CHANGES revision 9fb3d1792a78003c60a8f0fdbef30a372b39452e
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley -*- coding: utf-8 -*-
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob HalleyChanges with Apache 2.3.15
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) SECURITY: CVE-2011-3348 (cve.mitre.org)
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley mod_proxy_ajp: Respond with HTTP_NOT_IMPLEMENTED when the method is not
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley recognized. [Jean-Frederic Clere]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) SECURITY: CVE-2011-3192 (cve.mitre.org)
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley core: Fix handling of byte-range requests to use less memory, to avoid
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley denial of service. If the sum of all ranges in a request is larger than
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley the original file, ignore the ranges and send the complete file.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley PR 51714. [Stefan Fritsch, Jim Jagielski, Ruediger Pluem, Eric Covener,
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_ssl: If MaxMemFree is set, ask OpenSSL >= 1.0.0 to reduce memory
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley usage. PR 51618. [Cristian Rodr�guez <crrodriguez opensuse org>,
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_ssl: At startup, when checking a server certificate whether it
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley matches the configured ServerName, also take dNSName entries in the
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley subjectAltName extension into account. PR 32652, PR 47051. [Kaspar Brand]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_substitute: Reduce memory usage and copying of data. PR 50559.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley [Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_ssl/proxy: enable the SNI extension for backend TLS connections
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley [Kaspar Brand]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) Add wrappers for malloc, calloc, realloc that check for out of memory
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley situations and use them in many places. PR 51568, PR 51569, PR 51571.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley [Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) Fix cross-compilation of mod_cgi/mod_cgid when APR_HAVE_STRUCT_RLIMIT is
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley false but RLIMIT_* are defined. PR51371. [Eric Covener]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) core: Correctly obey ServerName / ServerAlias if the Host header from the
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley request matches the VirtualHost address.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley PR 51709. [Micha Lenk <micha lenk.info>]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_unique_id: Use random number generator to initialize counter.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley PR 45110. [Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) core: Add convenience API for apr_random. [Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) core: Add MaxRangeOverlaps and MaxRangeReversals directives to control
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley the number of overlapping and reversing ranges (respectively) permitted
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley before returning the entire resource, with a default limit of 20.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley [Jim Jagielski]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_ldap: Optional function uldap_ssl_supported(r) always returned false
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley if called from a virtual host with mod_ldap directives in it. Did not
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley affect mod_authnz_ldap's usage of mod_ldap. [Eric Covener]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_filter: Instead of dropping the Accept-Ranges header when a filter
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley registered with AP_FILTER_PROTO_NO_BYTERANGE is present,
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley set the header value to "none". [Eric Covener, Ruediger Pluem]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) core: Allow MaxRanges none|unlimited|default and set 'Accept-Ranges: none'
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley in the case Ranges are being ignored with MaxRanges none.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley [Eric Covener]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_ssl: revamp CRL-based revocation checking when validating
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley certificates of clients or proxied servers. Completely delegate
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley CRL processing to OpenSSL, and add a new [Proxy]CARevocationCheck
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley directive for controlling the revocation checking mode. [Kaspar Brand]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) core: Add MaxRanges directive to control the number of ranges permitted
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley before returning the entire resource, with a default limit of 200.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley [Eric Covener]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_cache: Ensure that CacheDisable can correctly appear within
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley a LocationMatch. [Graham Leggett]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_cache: Fix the moving of the CACHE filter, which erroneously
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley stood down if the original filter was not added by configuration.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley [Graham Leggett]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_ssl: improve certificate error logging. PR 47408. [Kaspar Brand]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_authz_groupfile: Increase length limit of lines in the group file to
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley 16MB. PR 43084. [Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) core: Increase length limit of lines in the configuration file to 16MB.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley PR 45888. PR 50824. [Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) core: Add API for resizable buffers. [Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_ldap: Enable LDAPConnectionTimeout for LDAP toolkits that have
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley LDAP_OPT_CONNECT_TIMEOUT instead of LDAP_OPT_NETWORK_TIMEOUT, such
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley as Tivoli Directory Server 6.3 and later. [Eric Covener]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_ldap: Change default number of retries from 10 to 3, and add
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley an LDAPRetries and LDAPRetryDelay directives. [Eric Covener]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_authnz_ldap: Don't retry during authentication, because this just
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley multiplies the ample retries already being done by mod_ldap. [Eric Covener]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) configure: Allow to explicitly disable modules even with module selection
ea31416b4fcdf23732355a8002f93f29e3b3d2dbAndreas Gustafsson 'reallyall'. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_rewrite: Check validity of each internal (int:) RewriteMap even if the
ece3d6c35693f9e2145434b0bf14e8b752cdeee8Michael Graff RewriteEngine is disabled in server context, avoiding a crash while
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley referencing the invalid int: map at runtime. PR 50994.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley [Ben Noordhuis <info noordhuis nl>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl, configure: require OpenSSL 0.9.7 or later. [Kaspar Brand]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: remove ssl_toolkit_compat layer. [Kaspar Brand]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl, configure, ab: drop support for RSA BSAFE SSL-C toolkit.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Kaspar Brand]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_usertrack: Run mod_usertrack earlier in the fixups hook to ensure the
ea31416b4fcdf23732355a8002f93f29e3b3d2dbAndreas Gustafsson cookie is set when modules such as mod_rewrite trigger a redirect. Also
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson use r->err_headers_out for the cookie, for the same reason. PR29755.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley [Sami J. Mäkinen <sjm almamedia fi>, Eric Covener]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_proxy_http, mod_proxy_connect: Add 'proxy-status' and
a5cf3cf61e96e0db9ffe433402783e1ddbb2fbc3Michael Graff 'proxy-source-port' request notes for logging. PR 30195. [Stefan Fritsch]
a5cf3cf61e96e0db9ffe433402783e1ddbb2fbc3Michael Graff *) configure: Enable ldap modules in 'all' and 'most' selections if ldap
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley is compiled into apr-util. [Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) core: Add ap_check_cmd_context()-check if a command is executed in
a5cf3cf61e96e0db9ffe433402783e1ddbb2fbc3Michael Graff .htaccess file. [Stefan Fritsch]
a5cf3cf61e96e0db9ffe433402783e1ddbb2fbc3Michael Graff *) mod_deflate: Fix endless loop if first bucket is metadata. PR 51590.
7bb707a34778fc4bd9624d6c5de95675424ea59fDavid Lawrence [Torsten Foertsch <torsten foertsch gmx net>]
8a9b755d32a4f6ace792ac3fd17c968cf96d2487David LawrenceChanges with Apache 2.3.14
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_ajp: Improve trace logging. [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_ajp: Respect "reuse" flag in END_REPONSE packets.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy: enable absolute URLs to be rewritten with ProxyPassReverse,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley e.g. to reverse proxy "Location: https://other-internal-server/login"
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) prefork, worker, event: Make sure crashes are logged to the error log if
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley httpd has already detached from the console. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) prefork, worker, event: Reduce period during startup/restart where a
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley successive signal may be lost. PR 43696. [Arun Bhalla <arun shme net>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_allowmethods: Correct Merging of "reset" and do not allow an
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley empty parameter list for the AllowMethods directive. [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) configure: Update selection of modules for 'all' and 'most'. 'all' will
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley now enable all modules except for example and test modules. Make the
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley selection for 'most' more useful (including ssl and proxy). Both 'all'
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley and 'most' will now disable modules if dependencies are missing instead
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley of aborting. If a specific module is requested with --enable-XXX=yes,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley missing dependencies will still cause configure to exit with an error.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ldap: Revert the integration of apr-ldap as ap_ldap which was done
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley in 2.3.13. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: For '*' or '_default_' vhosts, use a wildcard address of any
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley address family, rather than IPv4 only. [Joe Orton]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core, mod_rewrite, mod_ssl, mod_nw_ssl: Make the SERVER_NAME variable
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley include [ ] for literal IPv6 addresses, as mandated by RFC 3875.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 26005. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_negotiation: Fix parsing of Content-Length in type maps. PR 42203.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Nagae Hidetake <nagae eagan jp>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Add more logging to ap_scan_script_header_err* functions. Add
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley ap_scan_script_header_err*_ex functions that take a module index for
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley mod_cgi, mod_cgid, mod_proxy_fcgi, mod_proxy_scgi, mod_isapi: Use the
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley new functions in order to make logging configurable per-module.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_dir: Add DirectoryIndexRedirect to send an external redirect to
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley the proper index. [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_deflate: Don't try to compress requests with a zero sized body.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 51350. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Fix startup on IP6-only systems. PR 50592. [Joe Orton,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley <root linkage white-void net>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) suexec: Add environment variables CONTEXT_DOCUMENT_ROOT, CONTEXT_PREFIX,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley REDIRECT_ERROR_NOTES, REDIRECT_SCRIPT_FILENAME, REQUEST_SCHEME to the
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley whitelist in suexec. PR 51499. [Graham Laverty <graham reg ca>,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_rewrite: Fix regexp RewriteCond with NoCase. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_log_debug: New module that allows to log custom messages at various
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley phases in the request processing. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Add some debug logging when loading server certificates.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 37912. [Nick Burch <nick burch alfresco com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) configure: Support reallyall option also for --enable-mods-static.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_socache_dc: add --with-distcache to configure for choosing
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley the distcache installation directory. [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_socache_dc: use correct build variable MOD_SOCACHE_DC_LDADD
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley instead of MOD_SOCACHE_LDADD in build macro. [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_lua, mod_deflate: respect platform specific runpath linker
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley flag. [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) configure: Only link the httpd binary against PCRE. No other support
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley binary needs PCRE. [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) configure: tolerate dependency checking failures for modules if
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley they have been enabled implicitely. [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) configure: Allow to specify module specific custom linker flags via
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley the MOD_XXX_LDADD variables. [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob HalleyChanges with Apache 2.3.13
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) ab: Support specifying the local address to use. PR 48930.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Peter Schuller <scode spotify com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Add support to ErrorLogFormat for logging the system unique
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley thread id under Linux. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) event: New AsyncRequestWorkerFactor directive to influence how many
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley connections will be accepted per process. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) prefork, worker, event: Rename MaxClients to MaxRequestWorkers which
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley describes more accurately what it does. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) rotatelogs: Add -p argument to specify custom program to invoke
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley after a log rotation. PR 51285. [Sven Ulland <sveniu ifi.uio.no>,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Don't do OCSP checks for valid self-issued certs. [Kaspar Brand]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Avoid unnecessary renegotiations with SSLVerifyDepth 0.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 48215. [Kaspar Brand]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_status: Display information about asynchronous connections in the
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley server-status. PR 44377. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mpm_event: If the number of connections of a process is very high, or if
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley all workers are busy, don't accept new connections in that process.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mpm_event: Process lingering close asynchronously instead of tying up
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley worker threads. [Jeff Trawick, Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mpm_event: If MaxMemFree is set, limit the number of pools that is kept
