You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by ji...@apache.org on 2012/02/13 14:46:17 UTC
svn commit: r486 [3/3] - /dev/httpd/
Added: dev/httpd/CHANGES_2.4.1
==============================================================================
--- dev/httpd/CHANGES_2.4.1 (added)
+++ dev/httpd/CHANGES_2.4.1 Mon Feb 13 13:46:13 2012
@@ -0,0 +1,80 @@
+ -*- coding: utf-8 -*-
+Changes with Apache 2.4.1
+
+ *) SECURITY: CVE-2012-0053 (cve.mitre.org)
+ Fix an issue in error responses that could expose "httpOnly" cookies
+ when no custom ErrorDocument is specified for status code 400.
+ [Eric Covener]
+
+ *) mod_proxy_balancer: Fix crash on Windows. PR 52402 [Mladen Turk]
+
+ *) core: Check during configtest that the directories for error logs exist.
+ PR 29941 [Stefan Fritsch]
+
+ *) Core configuration: add AllowOverride option to treat syntax
+ errors in .htaccess as non-fatal. PR 52439 [Nick Kew, Jim Jagielski]
+
+ *) core: Fix memory consumption in core output filter with streaming
+ bucket types like CGI or PIPE. [Joe Orton, Stefan Fritsch]
+
+ *) configure: Disable modules at configure time if a prerequisite module
+ is not enabled. PR 52487. [Stefan Fritsch]
+
+ *) Rewrite and proxy now decline what they don't support rather
+ than fail the request. [Joe Orton]
+
+ *) Fix building against external apr plus ap-util if apr is not installed
+ in a system default path. [Rainer Jung]
+
+ *) Doxygen fixes and improvements. [Joe Orton, Igor GaliÄ]
+
+ *) core: Fix building against PCRE 8.30 by switching from the obsolete
+ pcre_info() to pcre_fullinfo(). PR 52623 [Ruediger Pluem, Rainer Jung]
+
+Changes with Apache 2.4.0
+
+ *) SECURITY: CVE-2012-0031 (cve.mitre.org)
+ Fix scoreboard issue which could allow an unprivileged child process
+ could cause the parent to crash at shutdown rather than terminate
+ cleanly. [Joe Orton]
+
+ *) mod_ssl: Fix compilation with xlc on AIX. PR 52394. [Stefan Fritsch]
+
+ *) SECURITY: CVE-2012-0021 (cve.mitre.org)
+ mod_log_config: Fix segfault (crash) when the '%{cookiename}C' log format
+ string is in use and a client sends a nameless, valueless cookie, causing
+ a denial of service. The issue existed since version 2.2.17 and 2.3.3.
+ PR 52256. [Rainer Canavan <rainer-apache 7val com>]
+
+ *) mod_ssl: when compiled against OpenSSL 1.0.1 or later, allow explicit
+ control of TLSv1.1 and TLSv1.2 through the SSLProtocol directive.
+ [Kaspar Brand]
+
+ *) mod_ssl: set OPENSSL_NO_SSL_INTERN when compiling against OpenSSL 1.0.1
+ or later, to improve binary compatibility with future OpenSSL releases.
+ [Kaspar Brand]
+
+ *) mod_mime: Don't arbitrarily bypass AddOutputFilter during a ProxyPass,
+ but then allow AddOutputFilter during a RewriteRule [P]. Make mod_mime
+ behave identically in both cases. PR52342. [Graham Leggett]
+
+ *) Move ab, logresolve, httxt2dbm and apxs to bin from sbin, along with
+ corresponding man pages. [Graham Leggett]
+
+ *) Distinguish properly between the bindir and sbindir directories when
+ installing binaries. Previously all binaries were silently installed to
+ sbindir, whether they were system administration commands or not.
+ [Graham Leggett]
+
+
+ [Apache 2.3.0-dev includes those bug fixes and changes with the
+ Apache 2.2.xx tree as documented, and except as noted, below.]
