CHANGES revision 099c357f282d4aebf2b32264f7dce6ffc0497c37
f743002678eb67b99bbc29fee116b65d9530fec0wrowe -*- coding: utf-8 -*-
80833bb9a1bf25dcf19e814438a4b311d2e1f4cffuankgChanges with Apache 2.5.0
6736c640e65e06990ef33af71ee81fac4df4ff5fjim
099c357f282d4aebf2b32264f7dce6ffc0497c37sf *) mod_ssl: Add support for TLS-SRP (Secure Remote Password key exchange
099c357f282d4aebf2b32264f7dce6ffc0497c37sf for TLS, RFC 5054). PR 51075. [Quinn Slack <sqs cs stanford edu>,
099c357f282d4aebf2b32264f7dce6ffc0497c37sf Christophe Renou, Peter Sylvester]
099c357f282d4aebf2b32264f7dce6ffc0497c37sf
7e51e049b88b11a1f0d9203f3b70b0a5de06f56ejorton *) htdbm, htpasswd: Don't crash if crypt() fails (e.g. with FIPS enabled).
7e51e049b88b11a1f0d9203f3b70b0a5de06f56ejorton [Paul Wouters <pwouters redhat.com>, Joe Orton]
7e51e049b88b11a1f0d9203f3b70b0a5de06f56ejorton
d9b079a6dd66d36313be56f859c8c61153146527sf *) mod_ssl: Add new directive SSLCompression to disable TLS-level
d9b079a6dd66d36313be56f859c8c61153146527sf compression. PR 53219. [Björn Jacke <bjoern j3e de>, Stefan Fritsch]
d9b079a6dd66d36313be56f859c8c61153146527sf
50f8c80eb4d3989ebf3f1341aeef4d2d302af162sf *) core: Make ap_regcomp() return AP_REG_ESPACE if out of memory. Make
50f8c80eb4d3989ebf3f1341aeef4d2d302af162sf ap_pregcomp() abort if out of memory. This raises the minimum PCRE
4bb0a88a01fb7b494bb02a8b881b5eab0308bda6sf requirement to version 6.0. PR 53284. [Stefan Fritsch]
50f8c80eb4d3989ebf3f1341aeef4d2d302af162sf
295ba2e25e562ee52c7bf96808cf9d486ebfb325sf *) apxs: Use LDFLAGS from config_vars.mk in addition to CFLAGS and CPPFLAGS.
295ba2e25e562ee52c7bf96808cf9d486ebfb325sf [Stefan Fritsch]
295ba2e25e562ee52c7bf96808cf9d486ebfb325sf
3104923cb51cf5826c97368d1f0d5202c352cd4fsf *) mpm_event: Fix handling of MaxConnectionsPerChild. [Stefan Fritsch]
3104923cb51cf5826c97368d1f0d5202c352cd4fsf
7b395e4e878c28a4784919cfd2e704ddd14a3390jorton *) suexec: Add --enable-suexec-capabilites support on Linux, to use
7b395e4e878c28a4784919cfd2e704ddd14a3390jorton setuid/setgid capability bits rather than a setuid root binary.
7b395e4e878c28a4784919cfd2e704ddd14a3390jorton [Joe Orton]
7b395e4e878c28a4784919cfd2e704ddd14a3390jorton
536e48c08d674acac5d44929318f2ad928edc361jorton *) suexec: Add support for logging to syslog as an alternative to logging
536e48c08d674acac5d44929318f2ad928edc361jorton to a file; configure --without-suexec-logfile --with-suexec-syslog.
e81785da447b469da66f218b3f0244aab507958djorton [Joe Orton]
e81785da447b469da66f218b3f0244aab507958djorton
424b4e796cde9df955948c354cb4df6080a92d4esf *) mod_proxy_ajp: Reduce memory usage in case of many keep-alive requests on
424b4e796cde9df955948c354cb4df6080a92d4esf one connection. PR 52275. [Naohiro Ooiwa <naohiro ooiwa miraclelinux com>]
424b4e796cde9df955948c354cb4df6080a92d4esf
5cc1d035c9293c4d64b2344b5eac35edd1bd4537rpluem *) mod_proxy: Use the the same hostname for SNI as for the HTTP request when
5cc1d035c9293c4d64b2344b5eac35edd1bd4537rpluem forwarding to SSL backends. PR 53134.
