1. 29 Oct, 2010 6 commits
  2. 26 Oct, 2010 1 commit
  3. 24 Oct, 2010 3 commits
  4. 23 Oct, 2010 1 commit
  5. 21 Oct, 2010 2 commits
  6. 20 Oct, 2010 3 commits
  7. 19 Oct, 2010 3 commits
  8. 18 Oct, 2010 8 commits
  9. 17 Oct, 2010 2 commits
  10. 15 Oct, 2010 1 commit
  11. 14 Oct, 2010 3 commits
  12. 12 Oct, 2010 3 commits
  13. 11 Oct, 2010 1 commit
  14. 08 Oct, 2010 2 commits
  15. 07 Oct, 2010 1 commit
    • William A. Rowe Jr's avatar
      SECURITY: CVE-2010-1623 (cve.mitre.org) · 15109e4e
      William A. Rowe Jr authored
      Fix a denial of service attack against mod_reqtimeout.
      [Stefan Fritsch]
      
      mod_req-timeout/core: Backport bugfixes from trunk up to r935339:
          - Do not wrongly enforce timeouts for mod_proxy's backend
            connections and other protocol handlers (like mod_ftp).
          - Enforce the timeout for AP_MODE_GETLINE.
          - If there is a timeout, shorten the lingering close time from 30 to
            2 seconds (involves a change in the core).
      
      Backports: r921378, r921526, r922407, r923418, r923429, r925986, r928881
                 r933341, r933547, r935339, r983116, r984985&view=rev
      Submitted by: sf
      Reviewed by: wrowe, trawick
      
      
      git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1005669 13f79535-47bb-0310-9956-ffa450edef68
      15109e4e