You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by dr...@apache.org on 2018/10/18 14:35:00 UTC
svn commit: r30130 - /dev/httpd/
Author: druggeri
Date: Thu Oct 18 14:35:00 2018
New Revision: 30130
Log:
Add 2.4.37 files
Added:
dev/httpd/CHANGES_2.4.37
dev/httpd/httpd-2.4.37-deps.tar.bz2 (with props)
dev/httpd/httpd-2.4.37-deps.tar.bz2.asc
dev/httpd/httpd-2.4.37-deps.tar.bz2.md5
dev/httpd/httpd-2.4.37-deps.tar.bz2.sha1
dev/httpd/httpd-2.4.37-deps.tar.bz2.sha256
dev/httpd/httpd-2.4.37-deps.tar.gz (with props)
dev/httpd/httpd-2.4.37-deps.tar.gz.asc
dev/httpd/httpd-2.4.37-deps.tar.gz.md5
dev/httpd/httpd-2.4.37-deps.tar.gz.sha1
dev/httpd/httpd-2.4.37-deps.tar.gz.sha256
dev/httpd/httpd-2.4.37.tar.bz2 (with props)
dev/httpd/httpd-2.4.37.tar.bz2.asc
dev/httpd/httpd-2.4.37.tar.bz2.md5
dev/httpd/httpd-2.4.37.tar.bz2.sha1
dev/httpd/httpd-2.4.37.tar.bz2.sha256
dev/httpd/httpd-2.4.37.tar.gz (with props)
dev/httpd/httpd-2.4.37.tar.gz.asc
dev/httpd/httpd-2.4.37.tar.gz.md5
dev/httpd/httpd-2.4.37.tar.gz.sha1
dev/httpd/httpd-2.4.37.tar.gz.sha256
Removed:
dev/httpd/CHANGES_2.4.36
Modified:
dev/httpd/Announcement2.4.html
dev/httpd/Announcement2.4.txt
Modified: dev/httpd/Announcement2.4.html
==============================================================================
--- dev/httpd/Announcement2.4.html (original)
+++ dev/httpd/Announcement2.4.html Thu Oct 18 14:35:00 2018
@@ -49,7 +49,7 @@
<div class="banner"></div>
<h1>
- Apache HTTP Server 2.4.36 Released
+ Apache HTTP Server 2.4.37 Released
</h1>
<p>
September 21, 2018
@@ -57,7 +57,7 @@
<p>
The Apache Software Foundation and the Apache HTTP Server Project are
pleased to <a href="https://www.apache.org/dist/httpd/Announcement2.4.html">announce</a>
- the release of version 2.4.36 of the Apache
+ the release of version 2.4.37 of the Apache
HTTP Server ("Apache"). This version of Apache is our latest GA
release of the new generation 2.4.x branch of Apache HTTPD and
represents fifteen years of innovation by the project, and is
@@ -69,7 +69,7 @@
encourage users of all prior versions to upgrade.
</p>
<p>
- Apache HTTP Server 2.4.36 is available for download from:
+ Apache HTTP Server 2.4.37 is available for download from:
</p>
<dl>
<dd><a href="https://httpd.apache.org/download.cgi"
@@ -77,7 +77,7 @@
</dl>
<p>
Please see the <a href="./CHANGES_2.4">CHANGES_2.4</a> file, linked from the download page, for a
- full list of changes. A condensed list, <a href="./CHANGES_2.4.36">CHANGES_2.4.36</a> includes only
+ full list of changes. A condensed list, <a href="./CHANGES_2.4.37">CHANGES_2.4.37</a> includes only
those changes introduced since the prior 2.4 release. A summary of all
of the security vulnerabilities addressed in this and earlier releases
is available:
Modified: dev/httpd/Announcement2.4.txt
==============================================================================
--- dev/httpd/Announcement2.4.txt (original)
+++ dev/httpd/Announcement2.4.txt Thu Oct 18 14:35:00 2018
@@ -1,9 +1,9 @@
- Apache HTTP Server 2.4.36 Released
+ Apache HTTP Server 2.4.37 Released
September 21, 2018
The Apache Software Foundation and the Apache HTTP Server Project
- are pleased to announce the release of version 2.4.36 of the Apache
+ are pleased to announce the release of version 2.4.37 of the Apache
HTTP Server ("Apache"). This version of Apache is our latest GA
release of the new generation 2.4.x branch of Apache HTTPD and
represents fifteen years of innovation by the project, and is
@@ -13,7 +13,7 @@
We consider this release to be the best version of Apache available, and
encourage users of all prior versions to upgrade.
