You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by ji...@apache.org on 2016/06/30 17:19:57 UTC
svn commit: r14207 - /dev/httpd/
Author: jim
Date: Thu Jun 30 17:19:56 2016
New Revision: 14207
Log:
Make pre-release test tarballs available
Added:
dev/httpd/CHANGES_2.4.23
dev/httpd/httpd-2.4.23-deps.tar.bz2 (with props)
dev/httpd/httpd-2.4.23-deps.tar.bz2.asc (with props)
dev/httpd/httpd-2.4.23-deps.tar.bz2.md5
dev/httpd/httpd-2.4.23-deps.tar.bz2.sha1
dev/httpd/httpd-2.4.23-deps.tar.gz (with props)
dev/httpd/httpd-2.4.23-deps.tar.gz.asc (with props)
dev/httpd/httpd-2.4.23-deps.tar.gz.md5
dev/httpd/httpd-2.4.23-deps.tar.gz.sha1
dev/httpd/httpd-2.4.23.tar.bz2 (with props)
dev/httpd/httpd-2.4.23.tar.bz2.asc (with props)
dev/httpd/httpd-2.4.23.tar.bz2.md5
dev/httpd/httpd-2.4.23.tar.bz2.sha1
dev/httpd/httpd-2.4.23.tar.gz (with props)
dev/httpd/httpd-2.4.23.tar.gz.asc (with props)
dev/httpd/httpd-2.4.23.tar.gz.md5
dev/httpd/httpd-2.4.23.tar.gz.sha1
Removed:
dev/httpd/CHANGES_2.4.22
dev/httpd/httpd-2.4.22-deps.tar.bz2
dev/httpd/httpd-2.4.22-deps.tar.bz2.asc
dev/httpd/httpd-2.4.22-deps.tar.bz2.md5
dev/httpd/httpd-2.4.22-deps.tar.bz2.sha1
dev/httpd/httpd-2.4.22-deps.tar.gz
dev/httpd/httpd-2.4.22-deps.tar.gz.asc
dev/httpd/httpd-2.4.22-deps.tar.gz.md5
dev/httpd/httpd-2.4.22-deps.tar.gz.sha1
dev/httpd/httpd-2.4.22.tar.bz2
dev/httpd/httpd-2.4.22.tar.bz2.asc
dev/httpd/httpd-2.4.22.tar.bz2.md5
dev/httpd/httpd-2.4.22.tar.bz2.sha1
dev/httpd/httpd-2.4.22.tar.gz
dev/httpd/httpd-2.4.22.tar.gz.asc
dev/httpd/httpd-2.4.22.tar.gz.md5
dev/httpd/httpd-2.4.22.tar.gz.sha1
Modified:
dev/httpd/Announcement2.4.html
dev/httpd/Announcement2.4.txt
dev/httpd/CHANGES_2.4
Modified: dev/httpd/Announcement2.4.html
==============================================================================
--- dev/httpd/Announcement2.4.html (original)
+++ dev/httpd/Announcement2.4.html Thu Jun 30 17:19:56 2016
@@ -15,12 +15,12 @@
<img src="../../images/apache_sub.gif" alt="" />
<h1>
- Apache HTTP Server 2.4.22 Released
+ Apache HTTP Server 2.4.23 Released
</h1>
<p>
The Apache Software Foundation and the Apache HTTP Server Project are
pleased to <a href="http://www.apache.org/dist/httpd/Announcement2.4.html">announce</a>
- the release of version 2.4.22 of the Apache
+ the release of version 2.4.23 of the Apache
HTTP Server ("Apache"). This version of Apache is our latest GA
release of the new generation 2.4.x branch of Apache HTTPD and
represents fifteen years of
@@ -29,14 +29,14 @@
and bug fix release.
</p>
<p>
-NOTE: Version 2.4.21 was not released.
+NOTE: Versions 2.4.22 and 2.4.21 were not released.
</p>
<p>
We consider this release to be the best version of Apache available, and
encourage users of all prior versions to upgrade.