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley around. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mpm_event: Fix graceful restart aborting connections. PR 43359.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Takashi Sato <takashi lans-tv com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Disable AECDH ciphers in example config. PR 51363.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Rob Stradling <rob comodo com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Introduce new function ap_get_conn_socket() to access the socket of
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley a connection. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_data: Introduce a filter to support RFC2397 data URLs. [Graham
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_userdir/mod_alias/mod_vhost_alias: Correctly set DOCUMENT_ROOT,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley CONTEXT_DOCUMENT_ROOT, CONTEXT_PREFIX. PR 26052. PR 46198.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Allow to override document_root on a per-request basis. Introduce
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley new context_document_root and context_prefix which provide information
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley about non-global URI-to-directory mappings (from e.g. mod_userdir or
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley mod_alias) to scripts. PR 49705. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Add <ElseIf> and <Else> to complement <If> sections.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ext_filter: Remove DebugLevel option in favor of per-module loglevel.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_include: Make the "#if expr" element use the new "ap_expr" expression
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley parser. The old parser can still be used by setting the new directive
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley SSILegacyExprParser. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Add some features to ap_expr for use by mod_include: a restricted
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley mode that does not allow to bypass request access restrictions; new
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley variables DOCUMENT_URI (alias for REQUEST_URI), LAST_MODIFIED; -A as an
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley alias for -U; an additional data entry in ap_expr_eval_ctx_t for use by
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley the consumer; an extensible ap_expr_exec_ctx() API that allows to use that
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley data entry. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_include: Merge directory configs instead of one SSI* config directive
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley causing all other per-directory SSI* config directives to be reset.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_charset_lite: Remove DebugLevel option in favour of per-module
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley loglevel. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Add ap_regexec_len() function that works with non-null-terminated
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley strings. PR 51231. [Yehezkel Horowitz <horowity checkpoint com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_authnz_ldap: If the LDAP server returns constraint violation,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley don't treat this as an error but as "auth denied". [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_fcgi|scgi: Add support for "best guess" of PATH_INFO
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley for SCGI/FCGI. PR 50880, 50851. [Mark Montague <mark catseye.org>,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Jim Jagielski]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cache: When content is served stale, and there is no means to
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley revalidate the content using ETag or Last-Modified, and we have
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley mandated no stale-on-error behaviour, stand down and don't cache.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Saves a cache write that will never be read.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_reqtimeout: Fix a timed out connection going into the keep-alive
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley state after a timeout when discarding a request body. PR 51103.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Add various file existance test operators to ap_expr.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_express: New mass reverse-proxy switch extension for
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley mod_proxy. [Jim Jagielski]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) configure: Fix script error when configuring module set "reallyall".
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob HalleyChanges with Apache 2.3.12
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) configure, core: Provide easier support for APR's hook probe
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley capability. [Jim Jagielski, Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Silence autoconf 2.68 warnings. [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_authnz_ldap: Resolve crash when LDAP is used for authorization only
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Scott Hill <shill genscape.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) support: Make sure check_forensic works with mod_unique_id loaded
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Joe Schaefer]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Add child_status hook for tracking creation/termination of MPM child
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley processes. Add end_generation hook for notification when the last
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley MPM child of a generation exits. [Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ldap: Make LDAPSharedCacheSize 0 create a non-shared-memory cache per
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley process as opposed to disabling caching completely. This allows to use
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley the non-shared-memory cache as a workaround for the shared memory cache
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley not being available during graceful restarts. PR 48958. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Add new ap_reserve_module_slots/ap_reserve_module_slots_directive API,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley necessary if a module (like mod_perl) registers additional modules late
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley in the startup phase. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Prevent segfault if DYNAMIC_MODULE_LIMIT is reached. PR 51072.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Torsten Förtsch <torsten foertsch gmx net>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) WinNT MPM: Improve robustness under heavy load. [Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) MinGW build improvements. PR 49535. [John Vandenberg
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley <jayvdb gmail.com>, Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Support module names with colons in loglevel configuration.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Torsten Förtsch <torsten foertsch gmx net>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl, ab: Support OpenSSL compiled without SSLv2 support.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Abort if the MPM is changed across restart. [Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_ajp: Add support for 'ProxyErrorOverride on'. PR 50945.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Peter Pramberger <peter pramberger.at>, Jim Jagielski]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_fcgi: Add support for 'ProxyErrorOverride on'. PR 50913.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Mark Montague <mark catseye.org>, Jim Jagielski]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Change the APIs of ap_cfg_getline() and ap_cfg_getc() to return an
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley error code. Abort with a nice error message if a config line is too long.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Partial fix for PR 50824. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_info: Dump config to stdout during startup if -DDUMP_CONFIG is
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley specified. PR 31956. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Restore visibility of DEFAULT_PIDLOG to core and modules. MPM
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley helper function ap_remove_pid() added. [Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Enable DEFAULT_REL_RUNTIMEDIR on Windows and NetWare. [various]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Correct C++ incompatibility with http_log.h. [Stefan Fritsch, Jeff
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_log_config: Prevent segfault. PR 50861. [Torsten Förtsch
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: AllowEncodedSlashes new option NoDecode to allow encoded slashes
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley in request URL path info but not decode them. Change behavior of option
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley "On" to decode the encoded slashes as 2.0 and 2.2 do. PR 35256,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 46830. [Dan Poirier]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Check SNI hostname against Host header case-insensitively.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 49491. [Mayank Agrawal <magrawal.08 gmail.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ldap: Add LDAPConnectionPoolTTL to give control over lifetime
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley of bound backend LDAP connections. PR47634 [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cache: Make CacheEnable and CacheDisable configurable per
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley directory in addition to per server, making them work from within
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley a LocationMatch. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) worker, event, prefork: Correct several issues when built as
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley DSOs; most notably, the scoreboard was reinitialized during graceful
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley restart, such that processes of the previous generation were not
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley observable. [Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob HalleyChanges with Apache 2.3.11
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_win32: Added shebang check for '! so that .vbs scripts work as CGI.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Win32's cscript interpreter can only use a single quote as comment char.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Guenter Knauf]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy: balancer-manager now uses POST instead of GET.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Jim Jagielski]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: new util function: ap_parse_form_data(). Previously,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley this capability was tucked away in mod_request. [Jim Jagielski]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: new hook: ap_run_pre_read_request. [Jim Jagielski]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cache: When a request other than GET or HEAD arrives, we must
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley invalidate existing cache entities as per RFC2616 13.10. PR 15868.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) modules: Fix many modules that were not correctly initializing if they
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley were not active during server startup but got enabled later during a
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley graceful restart. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Create new ap_state_query function that allows modules to determine
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley if the current configuration run is the initial one at server startup,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley and if the server is started for testing/config dumping only.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy: Runtime configuration of many parameters for existing
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley balancers via the balancer-manager. [Jim Jagielski]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy: Runtime addition of new workers (BalancerMember) for existing
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley balancers via the balancer-manager. [Jim Jagielski]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cache: When a bad Expires date is present, we need to behave as if
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley the Expires is in the past, not as if the Expires is missing. PR 16521.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Co-Advisor <coad@measurement-factory.com>]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_cache: We must ignore quoted-string values that appear in a
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Cache-Control header. PR 50199. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_dav: Revert change to send 501 error if unknown Content-* header is
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley received for a PUT request. PR 42978. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cache: Respect s-maxage as described by RFC2616 14.9.3, which must
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley take precedence if present. PR 35247. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Fix a possible startup failure if multiple SSL vhosts
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley are configured with the same ServerName and private key file.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Masahiro Matsuya <mmatsuya redhat.com>, Joe Orton]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_socache_dc: Make module compile by fixing some typos.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 50735 [Mark Montague <mark catseye.org>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) prefork: Update MPM state in children during a graceful stop or
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley restart. PR 41743. [Andrew Punch <andrew.punch 247realmedia.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_mime: Ignore leading dots when looking for mime extensions.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 50434 [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Add support to set variables with the 'Define' directive. The
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley variables that can then be used in the config using the ${VAR} syntax
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley known from envvar interpolation. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_http: make adding of X-Forwarded-* headers configurable.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley ProxyAddHeaders defaults to On. [Vincent Deffontaines]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_slotmem_shm: Increase memory alignment for slotmem data.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Add config options for OCSP: SSLOCSPResponderTimeout,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley SSLOCSPResponseMaxAge, SSLOCSPResponseTimeSkew.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Kaspar Brand <httpd-dev.2011 velox.ch>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Revamp output buffering to reduce network overhead for
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley output fragmented into many buckets, such as chunked HTTP responses.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Apply <If> sections to all requests, not only to file base requests.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Allow to use <If> inside <Directory>, <Location>, and <Files> sections.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley The merging of <If> sections now happens after the merging of <Location>
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley sections, even if an <If> section is embedded inside a <Directory> or
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley <Files> section. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy: Refactor usage of shared data by dropping the scoreboard
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley and using slotmem. Create foundation for dynamic growth/changes of
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley members within a balancer. Remove BalancerNonce in favor of a
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley per-balancer 'nonce' parameter. [Jim Jagielski]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_status: Don't show slots which are disabled by MaxClients as open.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR: 47022 [Jordi Prats <jordi prats gmail com>, Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mpm_prefork: Fix ap_mpm_query results for AP_MPMQ_MAX_DAEMONS and
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley AP_MPMQ_MAX_THREADS.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_authz_core: Fix bug in merging logic if user-based and non-user-based
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley authorization directives were mixed. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_authn_socache: change directive name from AuthnCacheProvider
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley to AuthnCacheProvideFor. The term "provider" is overloaded in
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley this module, and we should avoid confusion between the provider
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley of a backend (AuthnCacheSOCache) and the authn provider(s) for
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley which this module provides cacheing (AuthnCacheProvideFor).