- Apache HTTP Server 2.4.36 is available for download from:
+ Apache HTTP Server 2.4.37 is available for download from:
http://httpd.apache.org/download.cgi
@@ -24,7 +24,7 @@
http://httpd.apache.org/docs/trunk/new_features_2_4.html
Please see the CHANGES_2.4 file, linked from the download page, for a
- full list of changes. A condensed list, CHANGES_2.4.36 includes only
+ full list of changes. A condensed list, CHANGES_2.4.37 includes only
those changes introduced since the prior 2.4 release. A summary of all
of the security vulnerabilities addressed in this and earlier releases
is available:
Added: dev/httpd/CHANGES_2.4.37
==============================================================================
--- dev/httpd/CHANGES_2.4.37 (added)
+++ dev/httpd/CHANGES_2.4.37 Thu Oct 18 14:35:00 2018
@@ -0,0 +1,75 @@
+ -*- coding: utf-8 -*-
+Changes with Apache 2.4.37
+
+ *) mod_ssl: Fix HTTP/2 failures when using OpenSSL 1.1.1. [Rainer Jung]
+
+ *) mod_ssl: Fix crash during SSL renegotiation with OptRenegotiate set,
+ when client certificates are available from the original handshake
+ but were originally not verified and should get verified now.
+ This is a regression in 2.4.36 (unreleased). [Ruediger Pluem]
+
+ *) mod_ssl: Correctly merge configurations that have client certificates set
+ by SSLProxyMachineCertificate{File|Path}. [Ruediger Pluem]
+
+Changes with Apache 2.4.36
+
+ *) mod_brotli, mod_deflate: Restore the separate handling of 304 Not Modified
+ responses. Regression introduced in 2.4.35.
+
+ *) mod_proxy_scgi, mod_proxy_uwsgi: improve error handling when sending the
+ body of the response. [Jim Jagielski]
+
+ *) mod_http2: adding defensive code for stream EOS handling, in case the request handler
+ missed to signal it the normal way (eos buckets). Addresses github issues
+ https://github.com/icing/mod_h2/issues/164, https://github.com/icing/mod_h2/issues/167
+ and https://github.com/icing/mod_h2/issues/170. [Stefan Eissing]
+
+ *) ab: Add client certificate support. [Graham Leggett]
+
+ *) ab: Disable printing temp key for OpenSSL before
+ version 1.0.2. SSL_get_server_tmp_key is not available
+ there. [Rainer Jung]
+
+ *) mod_ssl: Fix a regression that the configuration settings for verify mode
+ and verify depth were taken from the frontend connection in case of
+ connections by the proxy to the backend. PR 62769. [Ruediger Pluem]
+
+ *) MPMs: Initialize all runtime/asynchronous objects on a dedicated pool and
+ before signals handling to avoid lifetime issues on restart or shutdown.
+ PR 62658. [Yann Ylavic]
+
+ *) mod_ssl: Add support for OpenSSL 1.1.1 and TLSv1.3. TLSv1.3 has
+ behavioural changes compared to v1.2 and earlier; client and
+ configuration changes should be expected. SSLCipherSuite is
+ enhanced for TLSv1.3 ciphers, but applies at vhost level only.
+ [Stefan Eissing, Yann Ylavic, Ruediger Pluem, Joe Orton]
+
+ *) mod_auth_basic: Be less tolerant when parsing the credencial. Only spaces
+ should be accepted after the authorization scheme. \t are also tolerated.