</p>
<p>
- Apache HTTP Server 2.4.22 is available for download from:
+ Apache HTTP Server 2.4.23 is available for download from:
</p>
<dl>
<dd><a href="http://httpd.apache.org/download.cgi"
@@ -44,7 +44,7 @@ NOTE: Version 2.4.21 was not released.
</dl>
<p>
Please see the CHANGES_2.4 file, linked from the download page, for a
- full list of changes. A condensed list, CHANGES_2.4.22 includes only
+ full list of changes. A condensed list, CHANGES_2.4.23 includes only
those changes introduced since the prior 2.4 release. A summary of all
of the security vulnerabilities addressed in this and earlier releases
is available:
Modified: dev/httpd/Announcement2.4.txt
==============================================================================
--- dev/httpd/Announcement2.4.txt (original)
+++ dev/httpd/Announcement2.4.txt Thu Jun 30 17:19:56 2016
@@ -1,19 +1,19 @@
- Apache HTTP Server 2.4.22 Released
+ Apache HTTP Server 2.4.23 Released
The Apache Software Foundation and the Apache HTTP Server Project
- are pleased to announce the release of version 2.4.22 of the Apache
+ are pleased to announce the release of version 2.4.23 of the Apache
HTTP Server ("Apache"). This version of Apache is our latest GA
release of the new generation 2.4.x branch of Apache HTTPD and
represents fifteen years of innovation by the project, and is
recommended over all previous releases. This release of Apache is
principally a feature and bug fix release.
- NOTE: Version 2.4.21 was not released.
+ NOTE: Versions 2.4.22 and 2.4.21 were not released.
We consider this release to be the best version of Apache available, and
encourage users of all prior versions to upgrade.
- Apache HTTP Server 2.4.22 is available for download from:
+ Apache HTTP Server 2.4.23 is available for download from:
http://httpd.apache.org/download.cgi
@@ -24,7 +24,7 @@
http://httpd.apache.org/docs/trunk/new_features_2_4.html
Please see the CHANGES_2.4 file, linked from the download page, for a
- full list of changes. A condensed list, CHANGES_2.4.22 includes only
+ full list of changes. A condensed list, CHANGES_2.4.23 includes only
those changes introduced since the prior 2.4 release. A summary of all
of the security vulnerabilities addressed in this and earlier releases
is available:
Modified: dev/httpd/CHANGES_2.4
==============================================================================
--- dev/httpd/CHANGES_2.4 (original)
+++ dev/httpd/CHANGES_2.4 Thu Jun 30 17:19:56 2016
@@ -1,5 +1,15 @@
-*- coding: utf-8 -*-
+Changes with Apache 2.4.23
+
+ *) mod_ssl: reset client-verify state of ssl when aborting renegotiations.
+ [Erki Aring <er...@example.ee>, Stefan Eissing]
+
+ *) mod_sed: Fix 'x' command processing. [Christophe Jaillet]
+
+ *) configure: Fix ./configure edge-case failures around dependencies
+ of mod_proxy_hcheck. [William Rowe, Ruediger Pluem, Jeff Trawick]
+
Changes with Apache 2.4.22
*) mod_http2: fix for request abort when connections drops, introduced in
Added: dev/httpd/CHANGES_2.4.23
==============================================================================
--- dev/httpd/CHANGES_2.4.23 (added)
+++ dev/httpd/CHANGES_2.4.23 Thu Jun 30 17:19:56 2016
@@ -0,0 +1,163 @@
+ -*- coding: utf-8 -*-
+
+Changes with Apache 2.4.23
+
+ *) mod_ssl: reset client-verify state of ssl when aborting renegotiations.
+ [Erki Aring <er...@example.ee>, Stefan Eissing]
+
+ *) mod_sed: Fix 'x' command processing. [Christophe Jaillet]
+
+ *) configure: Fix ./configure edge-case failures around dependencies
+ of mod_proxy_hcheck. [William Rowe, Ruediger Pluem, Jeff Trawick]
+
+Changes with Apache 2.4.22
+
+ *) mod_http2: fix for request abort when connections drops, introduced in
+ 1.5.8
+
+Changes with Apache 2.4.21
+
+ *) mod_http2: more rigid error handling in DATA frame assembly, leading
+ to deterministic connection errors if assembly fails.