+
+Changes with Apache 2.2.x and later:
+
+ *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
+
+Changes with Apache 2.0.x and later:
+
+ *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
+
Added: dev/httpd/httpd-2.4.1-deps.tar.bz2
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.4.1-deps.tar.bz2
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: dev/httpd/httpd-2.4.1-deps.tar.bz2.asc
==============================================================================
--- dev/httpd/httpd-2.4.1-deps.tar.bz2.asc (added)
+++ dev/httpd/httpd-2.4.1-deps.tar.bz2.asc Mon Feb 13 13:46:13 2012
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.11 (Darwin)
+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+=+SXJ
+-----END PGP SIGNATURE-----
Added: dev/httpd/httpd-2.4.1-deps.tar.bz2.md5
==============================================================================
--- dev/httpd/httpd-2.4.1-deps.tar.bz2.md5 (added)
+++ dev/httpd/httpd-2.4.1-deps.tar.bz2.md5 Mon Feb 13 13:46:13 2012
@@ -0,0 +1 @@
+a09a5f531d4bcb653f6c2e482f600913 *httpd-2.4.1-deps.tar.bz2
Added: dev/httpd/httpd-2.4.1-deps.tar.bz2.sha1
==============================================================================
--- dev/httpd/httpd-2.4.1-deps.tar.bz2.sha1 (added)
+++ dev/httpd/httpd-2.4.1-deps.tar.bz2.sha1 Mon Feb 13 13:46:13 2012
@@ -0,0 +1 @@
+83a8504f6abd0d8240b3c32bc0c11513bf318b2f *httpd-2.4.1-deps.tar.bz2
Added: dev/httpd/httpd-2.4.1-deps.tar.gz
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.4.1-deps.tar.gz
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: dev/httpd/httpd-2.4.1-deps.tar.gz.asc
==============================================================================
--- dev/httpd/httpd-2.4.1-deps.tar.gz.asc (added)
+++ dev/httpd/httpd-2.4.1-deps.tar.gz.asc Mon Feb 13 13:46:13 2012
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.11 (Darwin)
+
+iQIVAwUATzkTADTqduZ5FIWoAQqxKA/+PTUpgZdTWJakYBXBw+PvDB7jwPUGl8NR
+N0nHmITf0hy4RLwKPFQUduB5rfiqjJft/GW5BJ9qpPJ17t4Tvw+oqDKSaLMMmSfl
+l0V1Tv65GMZVXA/mwS+l0RhOMDnBgmMW6v7MCtYPWmAiWr/O1nSF6fdRl08hw0Qh
+K5zCbjjofHc4eeY4MrsMKpp7lRTcFfjixefEq6u0CMg73SKp3PnXcXjKk8WHnkAY
+7ye0ysvtrbDh1K+Fpjfth3KvKQ4qxn1h/Qty+KEjy+iuzSrcZHGXZfoImgIQJCXJ
+zgm1ipA6nJlyZ/NVDXHee1+gFbzxbWVZS8qCVrhp4mwh0OuofaHhnBjWkfP2SPTD
+E4TnsA2JhA5IQyH6JJHkWvhI7zdUQgjMcvhAWnPqYh84ki0ewtMESa3kmlruB6ib
+ickGCdiGHa2zIhg2iAs9bvr8rZGaTz4iDNv9SD2EGkCZqG8gGhbng2DtvFPqkbER
+sdxfdaywi06ehaRQ0eMN1YCzLh47+ERiKs72GQ4zF14w4LvQqx+0NqT6QEvA43Ut
+aJ61EZecACjKaCvXRYxvauSKzPA2FTbrZcerVCmkaPpMnxzT2cdpnM3tSCkZGx5j
+V2R0xMCt2JQ1M+Uebu307VKbDirWnagHjqxfGFO0yI5OorN5tBWwRQvptVXs1hlL
+4GL28jaQgjY=
+=EyOk
+-----END PGP SIGNATURE-----
Added: dev/httpd/httpd-2.4.1-deps.tar.gz.md5
==============================================================================
--- dev/httpd/httpd-2.4.1-deps.tar.gz.md5 (added)
+++ dev/httpd/httpd-2.4.1-deps.tar.gz.md5 Mon Feb 13 13:46:13 2012
@@ -0,0 +1 @@
+cfe420cfeca3723562078eeb43547d0b *httpd-2.4.1-deps.tar.gz
Added: dev/httpd/httpd-2.4.1-deps.tar.gz.sha1
==============================================================================
--- dev/httpd/httpd-2.4.1-deps.tar.gz.sha1 (added)
+++ dev/httpd/httpd-2.4.1-deps.tar.gz.sha1 Mon Feb 13 13:46:13 2012
@@ -0,0 +1 @@
+32b9b82ed4e80616587cf25e3e19eb084f9c6240 *httpd-2.4.1-deps.tar.gz
Added: dev/httpd/httpd-2.4.1.tar.bz2
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.4.1.tar.bz2
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: dev/httpd/httpd-2.4.1.tar.bz2.asc
==============================================================================
--- dev/httpd/httpd-2.4.1.tar.bz2.asc (added)
+++ dev/httpd/httpd-2.4.1.tar.bz2.asc Mon Feb 13 13:46:13 2012
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.11 (Darwin)
+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+=dOj9
+-----END PGP SIGNATURE-----
Added: dev/httpd/httpd-2.4.1.tar.bz2.md5
==============================================================================
--- dev/httpd/httpd-2.4.1.tar.bz2.md5 (added)
+++ dev/httpd/httpd-2.4.1.tar.bz2.md5 Mon Feb 13 13:46:13 2012
@@ -0,0 +1 @@
+7d3001c7a26b985d17caa367a868f11c *httpd-2.4.1.tar.bz2
Added: dev/httpd/httpd-2.4.1.tar.bz2.sha1
==============================================================================
--- dev/httpd/httpd-2.4.1.tar.bz2.sha1 (added)
+++ dev/httpd/httpd-2.4.1.tar.bz2.sha1 Mon Feb 13 13:46:13 2012
@@ -0,0 +1 @@
+23beffce77529971e09d0fb1e760cadf80afa4e6 *httpd-2.4.1.tar.bz2
Added: dev/httpd/httpd-2.4.1.tar.gz
==============================================================================
Binary file - no diff available.