+ [Christophe Jaillet]
+
+ *) mod_proxy_hcheck: Fix issues with interval determination. PR 62318
+ [Jim Jagielski]
+
+ *) mod_proxy_hcheck: Fix issues with TCP health checks. PR 61499
+ [Dominik Stillhard <dominik.stillhard united-security-providers.ch>]
+
+ *) mod_proxy_hcheck: take balancer's SSLProxy* directives into account.
+ [Jim Jagielski]
+
+ *) mod_status, mod_echo: Fix the display of client addresses.
+ They were truncated to 31 characters which is not enough for IPv6 addresses.
+ This is done by deprecating the use of the 'client' field and using
+ the new 'client64' field in worker_score.
+ PR 54848 [Bernhard Schmidt <berni birkenwald de>, Jim Jagielski]
+
+ [Apache 2.3.0-dev includes those bug fixes and changes with the
+ Apache 2.2.xx tree as documented, and except as noted, below.]
+
+Changes with Apache 2.2.x and later:
+
+ *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
+
+Changes with Apache 2.0.x and later:
+
+ *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
Added: dev/httpd/httpd-2.4.37-deps.tar.bz2
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.4.37-deps.tar.bz2
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: dev/httpd/httpd-2.4.37-deps.tar.bz2.asc
==============================================================================
--- dev/httpd/httpd-2.4.37-deps.tar.bz2.asc (added)
+++ dev/httpd/httpd-2.4.37-deps.tar.bz2.asc Thu Oct 18 14:35:00 2018
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iQEcBAABCAAGBQJbyJn1AAoJEJleNSIa2E3/CV8H/3Aidgw0dpn7z2ROOZsplER/
+gQsC3YDeiD5BYhhfO2JlrVwsclATI8SdcrTVt48SxNYc/mFTPzLuSyxOTJ9mi9JF
+FmSTaU3gTGIrKmDMLY6JT6NQO36s12fDnd/bVW/Kg9GonlBuoU7q16OtDeWct85o
+R0O7ej7U9KRWGHv/s0adGGMzv+PttIJBoxByyzXI+EULaPF/dccqAJGbAQG3+LHb
+4RCMFBHB1HmZdxO/rSOpaFMGLpP+MTlq5dsjzkRnDKdKgh8Yb0BEsS+ncQwpOlao
++X/WNXIKz0Vlcx7M8Ee3PpjtFFtZG3wf/eiz4WlyPXsLioAl35quwNFqSfxE9CQ=
+=TNg9
+-----END PGP SIGNATURE-----
Added: dev/httpd/httpd-2.4.37-deps.tar.bz2.md5
==============================================================================
--- dev/httpd/httpd-2.4.37-deps.tar.bz2.md5 (added)
+++ dev/httpd/httpd-2.4.37-deps.tar.bz2.md5 Thu Oct 18 14:35:00 2018
@@ -0,0 +1 @@
+c8dbe142d3cd2f1f8149f89366f1346c *httpd-2.4.37-deps.tar.bz2
Added: dev/httpd/httpd-2.4.37-deps.tar.bz2.sha1
==============================================================================
--- dev/httpd/httpd-2.4.37-deps.tar.bz2.sha1 (added)
+++ dev/httpd/httpd-2.4.37-deps.tar.bz2.sha1 Thu Oct 18 14:35:00 2018
@@ -0,0 +1 @@
+133ada31c52f90cc50497503ec1bd192afaa65b7 *httpd-2.4.37-deps.tar.bz2
Added: dev/httpd/httpd-2.4.37-deps.tar.bz2.sha256
==============================================================================
--- dev/httpd/httpd-2.4.37-deps.tar.bz2.sha256 (added)
+++ dev/httpd/httpd-2.4.37-deps.tar.bz2.sha256 Thu Oct 18 14:35:00 2018
