68

8302f97c

05 Jan, 2012 1 commit

Cure size_t abuse · 391298b7

William A. Rowe Jr authored Jan 05, 2012

Backports the relevant bits from r1227856

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1227860 13f79535-47bb-0310-9956-ffa450edef68

391298b7

04 Jan, 2012 4 commits

Merge r1092076, r1100513: · 27baec4e

Stefan Fritsch authored Jan 04, 2012

Try to prevent a single long request marking a worker in error.

Submitted by: jfclere
Reviewd by: jfclere, rjung, rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1227298 13f79535-47bb-0310-9956-ffa450edef68

27baec4e

mod_ssl: Update default config (SSLProtocol, SSLCipherSuite, MSIE pattern) · ebc9f9ce

Stefan Fritsch authored Jan 04, 2012

Reviewed by: Kaspar Brand, Rainer Jung, Joe Orton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1227293 13f79535-47bb-0310-9956-ffa450edef68

ebc9f9ce

Merge r1225380: · 6bd882af

Stefan Fritsch authored Jan 04, 2012

Fix segfault when logging nameless, valueless cookie

PR: 52256
Reviewed by: Stefan Fritsch, Greg Ames, Eric Covener


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1227292 13f79535-47bb-0310-9956-ffa450edef68

6bd882af

Merge fix for CVE-2011-3607: · ffcd2b1a

Stefan Fritsch authored Jan 04, 2012

Fix integer overflow in ap_pregsub()

Trunk fix: r1198940
Submitted by: Stefan Fritsch, Greg Ames
Reviewed by: Stefan Fritsch, Greg Ames, Eric Covener


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1227280 13f79535-47bb-0310-9956-ffa450edef68

ffcd2b1a

03 Jan, 2012 5 commits

vote&promote · e96ce25b

Eric Covener authored Jan 03, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1226984 13f79535-47bb-0310-9956-ffa450edef68

e96ce25b

sf's 2.2.x patch for CVE-2011-3607 looks good · eb98a062

Greg Ames authored Jan 03, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1226978 13f79535-47bb-0310-9956-ffa450edef68

eb98a062

the trunk patch for PR 52256 works fine on the latest 2.2.x · 6563a4ed

Greg Ames authored Jan 03, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1226973 13f79535-47bb-0310-9956-ffa450edef68

6563a4ed

One backported, propose · bfa45774

Stefan Fritsch authored Jan 03, 2012


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1226956 13f79535-47bb-0310-9956-ffa450edef68

bfa45774

Merge r895483: · 05dfcafc

Stefan Fritsch authored Jan 03, 2012

Fix segfault in ap_send_interim_response().

PR: 52315


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1226955 13f79535-47bb-0310-9956-ffa450edef68

05dfcafc