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_http: Allocate the fake backend request from a child pool
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley of the backend connection, instead of misusing the pool of the frontend
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley request. Fixes a thread safety issue where buckets set aside in the
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley backend connection leak into other threads, and then disappear when
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley the frontend request is cleaned up, in turn causing corrupted buckets
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley to make other threads spin. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Change the format of the SSL_{CLIENT,SERVER}_{I,S}_DN variables
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley to be RFC 2253 compatible, convert non-ASCII characters to UTF8, and
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley escape other special characters with backslashes. The old format can
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley still be used with the LegacyDNStringFormat argument to SSLOptions.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core, mod_rewrite: Make the REQUEST_SCHEME variable available to
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley scripts and mod_rewrite. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_rewrite: Allow to use arbitrary boolean expressions (ap_expr) in
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley RewriteCond. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_rewrite: Allow to unset environment variables using E=!VAR.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 49512. [Mark Drayton <mark markdrayton info>, Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_headers: Restore the 2.3.8 and earlier default for the first
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley argument of the Header directive ("onsuccess"). [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Disallow the mixing of relative and absolute Options PR 33708.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Sönke Tesch <st kino-fahrplan.de>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: When exporting request headers to HTTP_* environment variables,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley drop variables whose names contain invalid characters. Describe in the
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley docs how to restore the old behaviour. [Malte S. Stretz <mss apache org>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: When selecting an IP-based virtual host, favor an exact match for
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley the port over a wildcard (or omitted) port instead of favoring the one
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley that came first in the configuration file. [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Overlapping virtual host address/port combinations now implicitly
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley enable name-based virtual hosting for that address. The NameVirtualHost
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley directive has no effect, and _default_ is interpreted the same as "*".
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: In the absence of any Options directives, the default is now
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley "FollowSymlinks" instead of "All". [Igor Galić]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) rotatelogs: Add -e option to write logs through to stdout for optional
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley further processing. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Correctly read full lines in input filter when the line is
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley incomplete during first read. PR 50481. [Ruediger Pluem]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_authz_core: Add AuthzSendForbiddenOnFailure directive to allow
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley sending '403 FORBIDDEN' instead of '401 UNAUTHORIZED' if authorization
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley fails for an authenticated user. PR 40721. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob HalleyChanges with Apache 2.3.10
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_rewrite: Don't implicitly URL-escape the original query string
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley when no substitution has changed it. PR 50447. [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Honor 'AcceptPathInfo OFF' during internal redirects,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley such as per-directory mod_rewrite substitutions. PR 50349.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_rewrite: Add 'RewriteOptions InheritBefore' to put the base
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley rules/conditions before the overridden rules/conditions. PR 39313.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_autoindex: add IndexIgnoreReset to reset the list of IndexIgnored
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley filenames in higher precedence configuration sections. PR 24243.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cgid: RLimit* directive support for mod_cgid. PR 42135
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Fail startup when the argument to ServerName looks like a glob
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley or a regular expression instead of a hostname (*?[]). PR 39863
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_userdir: Add merging of enable, disable, and filename arguments
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley to UserDir directive, leaving enable/disable of userlists unmerged.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 44076 [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) httpd: When no -k option is provided on the httpd command line, the server
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley was starting without checking for an existing pidfile. PR 50350
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy: Put the worker in error state if the SSL handshake with the
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley backend fails. PR 50332.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Daniel Ruggeri <DRuggeri primary.net>, Ruediger Pluem]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cache_disk: Fix Windows build which was broken after renaming
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley the module. [Gregg L. Smith]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob HalleyChanges with Apache 2.3.9
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) SECURITY: CVE-2010-1623 (cve.mitre.org)
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Fix a denial of service attack against mod_reqtimeout.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_headers: Change default first argument of Header directive
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley from "onsuccess" to "always". [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_include: Add the onerror attribute to the include element,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley allowing an URL to be specified to include on error. [Graham
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cache_disk: mod_disk_cache renamed to mod_cache_disk, to be
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley consistent with the naming of other modules. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_setenvif: Add SetEnvIfExpr directive to set env var depending on
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley expression. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy: Fix ProxyPassInterpolateEnv directive. PR 50292.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) suEXEC: Add Suexec directive to disable suEXEC without renaming the
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley binary (Suexec Off), or force startup failure if suEXEC is required
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley but not supported (Suexec On). Change SuexecUserGroup to fail
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley startup instead of just printing a warning if suEXEC is disabled.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Add Error directive for aborting startup or htaccess processing
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley with a specified error message. [Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_rewrite: Fix the RewriteEngine directive to work within a
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley location. Previously, once RewriteEngine was switched on globally,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley it was impossible to switch off. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core, mod_include, mod_ssl: Move the expression parser derived from
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley mod_include back into mod_include. Replace ap_expr with a parser
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley derived from mod_ssl's parser. Make mod_ssl use the new parser. Rework
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley ap_expr's public interface and provide hooks for modules to add variables
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley and functions. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Do the hook sorting earlier so that the hooks are properly sorted
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley for the pre_config hook and during parsing the config. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: In the absence of any AllowOverride directives, the default is now
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley "None" instead of "All". PR49823 [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy: Don't allow ProxyPass or ProxyPassReverse in
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley <Directory> or <Files>. PR47765 [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) prefork/worker/event MPMS: default value (when no directive is present)
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley of MaxConnectionsPerChild/MaxRequestsPerChild is changed to 0 from 10000
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley to match default configuration and manual. PR47782 [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) proxy_connect: Don't give up in the middle of a CONNECT tunnel
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley when the child process is starting to exit. PR50220. [Eric Covener]
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson *) mod_autoindex: Fix inheritance of mod_autoindex directives into
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley contexts that don't have any mod_autoindex directives. PR47766.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_rewrite: Add END flag for RewriteRule to prevent further rounds
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley of rewrite processing when a per-directory substitution occurs.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Make sure to always log an error if loading of CA certificates
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley fails. PR 40312. [Paul Tiemann <issues apache org ourdetour com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_dav: Send 501 error if unknown Content-* header is received for a PUT
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley request (RFC 2616 9.6). PR 42978. [Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_dav: Send 400 error if malformed Content-Range header is received for
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley a put request (RFC 2616 14.16). PR 49825. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy: Release the backend connection as soon as EOS is detected,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley so the backend isn't forced to wait for the client to eventually
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley acknowledge the data. [Graham Leggett]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_proxy: Optimise ProxyPass within a Location so that it is stored
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson per-directory, and chosen during the location walk. Make ProxyPass
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff work correctly from within a LocationMatch. [Graham Leggett]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) core: Fix segfault if per-module LogLevel is on virtual host
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff scope. PR 50117. [Stefan Fritsch]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_proxy: Move the ProxyErrorOverride directive to have per
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff directory scope. [Graham Leggett]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_allowmethods: New module to deny certain HTTP methods without
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff interfering with authentication/authorization. [Paul Querna,
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff Igor Galić, Stefan Fritsch]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_ssl: Log certificate information and improve error message if client
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff cert verification fails. PR 50093, PR 50094. [Lassi Tuura <lat cern ch>,
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff Stefan Fritsch]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) htcacheclean: Teach htcacheclean to limit cache size by number of
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff inodes in addition to size of files. Prevents a cache disk from
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff running out of space when many small files are cached.
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff [Graham Leggett]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) core: Rename MaxRequestsPerChild to MaxConnectionsPerChild, which
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff describes more accurately what the directive does. The old name
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff still works but logs a warning. [Stefan Fritsch]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_cache: Optionally serve stale data when a revalidation returns a
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff 5xx response, controlled by the CacheStaleOnError directive.
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff [Graham Leggett]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) htcacheclean: Allow the listing of valid URLs within the cache, with
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff the option to list entry metadata such as sizes and times. [Graham
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_cache: correctly parse quoted strings in cache headers.
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff PR 50199 [Nick Kew]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_cache: Allow control over the base URL of reverse proxied requests
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley using the CacheKeyBaseURL directive, so that the cache key can be
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff calculated from the endpoint URL instead of the server URL. [Graham
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_cache: CacheLastModifiedFactor, CacheStoreNoStore, CacheStorePrivate,
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff CacheStoreExpired, CacheIgnoreNoLastMod, CacheDefaultExpire,
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff CacheMinExpire and CacheMaxExpire can be set per directory/location.
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff [Graham Leggett]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_disk_cache: CacheMaxFileSize, CacheMinFileSize, CacheReadSize and
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff CacheReadTime can be set per directory/location. [Graham Leggett]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) core: Speed up config parsing if using a very large number of config
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff files. PR 50002 [andrew cloudaccess net]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_cache: Support the caching of HEAD requests. [Graham Leggett]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) htcacheclean: Allow the option to round up file sizes to a given
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff block size, improving the accuracy of disk usage. [Graham Leggett]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_ssl: Add authz providers for use with mod_authz_core and its
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff RequireAny/RequireAll containers: 'ssl' (equivalent to SSLRequireSSL),
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff 'ssl-verify-client' (for use with 'SSLVerifyClient optional'), and
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff 'ssl-require' (expressions with same syntax as SSLRequire).