Propchange: dev/httpd/httpd-2.4.1.tar.gz
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: dev/httpd/httpd-2.4.1.tar.gz.asc
==============================================================================
--- dev/httpd/httpd-2.4.1.tar.gz.asc (added)
+++ dev/httpd/httpd-2.4.1.tar.gz.asc Mon Feb 13 13:46:13 2012
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.11 (Darwin)
+
+iQIVAwUATzkS9jTqduZ5FIWoAQo0GQ//eIUKfiOWiQy/QxU+pIwFzvuGCeIi11Vp
+ZV0aPjptzSLKuxzNYO9nxuvUYZFtnw/3L/aAJFGhPkL0iaZFVVUeyVnKRAcSLgCJ
+C+PAgXVMaJVeWwHkGrgsD+pgQJ9LnP33AmNgdqLYUvDgTTJT3uJ0KOpqVvWgg9Ww
+UIMppzDKBa+NpTS3Ez+eZx9X53xeem/6t1S9Rnvcz+MjPm7Tu61RbtJOdmftVwh8
+1n8nMpMIxGpUC1C+aXpe+yKAltdxDdTkSq7gD8maargvDv5U6y3FvanVwvNbPWp3
+Ttv+ypurbEDXkRmhHh/k1qJ4IzopYWGzsMSk24Vwr/hY05ZS9SxcX70gjCLd4mQO
+sHmwMgY9G9jBdZ9aGSUqLrxhA4PlTUKYgki68E9STGYbgdz21D69dKvA3Q76A7mw
+uAAcmYaT7qvdFPNmnXjgg54qsyHqdli9rxoMuJjp5tm6xDG1+uh4CFHm/yEDfjPL
+URgZ9yscN2rHQRdNRnoSvRXCzQsC+YG/rfByONz1iY39nvQV9kwL7qcC+ZwtePWj
+GToaYy0i+C2XSqW6mm3KIGKUQSE3M8bJVaA9QbKKzJayM2GfyhqkrJ3Ghdcualk4
+IZ+wsgMvNPpQxLW3a2cMMvvOXfWnVB6KxkIlKstAJ2ZMXHNHHl2P8mp2HUTVfqvm
+Aa1TtS5G0ao=
+=DY38
+-----END PGP SIGNATURE-----
Added: dev/httpd/httpd-2.4.1.tar.gz.md5
==============================================================================
--- dev/httpd/httpd-2.4.1.tar.gz.md5 (added)
+++ dev/httpd/httpd-2.4.1.tar.gz.md5 Mon Feb 13 13:46:13 2012
@@ -0,0 +1 @@
+4366afbea8149ca125af01fd59a2f8a2 *httpd-2.4.1.tar.gz
Added: dev/httpd/httpd-2.4.1.tar.gz.sha1
==============================================================================
--- dev/httpd/httpd-2.4.1.tar.gz.sha1 (added)
+++ dev/httpd/httpd-2.4.1.tar.gz.sha1 Mon Feb 13 13:46:13 2012
@@ -0,0 +1 @@
+1116ae774a371803ed2d6b31f57102c4e14b0271 *httpd-2.4.1.tar.gz