+ [Stefan Eissing, Pal Nilsen <https://github.com/maedox>]
+
+ *) abs: Include OPENSSL_Applink when compiling on Windows, to resolve
+ failures under Visual Studio 2015 and other mismatched MSVCRT flavors.
+ PR59630 [Jan Ehrhardt <phpdev ehrhardt.nl>]
+
+ *) mod_ssl: Add "no_crl_for_cert_ok" flag to SSLCARevocationCheck directive
+ to opt-in previous behaviour (2.2) with CRLs verification when checking
+ certificate(s) with no corresponding CRL. [Yann Ylavic]
+
+ *) mpm_event, mpm_worker: Fix computation of MinSpareThreads' lower bound
+ according the number of listeners buckets. [Yann Ylavic]
+
+ *) Add ap_cstr_casecmp[n]() - placeholder of apr_cstr_casecmp[n] functions
+ for case-insensitive C/POSIX-locale token comparison.
+ [Jim Jagielski, William Rowe, Yann Ylavic, Branko Čibej]
+
+ *) mod_userdir: Constify and save a few bytes in the conf pool when
+ parsing the "UserDir" directive. [Christophe Jaillet]
+
+ *) mod_cache: Fix (max-stale with no '=') and enforce (check
+ integers after '=') Cache-Control header parsing.
+ [Christophe Jaillet]
+
+ *) core: Add -DDUMP_INCLUDES configtest option to show the tree
+ of Included configuration files.
+ [Jacob Champion <champion.pxi gmail.com>]
+
+ *) mod_proxy_fcgi: Avoid passing a filename of proxy:fcgi:// as
+ SCRIPT_FILENAME to a FastCGI server. PR59618.
+ [Jacob Champion <champion.pxi gmail.com>]
+
+ *) mod_dav: Add dav_get_provider_name() function to obtain the name
+ of the provider from mod_dav.
+ [Jari Urpalainen <jari.urpalainen nokia.com>]
+
+ *) mod_proxy_http2: properly care for HTTP2 flow control of the frontend
+ connection is HTTP/1.1. [Patch supplied by Evgeny Kotkov]
+
+ *) mod_http2: improved cleanup of connection/streams/tasks to always
+ have deterministic order regardless of event initiating it. Addresses
+ reported crashes due to memory read after free issues.
+ [Stefan Eissing]
+
+ *) mod_ssl: Correct the interaction between SSLProxyCheckPeerCN and newer
+ SSLProxyCheckPeerName directives since release 2.4.5, such that disabling
+ either disables both, and that enabling either triggers the new, more
+ comprehensive SSLProxyCheckPeerName behavior. Only a single configuration
+ remains to enable the legacy behavior, which is to explicitly disable
+ SSLProxyCheckPeerName, and enable SSLProxyCheckPeerCN. [William Rowe]
+
+ *) mod_include: add the <!--#comment ...> syntax in order to include comments
+ in a SSI file. [Christophe Jaillet based on a suggestion from Rob]
+
+ *) mod_http2: improved event handling for suspended streams, responses
+ and window updates. [Stefan Eissing]
+
+ *) mod_proxy_hcheck: Provide for dynamic background health
+ checks on reverse proxies associated with BalancerMember
+ workers. [Jim Jagielski]
+
+ *) mod_http2: Fix async write issue that led to selection of wrong timeout
+ vs. keepalive timeout selection for idle sessions. [Stefan Eissing]
+
+ *) mod_http2: checking LimitRequestLine, LimitRequestFields and
+ LimitRequestFieldSize configurated values for incoming streams. Returning
+ HTTP status 431 for too long/many headers fields and 414 for a too long
+ pseudo header. [Stefan Eissing]
+
+ *) mod_http2: tracking conn_rec->current_thread on slave connections, so
+ that mod_lua finds the correct one. Fixes PR 59542. [Stefan Eissing]
+
+ *) mod_proxy_http2: new experimental http2 proxy module for h2: and h2c: proxy
+ urls. Part of the httpd mod_proxy framework, common settings apply.