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff [Stefan Fritsch]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_ssl: Make the ssl expression parser thread-safe. It now requires
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff bison instead of yacc. [Stefan Fritsch]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_disk_cache: Change on-disk header file format to support the
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson link of the device/inode of the data file to the matching header
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff file, and to support the option of not writing a data file when
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff the data file is empty. [Graham Leggett]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) core/mod_unique_id: Add generate_log_id hook to allow to use
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley the ID generated by mod_unique_id as error log ID for requests.
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff [Stefan Fritsch]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_cache: Make sure that we never allow a 304 Not Modified response
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff that we asked for to leak to the client should the 304 response be
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff uncacheable. PR45341 [Graham Leggett]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_cache: Add the cache_status hook to register the final cache
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley decision hit/miss/revalidate. Add optional support for an X-Cache
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley and/or an X-Cache-Detail header to add the cache status to the
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff response. PR48241 [Graham Leggett]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_authz_host: Add 'local' provider that matches connections originating
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff on the local host. PR 19938. [Stefan Fritsch]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) Event MPM: Fix crash accessing pollset on worker thread when child
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff process is exiting. [Jeff Trawick]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) core: For process invocation (cgi, fcgid, piped loggers and so forth)
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff pass the system library path (LD_LIBRARY_PATH or platform-specific
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff variables) along with the system PATH, by default. Both should be
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff overridden together as desired using PassEnv etc; see mod_env.
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff [William Rowe]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_cache: Introduce CacheStoreExpired, to allow administrators to
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff capture a stale backend response, perform If-Modified-Since requests
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff against the backend, and serving from the cache all 304 responses.
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff This restores pre-2.2.4 cache behavior. [William Rowe]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_rewrite: Introduce <=, >= string comparison operators, and integer
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff comparators -lt, -le, -eq, -ge, and -gt. To help bash users and drop
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff the ambiguity of the symlink test "-ltest", introduce -h or -L as
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff symlink test operators. [William Rowe]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_cache: Give the cache provider the opportunity to choose to cache
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff or not cache based on the buckets present in the brigade, such as the
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff presence of a FILE bucket.
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff [Graham Leggett]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_authz_core: Allow authz providers to check args while reading the
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff config and allow to cache parsed args. Move 'all' and 'env' authz
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff providers from mod_authz_host to mod_authz_core. Add 'method' authz
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff provider depending on the HTTP method. [Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_include: Move the request_rec within mod_include to be
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff exposed within include_ctx_t. [Graham Leggett]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_include: Reinstate support for UTF-8 character sets by allowing a
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff variable being echoed or set to be decoded and then encoded as separate
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff steps. PR47686 [Graham Leggett]
ccdac53c027e8964753b36c4d8c7b0e98af501c2Michael Graff *) mod_cache: Add a discrete commit_entity() provider function within the
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence mod_cache provider interface which is called to indicate to the
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence provider that caching is complete, giving the provider the opportunity
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence to commit temporary files permanently to the cache in an atomic
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson fashion. Replace the inconsistent use of error cleanups with a formal
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence set of pool cleanups attached to a subpool, which is destroyed on error.
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence [Graham Leggett]
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence *) mod_cache: Change the signature of the store_body() provider function
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence within the mod_cache provider interface to support an "in" brigade
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence and an "out" brigade instead of just a single input brigade. This
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence gives a cache provider the option to consume only part of the brigade
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence passed to it, rather than the whole brigade as was required before.
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence This fixes an out of memory and a request timeout condition that would
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence occur when the original document was a large file. Introduce
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence CacheReadSize and CacheReadTime directives to mod_disk_cache to control
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence the amount of data to attempt to cache at a time. [Graham Leggett]
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence *) core: Add ErrorLogFormat to allow configuring error log format, including
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence additional information that is logged once per connection or request. Add
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence error log IDs for connections and request to allow correlating error log
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence lines and the corresponding access log entry. [Stefan Fritsch]
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence *) core: Disable sendfile by default. [Stefan Fritsch]
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence *) mod_cache: Check the request to determine whether we are allowed
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence to return cached content at all, and respect a "Cache-Control:
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence no-cache" header from a client. Previously, "no-cache" would
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence behave like "max-age=0". [Graham Leggett]
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence *) mod_cache: Use a proper filter context to hold filter data instead
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence of misusing the per-request configuration. Fixes a segfault on trunk
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence when the normal handler is used. [Graham Leggett]
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence *) mod_cgid: Log a warning if the ScriptSock path is truncated because
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence it is too long. PR 49388. [Stefan Fritsch]
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence *) vhosts: Do not allow _default_ in NameVirtualHost, or mixing *
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence and non-* ports on NameVirtualHost, or multiple NameVirtualHost
75a4dd0d377dca2f85cea44e28bf110314c1fe8cDavid Lawrence directives for the same address:port, or NameVirtualHost
f855bad4a1bf282fdddc59d89c33ff6813ab2800David Lawrence directives with no matching VirtualHosts, or multiple ip-based
f855bad4a1bf282fdddc59d89c33ff6813ab2800David Lawrence VirtualHost sections for the same address:port. These were
f855bad4a1bf282fdddc59d89c33ff6813ab2800David Lawrence previously accepted with a warning, but the behavior was
f855bad4a1bf282fdddc59d89c33ff6813ab2800David Lawrence undefined. [Dan Poirier]
f855bad4a1bf282fdddc59d89c33ff6813ab2800David Lawrence *) mod_remoteip: Fix a segfault when using mod_remoteip in conjunction with
f855bad4a1bf282fdddc59d89c33ff6813ab2800David Lawrence Allow/Deny. PR 49838. [Andrew Skalski <voltara gmail.com>]
f855bad4a1bf282fdddc59d89c33ff6813ab2800David Lawrence *) core: DirectoryMatch can now match on the end of line character ($),
f855bad4a1bf282fdddc59d89c33ff6813ab2800David Lawrence and sub-directories of matched directories are no longer implicitly
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff matched. PR49809 [Eric Covener]
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff *) Regexps: introduce new higher-level regexp utility including parsing
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff and executing perl-style regexp ops (e.g s/foo/bar/i) and regexp memory
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff *) Proxy: support setting source address. PR 29404
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff [Multiple contributors iterating through bugzilla,
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff Aron Ujvari <xanco nikhok.hu>, Aleksey Midenkov <asm uezku.kemsu.ru>,
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff <dan listening-station.net; trunk version Nick Kew]
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff *) HTTP protocol: return 400 not 503 if we have to abort due to malformed
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff chunked encoding. [Nick Kew]
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael GraffChanges with Apache 2.3.8
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff *) suexec: Support large log files. PR 45856. [Stefan Fritsch]
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff *) core: Abort with sensible error message if no or more than one MPM is
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff loaded. [Stefan Fritsch]
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff *) mod_proxy: Rename erroronstatus to failonstatus.
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff [Daniel Ruggeri <DRuggeri primary.net>]
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff *) mod_dav_fs: Fix broken "creationdate" property.
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff Regression in version 2.3.7. [Rainer Jung]
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael GraffChanges with Apache 2.3.7
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff *) SECURITY: CVE-2010-1452 (cve.mitre.org)
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff mod_dav, mod_cache, mod_session: Fix Handling of requests without a path
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff segment. PR: 49246 [Mark Drayton, Jeff Trawick]
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff *) mod_ldap: Properly check the result returned by apr_ldap_init. PR 46076.
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff [Stefan Fritsch]
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff *) mod_rewrite: Log errors if rewrite map files cannot be opened. PR 49639.
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff [Stefan Fritsch]
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff *) mod_proxy_http: Support the 'ping' property for backend HTTP/1.1 servers
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff via leveraging 100-Continue as the initial "request".
8e06cea14c857429ab7e7299af2dce5eeeaa5ff0Michael Graff [Jim Jagielski]
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence *) core/mod_authz_core: Introduce new access_checker_ex hook that enables
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence mod_authz_core to bypass authentication if access should be allowed by
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence IP address/env var/... [Stefan Fritsch]
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence *) core: Introduce note_auth_failure hook to allow modules to add support
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence for additional auth types. This makes ap_note_auth_failure() work with
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence mod_auth_digest again. PR 48807. [Stefan Fritsch]
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence *) socache modules: return APR_NOTFOUND when a lookup is not found [Nick Kew]
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence *) mod_authn_socache: new module [Nick Kew]
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence *) configure: Add reallyall option for --enable-mods-shared. [Stefan Fritsch]
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence *) Fix Windows build when using VC6. [Gregg L. Smith <lists glewis com>]
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence *) mod_rewrite: Allow to set environment variables without explicitly
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence giving a value. [Rainer Jung]
ae4cbb69eef32ced103fe4561e8d2031ee4c3497David Lawrence *) mod_rewrite: Remove superfluous EOL from rewrite logging. [Rainer Jung]
ae4cbb69eef32ced103fe4561e8d2031ee4c3497David Lawrence *) mod_include: recognise "text/html; parameters" as text/html
ae4cbb69eef32ced103fe4561e8d2031ee4c3497David Lawrence PR 49616 [Andrey Chernov <ache nagual.pp.ru>]
ae4cbb69eef32ced103fe4561e8d2031ee4c3497David Lawrence *) CGI vars: allow PATH to be set by SetEnv, consistent with LD_LIBRARY_PATH
ae4cbb69eef32ced103fe4561e8d2031ee4c3497David Lawrence PR 43906 [Nick Kew]
ae4cbb69eef32ced103fe4561e8d2031ee4c3497David Lawrence *) Core: Extra robustness: don't try authz and segfault if authn
ae4cbb69eef32ced103fe4561e8d2031ee4c3497David Lawrence fails to set r->user. Log bug and return 500 instead.
ae4cbb69eef32ced103fe4561e8d2031ee4c3497David Lawrence PR 42995 [Nick Kew]
ae4cbb69eef32ced103fe4561e8d2031ee4c3497David Lawrence *) HTTP protocol filter: fix handling of longer chunk extensions
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence *) Update SSL cipher suite and add example for SSLHonorCipherOrder.