5cc1d035c9293c4d64b2344b5eac35edd1bd4537rpluem [Michael Weiser <michael weiser.dinsnail.net>, Ruediger Pluem]
5cc1d035c9293c4d64b2344b5eac35edd1bd4537rpluem
3e4e54d4e3fc0123c63d57aa84ac7ad7a8c73ff8jorton *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
3e4e54d4e3fc0123c63d57aa84ac7ad7a8c73ff8jorton [Matthew Steele <mdsteele google.com>]
3e4e54d4e3fc0123c63d57aa84ac7ad7a8c73ff8jorton
00f53c09b10014571b639d5e9df993fb188220a6sf *) mod_so: If a filename without slashes is specified for LoadFile or
00f53c09b10014571b639d5e9df993fb188220a6sf LoadModule and the file cannot be found in the server root directory,
00f53c09b10014571b639d5e9df993fb188220a6sf try to use the standard dlopen() search path. [Stefan Fritsch]
00f53c09b10014571b639d5e9df993fb188220a6sf
459eaf0826f995b73a0dc066f59ea10d2824e72dsf *) various modules, rotatelogs: Replace use of apr_file_write() with
459eaf0826f995b73a0dc066f59ea10d2824e72dsf apr_file_write_full() to prevent incomplete writes. PR 53131.
459eaf0826f995b73a0dc066f59ea10d2824e72dsf [Nicolas Viennot <apache viennot biz>, Stefan Fritsch]
459eaf0826f995b73a0dc066f59ea10d2824e72dsf
6d6cd31bddca0b7d9cf9d18e46cd2361530e24f3sf *) core: Fix segfault in logging if r->useragent_addr or c->client_addr is
6d6cd31bddca0b7d9cf9d18e46cd2361530e24f3sf unset. [Stefan Fritsch]
6d6cd31bddca0b7d9cf9d18e46cd2361530e24f3sf
53e9b27aba029b18be814df40bcf6f0428771d1efuankg *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
53e9b27aba029b18be814df40bcf6f0428771d1efuankg be compiled by the build compiler instead of the host compiler.
53e9b27aba029b18be814df40bcf6f0428771d1efuankg Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
53e9b27aba029b18be814df40bcf6f0428771d1efuankg PR 51257. [Guenter Knauf]
53e9b27aba029b18be814df40bcf6f0428771d1efuankg
347074f011eae59e518ddf8d8474d35e029a2056sf *) mod_ssl: Send the error message for speaking http to an https port using
fe2e0971201136f2dbc6b000ad5c006a1a6ff672sf HTTP/1.0 instead of HTTP/0.9, and omit the link that may be wrong when
fe2e0971201136f2dbc6b000ad5c006a1a6ff672sf using SNI. PR 50823. [Stefan Fritsch]
347074f011eae59e518ddf8d8474d35e029a2056sf
21da42a6b8f551ef603bd06356d3bf71d6d0c21dsf *) mod_authz_core: Fix parsing of Require arguments in <AuthzProviderAlias>.
21da42a6b8f551ef603bd06356d3bf71d6d0c21dsf PR 53048. [Stefan Fritsch]
21da42a6b8f551ef603bd06356d3bf71d6d0c21dsf
2876a591f17b0c6ed0cf28da929643965e67c953sf *) core: Fix error handling in ap_scan_script_header_err_brigade() if there
2876a591f17b0c6ed0cf28da929643965e67c953sf is no EOS bucket in the brigade. Fixes segfault with mod_proxy_fcgi.
2876a591f17b0c6ed0cf28da929643965e67c953sf PR 48272. [Stefan Fritsch]
2876a591f17b0c6ed0cf28da929643965e67c953sf
38eb64d29a17648e108852de42f23335aecaa8f8sf *) mod_proxy_fcgi: If there is an error reading the headers from the
976f49eaf81ffe917272e4f1834115dec06962b0sf backend, send an error to the client. PR 52879. [Stefan Fritsch]
38eb64d29a17648e108852de42f23335aecaa8f8sf
5a1f28ac93914b4bae892c69ac4b3e670bc10da8nd *) mod_rewrite: Fix RewriteCond integer checks to be parsed correctly.
5a1f28ac93914b4bae892c69ac4b3e670bc10da8nd PR 53023. [Axel Reinhold <apache freakout.de>, André Malo]
5a1f28ac93914b4bae892c69ac4b3e670bc10da8nd
0361488d59792d052a9f8024c0e5a1ef909252e6rpluem *) mod_proxy: Add the forcerecovery balancer parameter that determines if
0361488d59792d052a9f8024c0e5a1ef909252e6rpluem recovery for balancer workers is enforced. [Ruediger Pluem]
0361488d59792d052a9f8024c0e5a1ef909252e6rpluem
6135cc8178d75a52828ad225b1d568cd1e97799erpluem *) mod_proxy: Correctly set up reverse proxy worker. PR 52935.