@@ -0,0 +1 @@
+6365205ae06de52f7331163e76ec9aeae602b96b8520538a80ac5ad62a89ef83 *httpd-2.4.37-deps.tar.bz2
Added: dev/httpd/httpd-2.4.37-deps.tar.gz
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.4.37-deps.tar.gz
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: dev/httpd/httpd-2.4.37-deps.tar.gz.asc
==============================================================================
--- dev/httpd/httpd-2.4.37-deps.tar.gz.asc (added)
+++ dev/httpd/httpd-2.4.37-deps.tar.gz.asc Thu Oct 18 14:35:00 2018
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iQEcBAABCAAGBQJbyJnzAAoJEJleNSIa2E3/bR4H/RezTQDb3TWR/UHpn6tU04DZ
+xYs8x/hnLJpgWpl/7uz3jh5fxKz4mgbSFxeAN7PI+6RHk4gsiZb9GlkcAwOH2FhL
+3/Akj/WP9n2U8RcfMJx1R6fdudSVwXtbMNxetBpq+ZzOfm65ETaRD2aJZSzK0q0I
+hTsqIyJNjzuo6t+z5ZiOA+MSmPrWKnq+6TgoqSF0BqsHkMTMgcqMkOLIq2h0L105
+fXd3vRyLBUyV+VNadxyV0+eQGSA6wmUVXpHdjiZ9XgBxujzGDe50F1cSGuKCHgLa
+InhOsao1p7Syo8r4YuORK8H3gTkcMy/9QrawUUwjJ3i8c7p1KHoLToL0uHIRcEw=
+=6LWg
+-----END PGP SIGNATURE-----
Added: dev/httpd/httpd-2.4.37-deps.tar.gz.md5
==============================================================================
--- dev/httpd/httpd-2.4.37-deps.tar.gz.md5 (added)
+++ dev/httpd/httpd-2.4.37-deps.tar.gz.md5 Thu Oct 18 14:35:00 2018
@@ -0,0 +1 @@
+7ed2cc2a6e3ac283dbada853b4aab85d *httpd-2.4.37-deps.tar.gz
Added: dev/httpd/httpd-2.4.37-deps.tar.gz.sha1
==============================================================================
--- dev/httpd/httpd-2.4.37-deps.tar.gz.sha1 (added)
+++ dev/httpd/httpd-2.4.37-deps.tar.gz.sha1 Thu Oct 18 14:35:00 2018
@@ -0,0 +1 @@
+11661133342eb9c7844402f2fe58c3f26653659f *httpd-2.4.37-deps.tar.gz
Added: dev/httpd/httpd-2.4.37-deps.tar.gz.sha256
==============================================================================
--- dev/httpd/httpd-2.4.37-deps.tar.gz.sha256 (added)
+++ dev/httpd/httpd-2.4.37-deps.tar.gz.sha256 Thu Oct 18 14:35:00 2018
@@ -0,0 +1 @@
+2425fc475f76642978ea24205f9d09fc97a11988f213455044a855ba487f7f1b *httpd-2.4.37-deps.tar.gz
Added: dev/httpd/httpd-2.4.37.tar.bz2
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.4.37.tar.bz2
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: dev/httpd/httpd-2.4.37.tar.bz2.asc
==============================================================================
--- dev/httpd/httpd-2.4.37.tar.bz2.asc (added)
+++ dev/httpd/httpd-2.4.37.tar.bz2.asc Thu Oct 18 14:35:00 2018
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iQEcBAABCAAGBQJbyJnxAAoJEJleNSIa2E3/gXYH/jwUT8Tdc6oFwIWe0r9oK97T
+KF+kbU6LoqezVJ8Fk5a0/JVPqgqQkaoipBAe7udtYXRyWr4+8ouSv6JEWH2K9Htr
+BoeDCTALBqO5TmtBqUtpSqy9jRVNRCDfrGS2Th6hEMZXtOMsumBaZrG0xn03jEdc
+ULXwIOPzNpp40E4GhALFDHR+qRLCa/+FDRjgggDSlhRwVC9Emz0wsD0SF0RmpHlM
+l9BoeKLu1ohvgeJrcLQKCsNCTEdEIJcXp8ZnfWiuHs1PY9TEO7z2YQPw2FjAsyic
+BSBC8HkTY8fHCblg5VP7UCfN9w0EDJIyQ7pE2sEWAhxHNsRKeXn0Tjgt8aAYz2g=