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence [Lars Eilebrecht, Rainer Jung]
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence *) move AddOutputFilterByType from core to mod_filter. This should
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence fix nasty side-effects that happen when content_type is set
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence more than once in processing a request, and make it fully
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence compatible with dynamic and proxied contents. [Nick Kew]
0293ad13207aa29bd5844cdc87d085ffc009d749David Lawrence *) mod_log_config: Implement logging for sub second timestamps and
0293ad13207aa29bd5844cdc87d085ffc009d749David Lawrence request end time. [Rainer Jung]
0293ad13207aa29bd5844cdc87d085ffc009d749David LawrenceChanges with Apache 2.3.6
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence *) SECURITY: CVE-2009-3555 (cve.mitre.org)
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence mod_ssl: Comprehensive fix of the TLS renegotiation prefix injection
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence attack when compiled against OpenSSL version 0.9.8m or later. Introduces
0293ad13207aa29bd5844cdc87d085ffc009d749David Lawrence the 'SSLInsecureRenegotiation' directive to reopen this vulnerability
0293ad13207aa29bd5844cdc87d085ffc009d749David Lawrence and offer unsafe legacy renegotiation with clients which do not yet
0293ad13207aa29bd5844cdc87d085ffc009d749David Lawrence support the new secure renegotiation protocol, RFC 5746.
0293ad13207aa29bd5844cdc87d085ffc009d749David Lawrence [Joe Orton, and with thanks to the OpenSSL Team]
0293ad13207aa29bd5844cdc87d085ffc009d749David Lawrence *) SECURITY: CVE-2009-3555 (cve.mitre.org)
0293ad13207aa29bd5844cdc87d085ffc009d749David Lawrence mod_ssl: A partial fix for the TLS renegotiation prefix injection attack
0293ad13207aa29bd5844cdc87d085ffc009d749David Lawrence by rejecting any client-initiated renegotiations. Forcibly disable
0293ad13207aa29bd5844cdc87d085ffc009d749David Lawrence keepalive for the connection if there is any buffered data readable. Any
0293ad13207aa29bd5844cdc87d085ffc009d749David Lawrence configuration which requires renegotiation for per-directory/location
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence access control is still vulnerable, unless using OpenSSL >= 0.9.8l.
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence [Joe Orton, Ruediger Pluem, Hartmut Keil <Hartmut.Keil adnovum.ch>]
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence *) SECURITY: CVE-2010-0408 (cve.mitre.org)
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence mod_proxy_ajp: Respond with HTTP_BAD_REQUEST when the body is not sent
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence when request headers indicate a request body is incoming; not a case of
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence HTTP_INTERNAL_SERVER_ERROR. [Niku Toivola <niku.toivola sulake.com>]
657ce0b9d84fbd66514df53d61a087e8f1161187Michael Graff *) SECURITY: CVE-2010-0425 (cve.mitre.org)
657ce0b9d84fbd66514df53d61a087e8f1161187Michael Graff mod_isapi: Do not unload an isapi .dll module until the request
657ce0b9d84fbd66514df53d61a087e8f1161187Michael Graff processing is completed, avoiding orphaned callback pointers.
657ce0b9d84fbd66514df53d61a087e8f1161187Michael Graff [Brett Gervasoni <brettg senseofsecurity.com>, Jeff Trawick]
1ce985ab3c6670662d555c108b35fed84a6a1001David Lawrence *) core: Filter init functions are now run strictly once per request
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence before handler invocation. The init functions are no longer run
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence for connection filters. PR 49328. [Joe Orton]
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence *) core: Adjust the output filter chain correctly in an internal
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence redirect from a subrequest, preserving filters from the main
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence request as necessary. PR 17629. [Joe Orton]
4bcaefbcd3ced942139fdc830e007c6ea2b8d2feDavid Lawrence *) mod_cache: Explicitly allow cache implementations to cache a 206 Partial
4bcaefbcd3ced942139fdc830e007c6ea2b8d2feDavid Lawrence Response if they so choose to do so. Previously an attempt to cache a 206
4bcaefbcd3ced942139fdc830e007c6ea2b8d2feDavid Lawrence was arbitrarily allowed if the response contained an Expires or
4bcaefbcd3ced942139fdc830e007c6ea2b8d2feDavid Lawrence Cache-Control header, and arbitrarily denied if both headers were missing.
4bcaefbcd3ced942139fdc830e007c6ea2b8d2feDavid Lawrence [Graham Leggett]
4bcaefbcd3ced942139fdc830e007c6ea2b8d2feDavid Lawrence *) core: Add microsecond timestamp fractions, process id and thread id
4bcaefbcd3ced942139fdc830e007c6ea2b8d2feDavid Lawrence to the error log. [Rainer Jung]
4bcaefbcd3ced942139fdc830e007c6ea2b8d2feDavid Lawrence *) configure: The "most" module set gets build by default. [Rainer Jung]
4bcaefbcd3ced942139fdc830e007c6ea2b8d2feDavid Lawrence *) configure: Building dynamic modules (DSO) by default. [Rainer Jung]
4bcaefbcd3ced942139fdc830e007c6ea2b8d2feDavid Lawrence *) configure: Fix broken VPATH build when using included APR.
4bcaefbcd3ced942139fdc830e007c6ea2b8d2feDavid Lawrence [Rainer Jung]
657ce0b9d84fbd66514df53d61a087e8f1161187Michael Graff *) mod_session_crypto: Fix configure problem when building
657ce0b9d84fbd66514df53d61a087e8f1161187Michael Graff with APR 2 and for VPATH builds with included APR.
657ce0b9d84fbd66514df53d61a087e8f1161187Michael Graff [Rainer Jung]
657ce0b9d84fbd66514df53d61a087e8f1161187Michael Graff *) mod_session_crypto: API compatibility with APR 2 crypto and
657ce0b9d84fbd66514df53d61a087e8f1161187Michael Graff APR Util 1.x crypto. [Rainer Jung]
657ce0b9d84fbd66514df53d61a087e8f1161187Michael Graff *) ab: Fix memory leak with -v2 and SSL. PR 49383.
657ce0b9d84fbd66514df53d61a087e8f1161187Michael Graff [Pavel Kankovsky <peak argo troja mff cuni cz>]
e915367e40b579d18ac13c9c58c15fec614d9890Michael Graff *) core: Add per-module and per-directory loglevel configuration.
e915367e40b579d18ac13c9c58c15fec614d9890Michael Graff Add some more trace logging.
e915367e40b579d18ac13c9c58c15fec614d9890Michael Graff mod_rewrite: Replace RewriteLog/RewriteLogLevel with trace log levels.
e915367e40b579d18ac13c9c58c15fec614d9890Michael Graff mod_ssl: Replace LogLevelDebugDump with trace log levels.
08a768e82ad64ede97f640c88e02984b59122753Michael Graff mod_ssl/mod_proxy*: Adjust loglevels to be less verbose at levels info
08a768e82ad64ede97f640c88e02984b59122753Michael Graff mod_dumpio: Replace DumpIOLogLevel with trace log levels.
e915367e40b579d18ac13c9c58c15fec614d9890Michael Graff [Stefan Fritsch]
08a768e82ad64ede97f640c88e02984b59122753Michael Graff *) mod_ldap: LDAP caching was suppressed (and ldap-status handler returns
08a768e82ad64ede97f640c88e02984b59122753Michael Graff title page only) when any mod_ldap directives were used in VirtualHost
08a768e82ad64ede97f640c88e02984b59122753Michael Graff context. [Eric Covener]
e915367e40b579d18ac13c9c58c15fec614d9890Michael Graff *) mod_disk_cache: Decline the opportunity to cache if the response is
e915367e40b579d18ac13c9c58c15fec614d9890Michael Graff a 206 Partial Content. This stops a reverse proxied partial response
e915367e40b579d18ac13c9c58c15fec614d9890Michael Graff from becoming cached, and then being served in subsequent responses.
08a768e82ad64ede97f640c88e02984b59122753Michael Graff [Graham Leggett]
08a768e82ad64ede97f640c88e02984b59122753Michael Graff *) mod_deflate: avoid the risk of forwarding data before headers are set.
08a768e82ad64ede97f640c88e02984b59122753Michael Graff PR 49369 [Matthew Steele <mdsteele google.com>]
08a768e82ad64ede97f640c88e02984b59122753Michael Graff *) mod_authnz_ldap: Ensure nested groups are checked when the
08a768e82ad64ede97f640c88e02984b59122753Michael Graff top-level group doesn't have any direct non-group members
08a768e82ad64ede97f640c88e02984b59122753Michael Graff of attributes in AuthLDAPGroupAttribute. [Eric Covener]
08a768e82ad64ede97f640c88e02984b59122753Michael Graff *) mod_authnz_ldap: Search or Comparison during authorization phase
08a768e82ad64ede97f640c88e02984b59122753Michael Graff can use the credentials from the authentication phase
08a768e82ad64ede97f640c88e02984b59122753Michael Graff (AuthLDAPSearchAsUSer,AuthLDAPCompareAsUser).
08a768e82ad64ede97f640c88e02984b59122753Michael Graff PR 48340 [Domenico Rotiroti, Eric Covener]
08a768e82ad64ede97f640c88e02984b59122753Michael Graff *) mod_authnz_ldap: Allow the initial DN search during authentication
08a768e82ad64ede97f640c88e02984b59122753Michael Graff to use the HTTP username/pass instead of an anonymous or hard-coded
08a768e82ad64ede97f640c88e02984b59122753Michael Graff LDAP id (AuthLDAPInitialBindAsUser, AuthLDAPInitialBindPattern).
