Commits · efbb3a13502b4b8cc0883bf1417156f4a90c1f19 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

23 Jan, 2004 1 commit

Unescaped errorlogs are still possible using the compile time switch · efbb3a13

Andre Malo authored Jan 23, 2004

"-DAP_UNSAFE_ERROR_LOG_UNESCAPED".

Reviewed by: Stas Bekman, Geoffrey Young

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102391 13f79535-47bb-0310-9956-ffa450edef68

efbb3a13

20 Jan, 2004 1 commit

Consistant formatting of CVE entries in ChangeLog · 233ee6fe

Mark J. Cox authored Jan 20, 2004

Add missing CVE name from access log filtering patch
CAN to CVE migration (not many this time)
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102382 13f79535-47bb-0310-9956-ffa450edef68

233ee6fe

16 Jan, 2004 2 commits

Add mod_log_forensic to the NetWare httpd.conf template · 89e05202

Bradley Nicholes authored Jan 16, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102352 13f79535-47bb-0310-9956-ffa450edef68

89e05202

Add mod_log_forensic to the NetWare project file · 9a275f77

Bradley Nicholes authored Jan 16, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102351 13f79535-47bb-0310-9956-ffa450edef68

9a275f77

15 Jan, 2004 1 commit

Don't log twice. · a49f0f65

Ben Laurie authored Jan 15, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102348 13f79535-47bb-0310-9956-ffa450edef68

a49f0f65

13 Jan, 2004 5 commits

Some syntax errors in mod_mime_magic's magic file can result · bf817b74

Jeff Trawick authored Jan 13, 2004

in a 500 error, which previously was unlogged.  Now we log the
error.

Submitted by:	Jeff Trawick
Reviewed by:	Jim Jagielski, Martin Kraemer


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102326 13f79535-47bb-0310-9956-ffa450edef68

bf817b74

Linux 2.4+: If Apache is started as root and you code · 0441edec

Jeff Trawick authored Jan 13, 2004

CoreDumpDirectory, coredumps are enabled via the prctl() syscall.
Backport of a 2.x feature by Greg Ames.

Submitted by: Jeff Trawick
Reviewed by:  Joe Orton, Jim Jagielski


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102322 13f79535-47bb-0310-9956-ffa450edef68

0441edec

Fold in backport of 2.0 fix for mod_usertrack core dump · d430a5be

Jim Jagielski authored Jan 13, 2004

when enabled but no explicit CookieName is set.

PR: 24483(Bugz)
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102319 13f79535-47bb-0310-9956-ffa450edef68

d430a5be

* src/modules/standard/mod_auth_db.c (get_db_pw): Fix build with · 7a7f8e52

Joe Orton authored Jan 13, 2004

Berkeley DB 4.x where x > 0.

PR: 21443


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102318 13f79535-47bb-0310-9956-ffa450edef68

7a7f8e52

* src/modules/standard/mod_usertrack.c (spot_cookie): Remove unused · f5f5c196

Joe Orton authored Jan 13, 2004

variable 'i' added in r1.57.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102317 13f79535-47bb-0310-9956-ffa450edef68

f5f5c196

12 Jan, 2004 2 commits

fix double slash problem · 4b6d3fe2

Andre Malo authored Jan 12, 2004

Reviewed by: Jeff Trawick, Justin Erenkrantz


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102286 13f79535-47bb-0310-9956-ffa450edef68

4b6d3fe2

cause a lookup failure if the map key contains a newline · 803b6ced

Andre Malo authored Jan 12, 2004

PR: 14453
Reviewed by: Jeff Trawick, Justin Erenkrantz


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102279 13f79535-47bb-0310-9956-ffa450edef68

803b6ced

10 Jan, 2004 1 commit

* Add dmg to application/octet-stream (PR#23902) · 84ea1338

Erik Abele authored Jan 10, 2004

* Add m4u to video/vnd.mpegurl (PR#25268)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102267 13f79535-47bb-0310-9956-ffa450edef68

