Cross Reference: /httpd/CHANGES

	CHANGES revision 7b82bb697a4957f302e43df708dda478dea80e05
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen                                                         -*- coding: utf-8 -*-
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders HatlenChanges with Apache 2.5.0
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_proxy_fcgi: Fix sending of response without some HTTP headers
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     that might be set by filters.  [Jim Riggs <jim riggs.me>]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_rewrite: Add 'BNF' (backreferences-no-plus) flag to RewriteRule to
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     allow spaces in backreferences to be encoded as %20 instead of '+'.
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     [Eric Covener]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_ssl: bring SNI behavior into better conformance with RFC 6066:
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     no longer send warning-level unrecognized_name(112) alerts,
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     and limit startup warnings to cases where an OpenSSL version
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     without TLS extension support is used. PR 56241. [Kaspar Brand]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_proxy_html: Do not delete the wrong data from HTML code when a
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     "http-equiv" meta tag specifies a Content-Type behind any other
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     "http-equiv" meta tag. PR 56287 [Micha Lenk <micha lenk info>]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_expires: don't add Expires header to error responses (4xx/5xx),
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     be they generated or forwarded. PR 55669. [ Yann Ylavic ]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_rewrite: Support an optional list of characters to escape in the
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     argument for the 'B' (escape backreferences) flag. [Eric Covener]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_ssl: Add SSLOCSPUseRequestNonce directive to control whether or not
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen     OCSP requests should use a nonce to be checked against the responder's
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen     one. PR 56233. [ Yann Ylavic ]
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen  *) mod_reqtimeout: Resolve unexpected timeouts on keepalive requests
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen     under the Event MPM. PR56216.  [Frank Meier <frank meier ergon ch>]
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_lua: Add r:wspeek for checking if there is any data waiting on the line
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     [Daniel Gruno]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_proxy: Do not try to parse the regular expressions passed by
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     ProxyPassMatch as URL as they do not follow their syntax.
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     PR 56074. [Ruediger Pluem]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen  *) mod_dir: Default to 2.2-like behavior and skip execution when method is
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     neither GET nor POST, such as for DAV requests. PR 54914. [Chris Darroch]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_rewrite: Rename the handler that does per-directory internal
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     redirects to "rewrite-redirect-handler" from "redirect-handler" so
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     it is less ambiguous and less likely to be reused. [Eric Covener]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_rewrite: Protect against looping with the [N] flag by enforcing a
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     default limit of 10000 iterations, and allowing each rule to change its
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     limit. [Eric Covener]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_ssl: Fix config merging of SSLOCSPEnable and SSLOCSPOverrideResponder.
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     [Jeff Trawick]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) Add HttpContentLengthHeadZero and HttpExpectStrict directives.
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     [Yehuda Sadeh <yehuda inktank com>, Justin Erenkrantz]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) FreeBSD: Disable IPv4-mapped listening sockets by default for versions
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     5+ instead of just for FreeBSD 5. PR 53824. [Jeff Trawick]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_auth_form: Add a debug message when the fields on a form are not
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     recognised. [Graham Leggett]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_ssl: Add -t -DDUMP_CA_CERTS option which dumps the filenames of all
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     configured SSL CA certificates to stdout the same way as DUMP_CERTS does.
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     [Jan Kaluza]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_headers: Allow the "value" parameter of Header and RequestHeader to
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     contain an ap_expr expression if prefixed with "expr=". [Eric Covener]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) Add suspend_connection and resume_connection hooks to notify modules
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     when the thread/connection relationship changes.  (Currently implemented
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     only for the Event MPM; should be implemented for all async MPMs.)
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     [Jeff Trawick]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_ssl: Don't flush when an EOS is received. Prepares mod_ssl
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     to support write completion. [Graham Leggett]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) core: Add parse_errorlog_arg callback to ap_errorlog_provider
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     to allow providers to check the ErrorLog argument. [Jan Kaluza]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_cgid: Use the servers Timeout for each read from a CGI script,
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     allow override with new CGIDRequestTimeout directive. PR43494
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     [Eric Covener, Toshikuni Fukaya <toshikuni-fukaya cybozu co jp>]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) core: Add missing Reason-Phrase in HTTP response headers.
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     PR 54946. [Rainer Jung]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) core: ensure any abnormal exit is reported to stderr if it's a tty.