08a768e82ad64ede97f640c88e02984b59122753Michael Graff [Eric Covener]
08a768e82ad64ede97f640c88e02984b59122753Michael Graff *) mod_authnz_ldap: Publish requested LDAP data with an AUTHORIZE_ prefix
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson when this module is used for authorization. See AuthLDAPAuthorizePrefix.
08a768e82ad64ede97f640c88e02984b59122753Michael Graff PR 45584 [Eric Covener]
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson *) apxs -q: Stop filtering out ':' characters from the reported values.
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson PR 45343. [Bill Cole]
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson *) prefork MPM: Work around possible crashes on child exit in APR reslist
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson cleanup code. PR 43857. [Tom Donovan]
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence *) ab: fix number of requests sent by ab when keepalive is enabled. PR 48497.
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson [Bryn Dole <dole blekko.com>]
ea31416b4fcdf23732355a8002f93f29e3b3d2dbAndreas Gustafsson *) Log an error for failures to read a chunk-size, and return 408 instead of
ea31416b4fcdf23732355a8002f93f29e3b3d2dbAndreas Gustafsson 413 when this is due to a read timeout. This change also fixes some cases
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson of two error documents being sent in the response for the same scenario.
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson [Eric Covener] PR49167
ea31416b4fcdf23732355a8002f93f29e3b3d2dbAndreas Gustafsson *) mod_proxy_balancer: Add new directive BalancerNonce to allow admin
ea31416b4fcdf23732355a8002f93f29e3b3d2dbAndreas Gustafsson to control/set the nonce used in the balancer-manager application.
ea31416b4fcdf23732355a8002f93f29e3b3d2dbAndreas Gustafsson [Jim Jagielski]
ea31416b4fcdf23732355a8002f93f29e3b3d2dbAndreas Gustafsson *) mod_proxy_connect: Support port ranges in AllowConnect. PR 23673.
ea31416b4fcdf23732355a8002f93f29e3b3d2dbAndreas Gustafsson [Stefan Fritsch]
ea31416b4fcdf23732355a8002f93f29e3b3d2dbAndreas Gustafsson *) Proxy balancer: support setting error status according to HTTP response
ea31416b4fcdf23732355a8002f93f29e3b3d2dbAndreas Gustafsson code from a backend. PR 48939. [Daniel Ruggeri <DRuggeri primary.net>]
971d1fe83172bce09d6319c5735d243d68d8cb47Andreas Gustafsson *) htcacheclean: Introduce the ability to clean specific URLs from the
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson cache, if provided as an optional parameter on the command line.
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson [Graham Leggett]
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson *) core: Introduce the IncludeStrict directive, which explicitly fails
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson server startup if no files or directories match a wildcard path.
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson [Graham Leggett]
ea31416b4fcdf23732355a8002f93f29e3b3d2dbAndreas Gustafsson *) htcacheclean: Report additional statistics about entries deleted.
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson PR 48944. [Mark Drayton mark markdrayton.info]
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson *) Introduce SSLFIPS directive to support OpenSSL FIPS_mode; permits all
ea31416b4fcdf23732355a8002f93f29e3b3d2dbAndreas Gustafsson builds of mod_ssl to use 'SSLFIPS off' for portability, but the proper
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson build of openssl is required for 'SSLFIPS on'. PR 46270.
ea31416b4fcdf23732355a8002f93f29e3b3d2dbAndreas Gustafsson [Dr Stephen Henson <steve openssl.org>, William Rowe]
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson *) mod_proxy_http: Log the port of the remote server in various messages.
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson PR 48812. [Igor Galić <i galic brainsware org>]
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson *) mod_reqtimeout: Do not wrongly enforce timeouts for mod_proxy's backend
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson connections and other protocol handlers (like mod_ftp). [Stefan Fritsch]
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson *) mod_proxy_ajp: Really regard the operation a success, when the client
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson aborted the connection. In addition adjust the log message if the client
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson aborted the connection. [Ruediger Pluem]
ea31416b4fcdf23732355a8002f93f29e3b3d2dbAndreas Gustafsson *) mod_ssl: Add the 'SSLInsecureRenegotiation' directive, which
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley allows insecure renegotiation with clients which do not yet
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley support the secure renegotiation protocol. [Joe Orton]
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson *) mod_ssl: Fix a potential I/O hang if a long list of trusted CAs
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley is configured for client cert auth. PR 46952. [Joe Orton]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Only log a 408 if it is no keepalive timeout. PR 39785
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Ruediger Pluem, Mark Montague <markmont umich.edu>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) support/rotatelogs: Add -L option to create a link to the current
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley log file. PR 48761 [<lyndon orthanc.ca>, Dan Poirier]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_ldap: Update LDAPTrustedClientCert to consistently be a per-directory
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley setting only, matching most of the documentation and examples.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 46541 [Paul Reder, Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ldap: LDAPTrustedClientCert now accepts CA_DER/CA_BASE64 argument
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley types previously allowed only in LDAPTrustedGlobalCert. [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_negotiation: Preserve query string over multiviews negotiation.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley This buglet was fixed for type maps in 2.2.6, but the same issue
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley affected multiviews and was overlooked.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 33112 [Joergen Thomsen <apache jth.net>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ldap: Eliminate a potential crash with multiple LDAPTrustedClientCert
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley when some are not password-protected. [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Fix startup segfault when the Mutex directive is used but no loaded
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley modules use httpd mutexes. PR 48787. [Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Proxy: get the headers right in a HEAD request with
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley ProxyErrorOverride, by checking for an overridden error
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley before not after going into a catch-all code path.
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson PR 41646. [Nick Kew, Stuart Children]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) support/rotatelogs: Support the simplest log rotation case, log
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley truncation. Useful when the log is being processed in real time
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley using a command like tail. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) support/htcacheclean: Teach it how to write a pid file (modelled on
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley httpd's writing of a pid file) so that it becomes possible to run
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley more than one instance of htcacheclean on the same machine.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Log command line on startup, so there's a record of command line
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley arguments like -f. PR 48752. [Dan Poirier]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Introduce mod_reflector, a handler capable of reflecting POSTed
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley request bodies back within the response through the output filter
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley stack. Can be used to turn an output filter into a web service.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_http: Make sure that when an ErrorDocument is served
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley from a reverse proxied URL, that the subrequest respects the status
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley of the original request. This brings the behaviour of proxy_handler
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley in line with default_handler. PR 47106. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Support wildcards in both the directory and file components of
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley the path specified by the Include directive. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy, mod_proxy_http: Support remote https proxies
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley by using HTTP CONNECT. PR 19188.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Philippe Dutrueux <lilas evidian.com>, Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) apxs: Fix -A and -a options to ignore whitespace in httpd.conf
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Philip M. Gollucci]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) worker: Don't report server has reached MaxClients until it has.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Add message when server gets within MinSpareThreads of MaxClients.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 46996. [Dan Poirier]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_session: Session expiry was being initialised, but not updated
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley on each session save, resulting in timed out sessions when there
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley should not have been. Fixed. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_log_config: Add the R option to log the handler used within the
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley request. [Christian Folini <christian.folini netnea com>]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_include: Allow fine control over the removal of Last-Modified and
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley ETag headers within the INCLUDES filter, making it possible to cache
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley responses if desired. Fix the default value of the SSIAccessEnable
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley directive. [Graham Leggett]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) Add new UnDefine directive to undefine a variable. PR 35350.
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson [Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) Make ap_pregsub(), used by AliasMatch and friends, use the same syntax
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley for regex backreferences as mod_rewrite and mod_include: Remove the use
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley of '&' as an alias for '$0' and allow to escape any character with a
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley backslash. PR 48351. [Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_authnz_ldap: If AuthLDAPCharsetConfig is set, also convert the
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley password to UTF-8. PR 45318.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley [Johannes Müller <joh_m gmx.de>, Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) ab: Fix calculation of requests per second in HTML output. PR 48594.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley [Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_authnz_ldap: Failures to map a username to a DN, or to check a user
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley password now result in an informational level log entry instead of
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley warning level. [Eric Covener]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob HalleyChanges with Apache 2.3.5
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) SECURITY: CVE-2010-0434 (cve.mitre.org)
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley Ensure each subrequest has a shallow copy of headers_in so that the
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley parent request headers are not corrupted. Eliminates a problematic
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley optimization in the case of no request body. PR 48359
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley [Jake Scott, William Rowe, Ruediger Pluem]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) Turn static function get_server_name_for_url() into public
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley ap_get_server_name_for_url() and use it where appropriate. This
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley fixes mod_rewrite generating invalid URLs for redirects to IPv6
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley literal addresses. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ldap: Introduce new config option LDAPTimeout to set the timeout
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson for LDAP operations like bind and search. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy, mod_proxy_ftp: Move ProxyFtpDirCharset from mod_proxy to
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley mod_proxy_ftp. [Takashi Sato]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy, mod_proxy_connect: Move AllowCONNECT from mod_proxy to
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley mod_proxy_connect. [Takashi Sato]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cache: Do an exact match of the keys defined by
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley CacheIgnoreURLSessionIdentifiers against the querystring instead of
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley a partial match. PR 48401.