+ Requests from the same HTTP/2 frontend connection against the same backend
+ are aggregated on a single connection.
+ [Stefan Eissing]
+
+ *) mod_http2: slave connections have conn_rec->aborted flag set when a stream
+ has been reset by the client. [Stefan Eissing]
+
+ *) mod_http2: merge of some 2.4.x adaptions re filters on slave connections.
+ Small fixes in bucket beams when forwarding file buckets. Output handling
+ on master connection uses less FLUSH and passes automatically when more
+ than half of H2StreamMaxMemSize bytes have accumulated.
+ Workaround for http: when forwarding partial file buckets to keep the
+ output filter from closing these too early. [Stefan Eissing]
+
+ *) mod_http2: elimination of fixed master connection buffer for TLS
+ connections. New scratch bucket handling optimized for TLS write sizes.
+ File bucket data read directly into scratch buffers, avoiding one
+ copy. Non-TLS connections continue to pass buckets unchanged to the core
+ filters to allow sendfile() usage. [Stefan Eissing]
+
+ *) mod_http2/mod_proxy_http2: h2_request.c is no longer shared between these
+ modules. This simplifies building on platforms such as Windows, as module
+ reference used in logging is now clear. [Stefan Eissing]
+
+ *) Scoreboard: Fix a regression in 2.4.20 that causes wrong request data
+ to be displayed on the status page. PR 59333. [Yann Ylavic, William Rowe]
+
+ *) mod_http2: fixed a bug that caused mod_proxy_http2 to be called for window
+ updates on requests it had already reported done. Added synchronization
+ on early connection/stream close that lets ongoing requests safely drain
+ their input filters.
+ [Stefan Eissing]
+
+ *) mod_http2: scoreboard updates that summarize the h2 session (and replace
+ the last request information) will only happen when the session is idle or
+ in shutdown/done phase. [Stefan Eissing]
+
+ *) mod_http2: new "bucket beam" technology to transport buckets across
+ threads without buffer copy. Delaying response start until flush or
+ enough body data has been accumulated. Overall significantly smaller
+ memory footprint. [Stefan Eissing]
+
+ *) core: New CGIVar directive can configure REQUEST_URI to represent the
+ current URI being processed instead of always the original request.
+ [Jeff Trawick]
+
+ *) scoreboard/status: Restore behavior of showing workers' previous Client,
+ VHost and Request values when idle, like in 2.4.18 and earlier.
+
+ *) mod_http2: r->protocol changed to "HTTP/2.0" (was "HTTP/2") as this will
+ give expected syntax in CGI's SERVER_PROTOCOL is more compatible with
+ existing major/minor handling. Fixes PR 59313.
+
+ *) mod_http2: disabling mmap for file buckets transport due to segmenation
+ faults when files change on the fly.
+
+
+ [Apache 2.3.0-dev includes those bug fixes and changes with the
+ Apache 2.2.xx tree as documented, and except as noted, below.]