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     PR 55670 [Nick Kew]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_auth_form: Make sure the optional functions are loaded even when
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     the AuthFormProvider isn't specified. [Graham Leggett]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_lua: Let the Inter-VM get/set functions work with a global
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     shared memory pool instead of a per-process pool. [Daniel Gruno]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) ldap: Support ldaps when using the Microsoft LDAP SDK.
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     PR 54626. [Jean-Frederic Clere]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_proxy: Add ap_connection_reusable() for checking if a connection
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     is reusable as of this point in processing.  [Jeff Trawick]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_authnz_ldap: Change default value of AuthLDAPMaxSubGroupDepth to 0
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     to avoid performance problems when subgroups aren't in use. [Eric Covener]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_syslog: New module implementing syslog ap_error_log provider.
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     Previously, this code was part of core, now it's in separate module.
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     [Jan Kaluza]
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) core: Add ap_errorlog_provider to make ErrorLog logging modular. Move
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     syslog support from core to new mod_syslog. [Jan Kaluza]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) WinNT MPM: If ap_run_pre_connection() fails or sets c->aborted, don't
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     save the socket for reuse by the next worker as if it were an
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     APR_SO_DISCONNECTED socket. Restores 2.2 behavior. [Eric Covener]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_status, mod_echo: Fix the display of client addresses.
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     They were truncated to 31 characters which is not enough for IPv6 addresses.
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     PR 54848 [Bernhard Schmidt <berni birkenwald de>]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_authnz_fcgi: New module to enable FastCGI authorizer
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     applications to authenticate and/or authorize clients.
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     [Jeff Trawick]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) core: Add ap_log_data(), ap_log_rdata(), etc. for logging buffers.
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     [Jeff Trawick]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
975551715fe69870009e812949a3ad228118c8ceKnut Anders Hatlen  *) mod_unique_id: Use output of the PRNG rather than IP address and
975551715fe69870009e812949a3ad228118c8ceKnut Anders Hatlen     pid, avoiding sleep() call and possible DNS issues at startup,
975551715fe69870009e812949a3ad228118c8ceKnut Anders Hatlen     plus improving randomness for IPv6-only hosts.
975551715fe69870009e812949a3ad228118c8ceKnut Anders Hatlen     [Jan Kaluza <jkaluza redhat.com>]
975551715fe69870009e812949a3ad228118c8ceKnut Anders Hatlen
975551715fe69870009e812949a3ad228118c8ceKnut Anders Hatlen  *) mod_authnz_ldap: Support primitive LDAP servers that do not accept
975551715fe69870009e812949a3ad228118c8ceKnut Anders Hatlen     filters, such as "SDBM-backed LDAP" on z/OS, by allowing a special
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     filter "none" to be specified in AuthLDAPURL. [Eric Covener]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) mod_file_cache: mod_file_cache should be able to serve files that
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     haven't had a Content-Type set via e.g. mod_mime. [Eric Covener]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen  *) core: merge AllowEncodedSlashes from the base configuration into
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     virtual hosts. [Eric Covener]
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen  *) AIX: Install DSO's with "cp" instead of "install" in instdso.sh
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen     [Eric Covener]
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen  *) mod_ldap: Don't keep retrying if a new LDAP connection times out.
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen     [Eric Covener]
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen  *) mod_deflate: permit compilation of mod_deflate against a zlib that has
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen     been configured with -D Z_PREFIX, which redefines the token "deflate".
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen     [Eric Covener]
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen  *) mod_socache_shmcb.c: Remove arbitrary restriction on shared memory size
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen     previously limited to 64MB. [Jens Låås <jelaas gmail.com>]
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen  *) mod_auth_digest: Use the secret when generating nonces in all cases and
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen     not only when AuthName is used in .htaccess files (this change may cause
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen     problems if used with round robin load balancers). Don't regenerate the
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen     secret on graceful restarts. PR 54637  [Stefan Fritsch]
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen  *) core: Remove apr_brigade_flatten(), buffering and duplicated code
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen     from the HTTP_IN filter, parse chunks in a single pass with zero copy.
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen     Reduce memory usage by 48 bytes per request. [Graham Leggett]
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen  *) core: Stop the HTTP_IN filter from attempting to write error buckets
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen     to the output filters, which is bogus in the proxy case. Create a
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen     clean mapping from APR codes to HTTP status codes, and use it where
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen     needed. [Graham Leggett]
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen
e52467a981515a28f7ea07caf72592deec169239Knut Anders Hatlen  *) mod_proxy: Ensure network errors detected by the proxy are returned as
9b9e2e175e070d708ce1d726c1884a8ac2984a98Knut Anders Hatlen     504 Gateway Timout as opposed to 502 Bad Gateway, in order to be
     compliant with RFC2616 14.9.4 Cache Revalidation and Reload Controls.