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson [Dodou Wang <wangdong.08 gmail.com>, Ruediger Pluem]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_proxy_balancer: Fix crash in balancer-manager. [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Core HTTP: disable keepalive when the Client has sent
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson Expect: 100-continue
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley but we respond directly with a non-100 response.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Keepalive here led to data from clients continuing being treated as
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley a new request.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 47087 [Nick Kew]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Core: reject NULLs in request line or request headers.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 43039 [Nick Kew]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Core: (re)-introduce -T commandline option to suppress documentroot
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley check at startup.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 41887 [Jan van den Berg <janvdberg gmail.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_autoindex: support XHTML as equivalent to HTML in IndexOptions,
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley ScanHTMLTitles, ReadmeName, HeaderName
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley PR 48416 [Dmitry Bakshaev <dab18 izhnet.ru>, Nick Kew]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) Proxy: Fix ProxyPassReverse with relative URL
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley Derived (slightly erroneously) from PR 38864 [Nick Kew]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_headers: align Header Edit with Header Set when used on Content-Type
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 48422 [Cyril Bonté <cyril.bonte free.fr>, Nick Kew>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_headers: Enable multi-match-and-replace edit option
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 46594 [Nick Kew]
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson *) mod_filter: enable it to act on non-200 responses.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 48377 [Nick Kew]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob HalleyChanges with Apache 2.3.4
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson *) Replace AcceptMutex, LockFile, RewriteLock, SSLMutex, SSLStaplingMutex,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley and WatchdogMutexPath with a single Mutex directive. Add APIs to
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley simplify setup and user customization of APR proc and global mutexes.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley (See util_mutex.h.) Build-time setting DEFAULT_LOCKFILE is no longer
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley respected; set DEFAULT_REL_RUNTIMEDIR instead. [Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) http_core: KeepAlive no longer accepts other than On|Off.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Takashi Sato]
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson *) mod_dav: Remove errno from dav_error interface. Calls to dav_new_error()
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley and dav_new_error_tag() must be adjusted to add an apr_status_t parameter.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_authnz_ldap: Add AuthLDAPBindAuthoritative to allow Authentication to
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley try other providers in the case of an LDAP bind failure.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 46608 [Justin Erenkrantz, Joe Schaefer, Tony Stevenson]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Build: fix --with-module to work as documented
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 43881 [Gez Saunders <gez.saunders virgin.net>]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob HalleyChanges with Apache 2.3.3
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) SECURITY: CVE-2009-3095 (cve.mitre.org)
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley mod_proxy_ftp: sanity check authn credentials.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley [Stefan Fritsch <sf fritsch.de>, Joe Orton]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) SECURITY: CVE-2009-3094 (cve.mitre.org)
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley mod_proxy_ftp: NULL pointer dereference on error paths.
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson [Stefan Fritsch <sf fritsch.de>, Joe Orton]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: enable support for ECC keys and ECDH ciphers. Tested against
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley OpenSSL 1.0.0b3. [Vipul Gupta <vipul.gupta sun.com>, Sander Temme]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_dav: Include uri when logging a PUT error due to connection abort.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 38149. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_dav: Return 409 instead of 500 for a LOCK request if the parent
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley resource does not exist or is not a collection. PR 43465. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_dav_fs: Return 409 instead of 500 for Litmus test case copy_nodestcoll
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley (a COPY request where the parent of the destination resource does not
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley exist). PR 39299. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_dav_fs: Don't delete the whole file if a PUT with content-range failed.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley PR 42896. [Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_dav_fs: Make PUT create files atomically and no longer destroy the
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley old file if the transfer aborted. PR 39815. [Paul Querna, Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_dav_fs: Remove inode keyed locking as this conflicts with atomically
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley creating files. On systems with inode numbers, this is a format change of
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley the DavLockDB. The old DavLockDB must be deleted on upgrade.
d8dcd6ad4617cc8d7df979bd62101fa9c4bac1bcBob Halley [Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_log_config: Make ${cookie}C correctly match whole cookie names
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley instead of substrings. PR 28037. [Dan Franklin <dan dan-franklin.com>,
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley Stefan Fritsch]
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister *) vhost: A purely-numeric Host: header should not be treated as a port.
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister PR 44979 [Nick Kew]
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister *) mod_ldap: Avoid 500 errors with "Unable to set LDAP_OPT_REFHOPLIMIT option to 5"
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister when built against openldap by using SDK LDAP_OPT_REFHOPLIMIT defaults unless
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister LDAPReferralHopLimit is explicitly configured.
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister [Eric Covener]
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister *) mod_charset_lite: Honor 'CharsetOptions NoImplicitAdd'.
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister [Eric Covener]
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister *) mod_ssl: Add support for OCSP Stapling. PR 43822.
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister [Dr Stephen Henson <shenson oss-institute.org>]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_socache_shmcb: Allow parens in file name if cache size is given.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley Fixes SSLSessionCache directive mis-parsing parens in pathname.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley PR 47945. [Stefan Fritsch]
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister *) htpasswd: Improve out of disk space handling. PR 30877. [Stefan Fritsch]
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister *) htpasswd: Use MD5 hash by default on all platforms. [Stefan Fritsch]
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister *) mod_sed: Reduce memory consumption when processing very long lines.
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister PR 48024 [Basant Kumar Kukreja <basant.kukreja sun.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) ab: Fix segfault in case the argument for -n is a very large number.
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister PR 47178. [Philipp Hagemeister <oss phihag.de>]
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister *) Allow ProxyPreserveHost to work in <Proxy> sections. PR 34901.
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister [Stefan Fritsch]
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister *) configure: Fix THREADED_MPMS so that mod_cgid is enabled again
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister for worker MPM. [Takashi Sato]
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister *) mod_dav: Provide a mechanism to obtain the request_rec and pathname
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister from the dav_resource. [Jari Urpalainen <jari.urpalainen nokia.com>,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Brian France <brian brianfrance.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Build: Use install instead of cp if available on installing
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson modules to avoid segmentation fault. PR 47951. [hirose31 gmail.com]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cache: correctly consider s-maxage in cacheability
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley decisions. [Dan Poirier]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_logio/core: Report more accurate byte counts in mod_status if
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley mod_logio is loaded. PR 25656. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ldap: If LDAPSharedCacheSize is too small, try harder to purge
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley some cache entries and log a warning. Also increase the default
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley LDAPSharedCacheSize to 500000. This is a more realistic size suitable
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley for the default values of 1024 for LdapCacheEntries/LdapOpCacheEntries.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 46749. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_rewrite: Make sure that a hostname:port isn't fully qualified if
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson the request is a CONNECT request. [Bill Zajac <billz consultla.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cache: Teach CacheEnable and CacheDisable to work from within a
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Location section, in line with how ProxyPass works. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_reqtimeout: New module to set timeouts and minimum data rates for
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson receiving requests from the client. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Fix potential memory leaks by making sure to not destroy
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley bucket brigades that have been created by earlier filters.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core, mod_deflate, mod_sed: Reduce memory usage by reusing bucket
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley brigades in several places. [Stefan Fritsch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cache: Fix uri_meets_conditions() so that CacheEnable will
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley match by scheme, or by a wildcarded hostname. PR 40169
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson [Peter Grandi <pg_asf asf.for.sabi.co.uk>, Graham Leggett]
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister *) suxec: Allow to log an error if exec fails by setting FD_CLOEXEC
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister on the log file instead of closing it. PR 10744. [Nicolas Rachinsky]
13494a4d4bead37f22eb6c4779c73310109f7e4aJames Brister *) mod_mime: Make RemoveType override the info from TypesConfig.
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson PR 38330. [Stefan Fritsch]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_cache: Introduce the option to run the cache from within the
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley normal request handler, and to allow fine grained control over
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley where in the filter chain content is cached. [Graham Leggett]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) core: Treat timeout reading request as 408 error, not 400.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley Log 408 errors in access log as was done in Apache 1.3.x.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley PR 39785 [Nobutaka Mantani <nobutaka nobutaka.org>,
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley Stefan Fritsch <sf fritsch.de>, Dan Poirier]
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson *) mod_ssl: Reintroduce SSL_CLIENT_S_DN, SSL_CLIENT_I_DN, SSL_SERVER_S_DN,
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley SSL_SERVER_I_DN back to the environment variables to be set by mod_ssl.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_disk_cache: don't cache incomplete responses, per RFC 2616, 13.8.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley PR15866. [Dan Poirier]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) ab: ab segfaults in verbose mode on https sites
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR46393. [Ryan Niebur]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_dav: Allow other modules to become providers and add resource types
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley to the DAV response. [Jari Urpalainen <jari.urpalainen nokia.com>,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Brian France <brian brianfrance.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_dav: Allow other modules to add things to the DAV or Allow headers
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley of an OPTIONS request. [Jari Urpalainen <jari.urpalainen nokia.com>,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Brian France <brian brianfrance.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Lower memory usage of core output filter.
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley [Stefan Fritsch <sf sfritsch.de>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_mime: Detect invalid use of MultiviewsMatch inside Location and
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley LocationMatch sections. PR47754. [Dan Poirier]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_request: Make sure the KeptBodySize directive rejects values
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley that aren't valid numbers. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_session_crypto: Sanity check should the potentially encrypted
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley session cookie be too short. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_session.c: Prevent a segfault when session is added but not
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson configured. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) htcacheclean: 19 ways to fail, 1 error message. Fixed. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_auth_digest: Fail server start when nonce count checking
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson is configured without shared memory, or md5-sess algorithm is
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley configured. [Dan Poirier]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_connect: The connect method doesn't work if the client is
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley connecting to the apache proxy through an ssl socket. Fixed.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR29744. [Brad Boyer, Mark Cave-Ayland, Julian Gilbey, Fabrice Durand,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley David Gence, Tim Dodge, Per Gunnar Hans, Emmanuel Elango,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Kevin Croft, Rudolf Cardinal]
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley *) mod_ssl: The error message when SSLCertificateFile is missing should
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley at least give the name or position of the problematic virtual host
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley definition. [Stefan Fritsch sf sfritsch.de]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_auth_digest: Fix null pointer when qop=none. [Dan Poirier]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Add support for HTTP PUT to ab. [Jeff Barnes <jbarnesweb yahoo.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_headers: generalise the envclause to support expression
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley evaluation with ap_expr parser [Nick Kew]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cache: Introduce the thundering herd lock, a mechanism to keep
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley the flood of requests at bay that strike a backend webserver as
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley a cached entity goes stale. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_auth_digest: Fix usage of shared memory and re-enable it.
