You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by wr...@apache.org on 2012/08/21 21:00:37 UTC
svn commit: r794 [3/3] - /dev/httpd/
Added: dev/httpd/CHANGES_2.2.23
==============================================================================
--- dev/httpd/CHANGES_2.2.23 (added)
+++ dev/httpd/CHANGES_2.2.23 Tue Aug 21 19:00:33 2012
@@ -0,0 +1,83 @@
+ -*- coding: utf-8 -*-
+Changes with Apache 2.2.23
+
+ *) SECURITY: CVE-2012-0883 (cve.mitre.org)
+ envvars: Fix insecure handling of LD_LIBRARY_PATH that could lead to the
+ current working directory to be searched for DSOs. [Stefan Fritsch]
+
+ *) SECURITY: CVE-2012-2687 (cve.mitre.org)
+ mod_negotiation: Escape filenames in variant list to prevent a
+ possible XSS for a site where untrusted users can upload files to
+ a location with MultiViews enabled. [Niels Heinen <heinenn google.com>]
+
+ *) htdbm, htpasswd: Don't crash if crypt() fails (e.g. with FIPS enabled).
+ [Paul Wouters <pwouters redhat.com>, Joe Orton]
+
+ *) mod_ldap: Treat the "server unavailable" condition as a transient
+ error with all LDAP SDKs. [Filip Valder <filip.valder vsb.cz>]
+
+ *) core: Add filesystem paths to access denied / access failed messages.
+ [Eric Covener]
+
+ *) core: Fix error handling in ap_scan_script_header_err_brigade() if there
+ is no EOS bucket in the brigade. PR 48272. [Stefan Fritsch]
+
+ *) core: Prevent "httpd -k restart" from killing server in presence of
+ config error. [Joe Orton]
+
+ *) mod_ssl: when compiled against OpenSSL 1.0.1 or later, allow explicit
+ control of TLSv1.1 and TLSv1.2 through the SSLProtocol directive,
+ adding TLSv1.1 and TLSv1.2 support by default given 'SSLProtocol All'.
+ [Kaspar Brand, William Rowe]
+
+ *) mod_log_config: Fix %{abc}C truncating cookie values at first "=".
+ PR 53104. [Greg Ames]
+
+ *) Unix MPMs: Fix small memory leak in parent process if connect()
+ failed when waking up children. [Joe Orton]
+
+ *) mod_proxy_ajp: Add support for 'ProxyErrorOverride on'. PR 50945.
+ [Peter Pramberger <peter pramberger.at>, Jim Jagielski]
+
+ *) Added SSLProxyMachineCertificateChainFile directive so the proxy client
+ can select the proper client certificate when using a chain and the
+ remote server only lists the root CA as allowed.
+
+ *) mpm_event, mpm_worker: Remain active amidst prevalent child process
+ resource shortages. [Jeff Trawick]
+
+ *) mod_rewrite: Add "AllowAnyURI" option. PR 52774. [Joe Orton]
+
+ *) mod_rewrite: Fix the RewriteEngine directive to work within a
+ location. Previously, once RewriteEngine was switched on globally,
+ it was impossible to switch off. [Graham Leggett]
+
+ *) mod_proxy_balancer: Restore balancing after a failed worker has
+ recovered when using lbmethod_bybusyness. PR 48735. [Jeff Trawick]
+
+ *) mod_dumpio: Properly handle errors from subsequent input filters.
+ PR 52914. [Stefan Fritsch]
+
+ *) mpm_worker: Fix cases where the spawn rate wasn't reduced after child
+ process resource shortages. [Jeff Trawick]
+
+ *) mpm_prefork: Reduce spawn rate after a child process exits due to
+ unexpected poll or accept failure. [Jeff Trawick]
+
+ *) core: Adjust ap_scan_script_header_err*() to prevent mod_cgi and mod_cgid
+ from logging bogus data in case of errors. [Stefan Fritsch]
+
+ *) mod_disk_cache, mod_mem_cache: Decline the opportunity to cache if the
+ response is a 206 Partial Content. This stops a reverse proxied partial
+ response from becoming cached, and then being served in subsequent
+ responses. PR 49113. [Graham Leggett]
+
+ *) configure: Fix usage with external apr and apu in non-default paths
+ and recent gcc versions >= 4.6. [Jean-Frederic Clere]
+
+ *) core: Fix building against PCRE 8.30 by switching from the obsolete
+ pcre_info() to pcre_fullinfo(). PR 52623 [Ruediger Pluem, Rainer Jung]
+
+ *) mod_proxy: Add the forcerecovery balancer parameter that determines if
+ recovery for balancer workers is enforced. [Ruediger Pluem]
+
Added: dev/httpd/httpd-2.2.23.tar.bz2
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.2.23.tar.bz2
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: dev/httpd/httpd-2.2.23.tar.bz2.asc
==============================================================================
--- dev/httpd/httpd-2.2.23.tar.bz2.asc (added)
+++ dev/httpd/httpd-2.2.23.tar.bz2.asc Tue Aug 21 19:00:33 2012
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.10 (GNU/Linux)
+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+=abuJ
+-----END PGP SIGNATURE-----
Added: dev/httpd/httpd-2.2.23.tar.bz2.md5
==============================================================================
--- dev/httpd/httpd-2.2.23.tar.bz2.md5 (added)
+++ dev/httpd/httpd-2.2.23.tar.bz2.md5 Tue Aug 21 19:00:33 2012
@@ -0,0 +1 @@
+ca133de0e4b4b15316990a97186b9993 *httpd-2.2.23.tar.bz2
Added: dev/httpd/httpd-2.2.23.tar.bz2.sha1
==============================================================================
--- dev/httpd/httpd-2.2.23.tar.bz2.sha1 (added)
+++ dev/httpd/httpd-2.2.23.tar.bz2.sha1 Tue Aug 21 19:00:33 2012
@@ -0,0 +1 @@
+2776145201068045d4ed83157a0e2e1c28c4c453 *httpd-2.2.23.tar.bz2
Added: dev/httpd/httpd-2.2.23.tar.gz
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.2.23.tar.gz
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: dev/httpd/httpd-2.2.23.tar.gz.asc
==============================================================================
--- dev/httpd/httpd-2.2.23.tar.gz.asc (added)
+++ dev/httpd/httpd-2.2.23.tar.gz.asc Tue Aug 21 19:00:33 2012
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.10 (GNU/Linux)
+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+=1nMN
+-----END PGP SIGNATURE-----
Added: dev/httpd/httpd-2.2.23.tar.gz.md5
==============================================================================
--- dev/httpd/httpd-2.2.23.tar.gz.md5 (added)
+++ dev/httpd/httpd-2.2.23.tar.gz.md5 Tue Aug 21 19:00:33 2012
@@ -0,0 +1 @@
+77246eaa84a54bb7451f68216333750d *httpd-2.2.23.tar.gz
Added: dev/httpd/httpd-2.2.23.tar.gz.sha1
==============================================================================
--- dev/httpd/httpd-2.2.23.tar.gz.sha1 (added)
+++ dev/httpd/httpd-2.2.23.tar.gz.sha1 Tue Aug 21 19:00:33 2012
@@ -0,0 +1 @@
+966445d503ecb72e3eadf864cd21028d00d441a2 *httpd-2.2.23.tar.gz