6135cc8178d75a52828ad225b1d568cd1e97799erpluem [Petter Berntsen <petterb gmail.com>]
6135cc8178d75a52828ad225b1d568cd1e97799erpluem
44761f3e3072cf78a4997a88bb9a515ca101a1f4covener *) core: Add filesystem paths to access denied / access failed messages
44761f3e3072cf78a4997a88bb9a515ca101a1f4covener AH00035 and AH00036. [Eric Covener]
44761f3e3072cf78a4997a88bb9a515ca101a1f4covener
2ba1586475aa4ec972ca7c19b06d53bf76f0ee7efuankg *) Fix MPM DSO load failure on AIX. [Jeff Trawick]
2ba1586475aa4ec972ca7c19b06d53bf76f0ee7efuankg
c7502880be24058c7fc03771fda61f95bc238339sf *) core: Add the port number to the vhost's name in the scoreboard.
c7502880be24058c7fc03771fda61f95bc238339sf [Stefan Fritsch]
c7502880be24058c7fc03771fda61f95bc238339sf
ca61ccd0c306c2c72df153688ba1b49f3eceed80sf *) mpm_event: Don't do a blocking write when starting a lingering close
ca61ccd0c306c2c72df153688ba1b49f3eceed80sf from the listener thread. PR 52229. [Stefan Fritsch]
ca61ccd0c306c2c72df153688ba1b49f3eceed80sf
6bb524f1895f30265a1431afc460977d391cb36bsf *) core: In maintainer mode, replace apr_palloc with a version that
6bb524f1895f30265a1431afc460977d391cb36bsf initializes the allocated memory with non-zero values, except if
ca61ccd0c306c2c72df153688ba1b49f3eceed80sf AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
6bb524f1895f30265a1431afc460977d391cb36bsf
8233250a7f6c06225752db92bf32117bd9648c1dsf *) mod_log_config: Check during config test that directories for access logs
8233250a7f6c06225752db92bf32117bd9648c1dsf exist. PR 29941. [Stefan Fritsch]
8233250a7f6c06225752db92bf32117bd9648c1dsf
b40bfdb714672f972887f9f1f1e154e00125bb68covener *) mod_authnz_ldap: Don't try a potentially expensive nested groups
b40bfdb714672f972887f9f1f1e154e00125bb68covener search before exhausting all AuthLDAPGroupAttribute checks on the
b40bfdb714672f972887f9f1f1e154e00125bb68covener current group. PR52464 [Eric Covener]
b40bfdb714672f972887f9f1f1e154e00125bb68covener
e6dd71992459d05a676b98b7963423dc5dc1e24aminfrin *) mod_policy: Add a new testing module to help server administrators
e6dd71992459d05a676b98b7963423dc5dc1e24aminfrin enforce a configurable level of protocol compliance on their
e6dd71992459d05a676b98b7963423dc5dc1e24aminfrin servers and application servers behind theirs. [Graham Leggett]
e6dd71992459d05a676b98b7963423dc5dc1e24aminfrin
23f1535d6a60817d2846bac0aea230ea475d7dccminfrin *) mod_firehose: Add a new debugging module able to record traffic
23f1535d6a60817d2846bac0aea230ea475d7dccminfrin passing through the server in such a way that connections and/or
23f1535d6a60817d2846bac0aea230ea475d7dccminfrin requests be reconstructed and replayed. [Graham Leggett]
23f1535d6a60817d2846bac0aea230ea475d7dccminfrin
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung *) Event MPM: Reduce locking by using a lock free circular queue.
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung *) mod_noloris
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung *) APREQ
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung *) Simple MPM
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung *) mod_serf
ec7520b24cd80d34d82bbcaca153cbb23cc04bc0rjung
6249dfa569d3b4f1f539665b979a80c6e335d93etrawick [Apache 2.5.0-dev includes those bug fixes and changes with the
6249dfa569d3b4f1f539665b979a80c6e335d93etrawick Apache 2.4.xx tree as documented below, except as noted.]
0827cb14e550f6f65018431c22c2c913631c8f25kbrand
6249dfa569d3b4f1f539665b979a80c6e335d93etrawickChanges with Apache 2.4.x and later:
ae600ca541efc686b34f8b1f21bd3d0741d37674covener
6249dfa569d3b4f1f539665b979a80c6e335d93etrawick *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
cfa64348224b66dd1c9979b809406c4d15b1c137fielding
74499a117b3b2cd9666715a14f90c0e5d1a4ee8ajimChanges with Apache 2.2.x and later:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding
74499a117b3b2cd9666715a14f90c0e5d1a4ee8ajim *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
cfa64348224b66dd1c9979b809406c4d15b1c137fielding
74499a117b3b2cd9666715a14f90c0e5d1a4ee8ajimChanges with Apache 2.0.x and later:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding
74499a117b3b2cd9666715a14f90c0e5d1a4ee8ajim *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup
cfa64348224b66dd1c9979b809406c4d15b1c137fielding