  *) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981
     [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez
     <alejandro.alvarez.ayllon cern.ch>]

  *) core, mod_ssl: Enable the ability for a module to reverse the sense of
     a poll event from a read to a write or vice versa. This is a step on
     the way to allow mod_ssl taking full advantage of the event MPM.
     [Graham Leggett]

  *) mod_ldap: LDAP connections used for authentication were not respecting
     LDAPConnectionPoolTimeout.  PR 54587

  *) core: ap_rgetline_core now pulls from r->proto_input_filters.

  *) mod_proxy_html: process parsed comments immediately.
     Fixes bug where parsed comments may be lost. [Nick Kew]

  *) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]

  *) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
     HTML/XHTML [Nick Kew]

  *) core: Add option to add valgrind support. Use it to reduce false positive
     warnings in mod_ssl. [Stefan Fritsch]

  *) mod_authn_file, mod_authn_dbd, mod_authn_dbm, mod_authn_socache:
     Cache the result of the most recent password hash verification for every
     keep-alive connection. This saves some expensive calculations.
     [Stefan Fritsch]

  *) http: Remove support for Request-Range header sent by Navigator 2-3 and
     MSIE 3. [Stefan Fritsch]

  *) core, http: Extend HttpProtocol with an option to enforce stricter HTTP
     conformance or to only log the found problems. [Stefan Fritsch]

  *) core: Correctly parse an IPv6 literal host specification in an absolute
     URL in the request line. [Stefan Fritsch]

  *) EventOpt MPM

  *) core: Add LogLevelOverride directive that allows to override the
     loglevel for clients from certain IPs. This also works for things
     like the SSL handshake where <If> LogLevel ... </If> is evaluated
     too late. [Stefan Fritsch]

  *) core: Add new directive Warning to issue warnings from a configuration
     file. Both Warning and Error now generate a timestamped log message.
     [Fabien Coelho]

  *) ap_expr: Add SERVER_PROTOCOL_VERSION, ..._MAJOR, and ..._MINOR
     variables. [Stefan Fritsch]

  *) core: New directive RegisterHttpMethod for registering non-standard
     HTTP methods. [Stefan Fritsch]

  *) core: New directive HttpProtocol which allows to disable HTTP/0.9
     support. [Stefan Fritsch]

  *) mod_allowhandlers: New module to forbid specific handlers for specific
     directories. [Stefan Fritsch]

  *) mod_systemd: New module, for integration with systemd on Linux.
     [Jan Kaluza <jkaluza redhat.com>]

  *) WinNT MPM: Store pid and generation for each thread in scoreboard
     to allow tracking of threads from exiting children via mod_status
     or other such mechanisms.  [Jeff Trawick]

  *) The following now respect DefaultRuntimeDir/DEFAULT_REL_RUNTIMEDIR:
     - APIs: ap_log_pid(), ap_remove_pid, ap_read_pid()
     - core: the scoreboard (ScoreBoardFile), pid file (PidFile), and
       mutexes (Mutex)
     - mod_cache: thundering herd lock directory
     - mod_lbmethod_heartbeat, mod_heartmonitor: heartbeat storage file
     - mod_ldap: shared memory cache
     - mod_socache_shmcb, mod_socache_dbm: shared memory or dbm for cache
     [Jeff Trawick]

  *) suexec: Add --enable-suexec-capabilites support on Linux, to use
     setuid/setgid capability bits rather than a setuid root binary.
     [Joe Orton]

  *) suexec: Add support for logging to syslog as an alternative to logging
     to a file; configure --without-suexec-logfile --with-suexec-syslog.
     [Joe Orton]

  *) mod_ssl: Add support for TLS Next Protocol Negotiation.  PR 52210.
     [Matthew Steele <mdsteele google.com>]

  *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
     be compiled by the build compiler instead of the host compiler.
     Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
     PR 51257. [Guenter Knauf]

  *) core: In maintainer mode, replace apr_palloc with a version that
     initializes the allocated memory with non-zero values, except if
     AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]

  *) mod_policy: Add a new testing module to help server administrators
     enforce a configurable level of protocol compliance on their
     servers and application servers behind theirs. [Graham Leggett]

  *) mod_firehose: Add a new debugging module able to record traffic
     passing through the server in such a way that connections and/or
     requests be reconstructed and replayed. [Graham Leggett]

  *) mod_noloris

  *) APREQ

  *) Simple MPM

  *) mod_serf

  [Apache 2.5.0-dev includes those bug fixes and changes with the
   Apache 2.4.xx tree as documented below, except as noted.]

Changes with Apache 2.4.x and later:

  *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup

Changes with Apache 2.2.x and later:

  *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup

Changes with Apache 2.0.x and later:

  *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/CHANGES?view=markup