84ea1338

07 Jan, 2004 2 commits

Updated the NetWare Codewarrior project file for CodeWarrior 8 with PDK 5.1 · 3ccdee6f
Bradley Nicholes authored Jan 07, 2004
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102216 13f79535-47bb-0310-9956-ffa450edef68
```
3ccdee6f

fix mispelling · c72a60b1

Jeff Trawick authored Jan 07, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102214 13f79535-47bb-0310-9956-ffa450edef68

c72a60b1

03 Jan, 2004 2 commits

Make handling of 0 back compatible. · 4f4e2b88

Ben Laurie authored Jan 03, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102163 13f79535-47bb-0310-9956-ffa450edef68

4f4e2b88

Make forensic logging EBCDIC safe. · 453b5115

Ben Laurie authored Jan 03, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102160 13f79535-47bb-0310-9956-ffa450edef68

453b5115

01 Jan, 2004 1 commit

update license to 2004 · be38fadf

Andre Malo authored Jan 01, 2004


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102137 13f79535-47bb-0310-9956-ffa450edef68

be38fadf

31 Dec, 2003 1 commit

Add forensic logging module. · 34ad99f4

Ben Laurie authored Dec 31, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102130 13f79535-47bb-0310-9956-ffa450edef68

34ad99f4

14 Dec, 2003 1 commit

SECURITY [CAN-2003-0020]: escape arbitrary data before writing into the · 9c91b686

Andre Malo authored Dec 14, 2003

  errorlog.

Reviewed by: Mark J Cox, Erik Abele, Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102061 13f79535-47bb-0310-9956-ffa450edef68

9c91b686

04 Dec, 2003 1 commit

Add '%X' as an alias for '%c' in LogFormat. Both work and · ac7e700a

Jim Jagielski authored Dec 04, 2003

do the same thing, so we don't have backwards compatibility
problems, but now people can adjust to use '%X' to log
the connection status when using mod_ssl (which changes
what '%c' means)

PR:
Obtained from: Apache 2.x
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101985 13f79535-47bb-0310-9956-ffa450edef68

ac7e700a

27 Nov, 2003 1 commit

Note the usertrack bug... patch coming soon · 7ddeca8f

Jim Jagielski authored Nov 27, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101903 13f79535-47bb-0310-9956-ffa450edef68

7ddeca8f

21 Nov, 2003 1 commit

axe a comment that was removed long ago then re-emerged with the massive · b5420f70

Jeff Trawick authored Nov 21, 2003

proxy changes

PR: 18628
Submitted by: Joshua Colvin <joshua safeweb.com>
Reviewed by:  Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101833 13f79535-47bb-0310-9956-ffa450edef68

b5420f70

17 Nov, 2003 1 commit

Make UseCanonicalName off correctly grab port info from · 39c0af16

Jim Jagielski authored Nov 17, 2003

the client. Make UseCanonicalName socket port aware.

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101803 13f79535-47bb-0310-9956-ffa450edef68

39c0af16

12 Nov, 2003 1 commit

· 8dbeeb72

William A. Rowe Jr authored Nov 12, 2003

  Obscuficate contributors' email addresses in an obvious and simple to read manner.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101766 13f79535-47bb-0310-9956-ffa450edef68

8dbeeb72

09 Nov, 2003 1 commit

add missing license · ae505a52

Andre Malo authored Nov 09, 2003

Reviewed by: Greg Stein


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101731 13f79535-47bb-0310-9956-ffa450edef68

ae505a52

07 Nov, 2003 1 commit

I did the OS/2 binary a few days ago. · cf61b37b

Brian Havard authored Nov 07, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101709 13f79535-47bb-0310-9956-ffa450edef68

cf61b37b

30 Oct, 2003 2 commits

Did the OS X 10.3 bin build · 8d1a5f62

Jim Jagielski authored Oct 30, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101627 13f79535-47bb-0310-9956-ffa450edef68

8d1a5f62

Some binaries are already in place · cad23cd5

Martin Kraemer authored Oct 30, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101623 13f79535-47bb-0310-9956-ffa450edef68

cad23cd5

29 Oct, 2003 1 commit

Note release/announce date · a0854811

Jim Jagielski authored Oct 29, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101602 13f79535-47bb-0310-9956-ffa450edef68

a0854811

24 Oct, 2003 2 commits

And we are at 1.3.30-dev · 13b5184b

Jim Jagielski authored Oct 24, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101554 13f79535-47bb-0310-9956-ffa450edef68

13b5184b

Bump up for 1.3.29. Fold in the CAN-2003-0542 regex patch. · f3c1d595

Jim Jagielski authored Oct 24, 2003

Get ready to tag.

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101552 13f79535-47bb-0310-9956-ffa450edef68

f3c1d595

22 Oct, 2003 2 commits

German translation of the Announcement · f8845875

Astrid Kessler authored Oct 22, 2003

Reviewed by:	nd


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101528 13f79535-47bb-0310-9956-ffa450edef68

f8845875

Hmmm... Let work up an Announcement · 8c3602c1

Jim Jagielski authored Oct 22, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101524 13f79535-47bb-0310-9956-ffa450edef68

8c3602c1

20 Oct, 2003 1 commit

I'm tending to think we should *not* change this for 1.3.29. · 713d80d1

Jim Jagielski authored Oct 20, 2003

I foresee problems when even though the patch corrects
behavior, the (previous) incorrect behavior might be
used and expected in various ways throughout the community.
And I don't want to pull the rug out from under them.

Instead, let's see about folding this is for 1.3.30 after
some extensive testing.

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101495 13f79535-47bb-0310-9956-ffa450edef68

713d80d1

19 Oct, 2003 3 commits

In ap_bclose(), we always use ap_pclosesocket() when the fd · 64e18c30

Jim Jagielski authored Oct 19, 2003

points to a socket and ap_bclosef() it it's a file (we stay
aware of Windows handles however). Also, we stay consistent
and use closesocket() whenever we wish to close a socket
directly. For Unix, closesocket() is simply a macro define to
close, but it makes a big difference for other OSs.

PR: 22805
Obtained from:
Submitted by:	bnicholes, jeff
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101492 13f79535-47bb-0310-9956-ffa450edef68

64e18c30

fix wording of warning for ErrorDocument 401 full-URL · 089fa7da

Jeff Trawick authored Oct 19, 2003

Reviewed by: jim, jwoolley


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101491 13f79535-47bb-0310-9956-ffa450edef68

089fa7da

add a vote · cd0b5477

Jeff Trawick authored Oct 19, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101490 13f79535-47bb-0310-9956-ffa450edef68

cd0b5477

18 Oct, 2003 2 commits

yep · 6ec72ce8

Cliff Woolley authored Oct 18, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101487 13f79535-47bb-0310-9956-ffa450edef68

6ec72ce8

If a request fails and the client will be redirected to another URL · b8059ab0

Jeff Trawick authored Oct 18, 2003

due to ErrorDocument, see if we need to drop the connection after
sending the 302 response. This fixes a problem where Apache treated
the body of the failed request as the next request on a keepalive
connection. The subsequent 501 error sent to the browser prevented
some browsers from fetching the error document.

Reviewed by: roy, jim

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101486 13f79535-47bb-0310-9956-ffa450edef68

b8059ab0