+
+Changes with Apache 2.2.x and later:
+
+ *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
+
+Changes with Apache 2.0.x and later:
+
+ *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
+
Added: dev/httpd/httpd-2.4.23-deps.tar.bz2
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.4.23-deps.tar.bz2
------------------------------------------------------------------------------
svn:mime-type = application/x-bzip2
Added: dev/httpd/httpd-2.4.23-deps.tar.bz2.asc
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.4.23-deps.tar.bz2.asc
------------------------------------------------------------------------------
svn:mime-type = application/pgp-signature
Added: dev/httpd/httpd-2.4.23-deps.tar.bz2.md5
==============================================================================
--- dev/httpd/httpd-2.4.23-deps.tar.bz2.md5 (added)
+++ dev/httpd/httpd-2.4.23-deps.tar.bz2.md5 Thu Jun 30 17:19:56 2016
@@ -0,0 +1 @@
+5f4a8fa95064686083c8c736954836ea *httpd-2.4.23-deps.tar.bz2
Added: dev/httpd/httpd-2.4.23-deps.tar.bz2.sha1
==============================================================================
--- dev/httpd/httpd-2.4.23-deps.tar.bz2.sha1 (added)
+++ dev/httpd/httpd-2.4.23-deps.tar.bz2.sha1 Thu Jun 30 17:19:56 2016
@@ -0,0 +1 @@
+8762320f0c732cc330830e4525f9113c1b0e146e *httpd-2.4.23-deps.tar.bz2
Added: dev/httpd/httpd-2.4.23-deps.tar.gz
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.4.23-deps.tar.gz
------------------------------------------------------------------------------
svn:mime-type = application/x-gzip
Added: dev/httpd/httpd-2.4.23-deps.tar.gz.asc
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.4.23-deps.tar.gz.asc
------------------------------------------------------------------------------
svn:mime-type = application/pgp-signature
Added: dev/httpd/httpd-2.4.23-deps.tar.gz.md5
==============================================================================
--- dev/httpd/httpd-2.4.23-deps.tar.gz.md5 (added)
+++ dev/httpd/httpd-2.4.23-deps.tar.gz.md5 Thu Jun 30 17:19:56 2016
@@ -0,0 +1 @@
+e413ca9d04648a2e55601506e370f2c5 *httpd-2.4.23-deps.tar.gz
Added: dev/httpd/httpd-2.4.23-deps.tar.gz.sha1
==============================================================================
--- dev/httpd/httpd-2.4.23-deps.tar.gz.sha1 (added)
+++ dev/httpd/httpd-2.4.23-deps.tar.gz.sha1 Thu Jun 30 17:19:56 2016
@@ -0,0 +1 @@
+af2f5b922d3cf7f01c04c8ca356eda0ffd90cd3a *httpd-2.4.23-deps.tar.gz
Added: dev/httpd/httpd-2.4.23.tar.bz2
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.4.23.tar.bz2
------------------------------------------------------------------------------
svn:mime-type = application/x-bzip2
Added: dev/httpd/httpd-2.4.23.tar.bz2.asc
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.4.23.tar.bz2.asc
------------------------------------------------------------------------------
svn:mime-type = application/pgp-signature
Added: dev/httpd/httpd-2.4.23.tar.bz2.md5
==============================================================================
--- dev/httpd/httpd-2.4.23.tar.bz2.md5 (added)
+++ dev/httpd/httpd-2.4.23.tar.bz2.md5 Thu Jun 30 17:19:56 2016
@@ -0,0 +1 @@
+04f19c60e810c028f5240a062668a688 *httpd-2.4.23.tar.bz2
Added: dev/httpd/httpd-2.4.23.tar.bz2.sha1
==============================================================================
--- dev/httpd/httpd-2.4.23.tar.bz2.sha1 (added)
+++ dev/httpd/httpd-2.4.23.tar.bz2.sha1 Thu Jun 30 17:19:56 2016
@@ -0,0 +1 @@
+5101be34ac4a509b245adb70a56690a84fcc4e7f *httpd-2.4.23.tar.bz2
Added: dev/httpd/httpd-2.4.23.tar.gz
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.4.23.tar.gz
------------------------------------------------------------------------------
svn:mime-type = application/x-gzip
Added: dev/httpd/httpd-2.4.23.tar.gz.asc
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.4.23.tar.gz.asc
------------------------------------------------------------------------------
svn:mime-type = application/pgp-signature
Added: dev/httpd/httpd-2.4.23.tar.gz.md5
==============================================================================
--- dev/httpd/httpd-2.4.23.tar.gz.md5 (added)
+++ dev/httpd/httpd-2.4.23.tar.gz.md5 Thu Jun 30 17:19:56 2016
@@ -0,0 +1 @@
+b711ea7d8b75dc8bfdf5a5d7e5253088 *httpd-2.4.23.tar.gz
Added: dev/httpd/httpd-2.4.23.tar.gz.sha1
==============================================================================
--- dev/httpd/httpd-2.4.23.tar.gz.sha1 (added)
+++ dev/httpd/httpd-2.4.23.tar.gz.sha1 Thu Jun 30 17:19:56 2016
@@ -0,0 +1 @@
+91898e6a7c010a5cd35855a67d1ec59914cbeee8 *httpd-2.4.23.tar.gz