+=uhMF
+-----END PGP SIGNATURE-----
Added: dev/httpd/httpd-2.4.37.tar.bz2.md5
==============================================================================
--- dev/httpd/httpd-2.4.37.tar.bz2.md5 (added)
+++ dev/httpd/httpd-2.4.37.tar.bz2.md5 Thu Oct 18 14:35:00 2018
@@ -0,0 +1 @@
+6a36e742180ee74bff97b28eee90c3f7 *httpd-2.4.37.tar.bz2
Added: dev/httpd/httpd-2.4.37.tar.bz2.sha1
==============================================================================
--- dev/httpd/httpd-2.4.37.tar.bz2.sha1 (added)
+++ dev/httpd/httpd-2.4.37.tar.bz2.sha1 Thu Oct 18 14:35:00 2018
@@ -0,0 +1 @@
+4a38471de821288b0300148016f2b03dfee8adf2 *httpd-2.4.37.tar.bz2
Added: dev/httpd/httpd-2.4.37.tar.bz2.sha256
==============================================================================
--- dev/httpd/httpd-2.4.37.tar.bz2.sha256 (added)
+++ dev/httpd/httpd-2.4.37.tar.bz2.sha256 Thu Oct 18 14:35:00 2018
@@ -0,0 +1 @@
+3498dc5c6772fac2eb7307dc7963122ffe243b5e806e0be4fb51974ff759d726 *httpd-2.4.37.tar.bz2
Added: dev/httpd/httpd-2.4.37.tar.gz
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.4.37.tar.gz
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: dev/httpd/httpd-2.4.37.tar.gz.asc
==============================================================================
--- dev/httpd/httpd-2.4.37.tar.gz.asc (added)
+++ dev/httpd/httpd-2.4.37.tar.gz.asc Thu Oct 18 14:35:00 2018
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iQEcBAABCAAGBQJbyJnwAAoJEJleNSIa2E3/DJoIAIdNCaQt05Xaw266HMqm5J7I
+p2PkvW5xWYWO6HWJJOSSM+0NL8La/mL0Zm2Lpm+H0JBnQ8TqsUx1BWbrKER5vvpj
+4GzTbuxjn9OBms75Z9G1aoJ5hWmk3ZNZLzH7hiWdd8f2YnpwiHfhSkRqMhedL4+B
+yN0RK0k3ZNk6Q7Y9wR1bPXpc5NWAufGOsiR5WcTzM6PA3F8HyrcFTAdoIS3Tu+S9
+0Be83xIThH8v/plw2WSCXT3W+hb6BJNXx+uZo4UKcc1ipM7vPdewrtt6M/yJU/NG
+9U5vxlbX88OOt/WP0sgJA9JZJibHYR2+7vOHUfse2iXy/LLs4hjikS04LNFsrdE=
+=P7Ho
+-----END PGP SIGNATURE-----
Added: dev/httpd/httpd-2.4.37.tar.gz.md5
==============================================================================
--- dev/httpd/httpd-2.4.37.tar.gz.md5 (added)
+++ dev/httpd/httpd-2.4.37.tar.gz.md5 Thu Oct 18 14:35:00 2018
@@ -0,0 +1 @@
+9ca56d8636944a4989de5af608714086 *httpd-2.4.37.tar.gz
Added: dev/httpd/httpd-2.4.37.tar.gz.sha1
==============================================================================
--- dev/httpd/httpd-2.4.37.tar.gz.sha1 (added)
+++ dev/httpd/httpd-2.4.37.tar.gz.sha1 Thu Oct 18 14:35:00 2018
@@ -0,0 +1 @@
+b0521606d1df54bb425adcdecf6348f126aa352c *httpd-2.4.37.tar.gz
Added: dev/httpd/httpd-2.4.37.tar.gz.sha256
==============================================================================
--- dev/httpd/httpd-2.4.37.tar.gz.sha256 (added)
+++ dev/httpd/httpd-2.4.37.tar.gz.sha256 Thu Oct 18 14:35:00 2018
@@ -0,0 +1 @@
+aa97a834a32d51974be8d8a013b561e28d327387cb1da2c3c2762acd0146aabd *httpd-2.4.37.tar.gz