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson PR 16057 [Dan Poirier]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Preserve Port information over internal redirects
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Proxy: unable to connect to a backend is SERVICE_UNAVAILABLE,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley rather than BAD_GATEWAY or (especially) NOT_FOUND.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 46971 [evanc nortel.com]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Various modules: Do better checking of pollset operations in order to
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley avoid segmentation faults if they fail. PR 46467
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Stefan Fritsch <sf sfritsch.de>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_autoindex: Correctly create an empty cell if the description
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley for a file is missing. PR 47682 [Peter Poeml <poeml suse.de>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) ab: Fix broken error messages after resolver or connect() failures.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) SECURITY: CVE-2009-1890 (cve.mitre.org)
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Fix a potential Denial-of-Service attack against mod_proxy in a
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley reverse proxy configuration, where a remote attacker can force a
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley proxy process to consume CPU time indefinitely. [Nick Kew, Joe Orton]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) SECURITY: CVE-2009-1191 (cve.mitre.org)
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley mod_proxy_ajp: Avoid delivering content from a previous request which
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley failed to send a request body. PR 46949 [Ruediger Pluem]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) htdbm: Fix possible buffer overflow if dbm database has very
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley long values. PR 30586 [Dan Poirier]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Return APR_EOF if request body is shorter than the length announced
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley by the client. PR 33098 [ Stefan Fritsch <sf sfritsch.de>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_suexec: correctly set suexec_enabled when httpd is run by a
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley non-root user and may have insufficient permissions.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 42175 [Jim Radford <radford blackbean.org>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Fix SSL_*_DN_UID variables to use the 'userID' attribute
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson type. PR 45107. [Michael Ströder <michael stroeder.com>,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_http: fix case sensitivity checking transfer encoding
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 47383 [Ryuzo Yamamoto <ryuzo.yamamoto gmail.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_alias: ensure Redirect issues a valid URL.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 44020 [HÃ¥kon Stordahl <hakon stordahl.org>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_dir: add FallbackResource directive, to enable admin to specify
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley an action to happen when a URL maps to no file, without resorting
1706598239da403b86f4befa4c08175d9e101014Andreas Gustafsson to ErrorDocument or mod_rewrite. PR 47184 [Nick Kew]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cgid: Do not leak the listening Unix socket file descriptor to the
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley CGI process. PR 47335 [Kornél Pál <kornelpal gmail.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_rewrite: Remove locking for writing to the rewritelog.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 46942 [Dan Poirier <poirier pobox.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_alias: check sanity in Redirect arguments.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 44729 [Sönke Tesch <st kino-fahrplan.de>, Jim Jagielski]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_http: fix Host: header for literal IPv6 addresses.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 47177 [Carlos Garcia Braschi <cgbraschi gmail.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cache: Add CacheIgnoreURLSessionIdentifiers directive to ignore
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley defined session identifiers encoded in the URL when caching.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Ruediger Pluem]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_rewrite: Fix the error string returned by RewriteRule.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley RewriteRule returned "RewriteCond: bad flag delimiters" when the 3rd
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley argument of RewriteRule was not started with "[" or not ended with "]".
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 45082 [Vitaly Polonetsky <m_vitaly topixoft.com>]
0adde9f4f9369b23c67b9a29e824dda09b19022fDavid Lawrence *) Windows: Fix usage message.
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) apachectl: When passing through arguments to httpd in
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley non-SysV mode, use the "$@" syntax to preserve arguments.
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_dbd: add DBDInitSQL directive to enable SQL statements to
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley be run when a connection is opened. PR 46827
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Marko Kevac <mkevac gmail.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cgid: Improve handling of long AF_UNIX socket names (ScriptSock).
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 47037. [Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_ajp: Check more strictly that the backend follows the AJP
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence protocol. [Mladen Turk]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_ajp: Forward remote port information by default.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Allow MPMs to be loaded dynamically, as with most other modules. Use
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley --enable-mpms-shared={list|"all"} to enable. This required changes to
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley the MPM interfaces. Removed: mpm.h, mpm_default.h (as an installed
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley header), APACHE_MPM_DIR, MPM_NAME, ap_threads_per_child,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley ap_max_daemons_limit, ap_my_generation, etc. ap_mpm_query() can't be
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley called until after the register-hooks phase. [Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Add SSLProxyCheckPeerExpire and SSLProxyCheckPeerCN directives
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley to enable stricter checking of remote server certificates.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Ruediger Pluem]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) ab: Fix a 100% CPU loop on platforms where a failed non-blocking connect
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley returns EINPROGRESS and a subsequent poll() returns only POLLERR.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Observed on HP-UX. [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Remove broken support for BeOS, TPF, and even older platforms such
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley as A/UX, Next, and Tandem. [Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_ftp: Add ProxyFtpListOnWildcard directive to allow files with
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley globbing characters to be retrieved instead of converted into a
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley directory listing. PR 46789 [Dan Poirier <poirier pobox.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Provide ap_retained_data_create()/ap_retained_data_get() for preservation
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence of module state across unload/load. [Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_substitute: Fix a memory leak. PR 44948
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Dan Poirier <poirier pobox.com>]
b06bc71d84698c480410478863d9b51589fa6d0cDavid LawrenceChanges with Apache 2.3.2
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_mime_magic: Fix detection of compressed content. [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_negotiation: Escape pathes of filenames in 406 responses to avoid
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley HTML injections and HTTP response splitting. PR 46837.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Geoff Keating <geoffk apple.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: add support for type-safe STACK constructs in OpenSSL
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley development HEAD. PR 45521. [Kaspar Brand, Sander Temme]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) ab: Fix maintenance of the pollset to resolve EALREADY errors
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley with kqueue (BSD/OS X) and excessive CPU with event ports (Solaris).
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 44584. Use APR_POLLSET_NOCOPY for better performance with some
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley pollset implementations. [Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_disk_cache: The module now turns off sendfile support if
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley 'EnableSendfile off' is defined globally. [Lars Eilebrecht]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_deflate: Adjust content metadata before bailing out on 304
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley responses so that the metadata does not differ from 200 response.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Roy T. Fielding]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_deflate: Fix creation of invalid Etag headers. We now make sure
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley that the Etag value is properly quoted when adding the gzip marker.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 39727, 45023. [Lars Eilebrecht, Roy T. Fielding]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Added 20x22 icons for ODF, SVG, and XML documents. PR 37185.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Peter Harlow]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Disabled DefaultType directive and removed ap_default_type()
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley from core. We now exclude Content-Type from responses for which
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley a media type has not been configured via mime.types, AddType,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley ForceType, or some other mechanism. PR 13986. [Roy T. Fielding]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_rewrite: Add IPV6 variable to RewriteCond
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Ryan Phillips <ryan-apache trolocsis.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Enhance KeepAliveTimeout to support a value in milliseconds.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 46275. [Takashi Sato]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) rotatelogs: Allow size units B, K, M, G and combination of
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley time and size based rotation. [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) rotatelogs: Add flag for verbose (debug) output. [Rainer Jung]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Fix merging of SSLRenegBufferSize directive. PR 46508
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [<tlhackque yahoo.com>]
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence *) core: Translate the the status line to ASCII on EBCDIC platforms in
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley ap_send_interim_response() and for locally generated "100 Continue"
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley responses. [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) prefork: Fix child process hang during graceful restart/stop in
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley configurations with multiple listening sockets. PR 42829. [Joe Orton,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Jeff Trawick]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_session_crypto: Ensure that SessionCryptoDriver can only be
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley set in the global scope. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ext_filter: We need to detect failure to startup the filter
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley program (a mangled response is not acceptable). Fix to detect
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley failure, and offer configuration option either to abort or
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley to remove the filter and continue.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 41120 [Nick Kew]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_session_crypto: Rewrite the session_crypto module against the
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley apr_crypto API. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_auth_form: Fix a pool lifetime issue, don't remove the subrequest
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence until the main request is cleaned up. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob HalleyChanges with Apache 2.3.1
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) ap_slotmem: Add in new slot-based memory access API impl., including
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley 2 providers (mod_sharedmem and mod_plainmem) [Jim Jagielski,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Jean-Frederic Clere, Brian Akins <brian.akins turner.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_include: support generating non-ASCII characters as entities in SSI
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 25202 [Nick Kew]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core/utils: Enhance ap_escape_html API to support escaping non-ASCII chars
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 25202 [Nick Kew]
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence *) mod_rewrite: fix "B" flag breakage by reverting r5589343
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 45529 [Bob Ionescu <bobsiegen googlemail.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) CGI: return 504 (Gateway timeout) rather than 500 when a script
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley times out before returning status line/headers.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 42190 [Nick Kew]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cgid: fix segfault problem on solaris.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 39332 [Masaoki Kobayashi <masaoki techfirm.co.jp>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_scgi: Added. [André Malo]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cache: Introduce 'no-cache' per-request environment variable
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley to prevent the saving of an otherwise cacheable response.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_rewrite: Introduce DiscardPathInfo|DPI flag to stop the troublesome
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley way that per-directory rewrites append the previous notion of PATH_INFO
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley to each substitution before evaluating subsequent rules.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 38642 [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_cgid: Do not add an empty argument when calling the CGI script.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 46380 [Ruediger Pluem]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) scoreboard: Remove unused sb_type from process_score.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Torsten Foertsch <torsten.foertsch gmx.net>, Chris Darroch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Add SSLRenegBufferSize directive to allow changing the
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley size of the buffer used for the request-body where necessary
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley during a per-dir renegotiation. PR 39243. [Joe Orton]
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence *) mod_proxy_fdpass: New module to pass a client connection over to a separate
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley process that is reading from a unix daemon socket.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Improve environment variable extraction to be more
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley efficient and to correctly handle DNs with duplicate tags.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 45975. [Joe Orton]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Remove the obsolete serial attribute from the RPM spec file. Compile
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley against the external pcre. Add missing binaries fcgistarter, and
64e41159a919b0711321fe688ca5da4f4d1b7d80Bob Halley mod_socache* and mod_session*. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob HalleyChanges with Apache 2.3.0
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ratelimit: New module to do bandwidth rate limiting. [Paul Querna]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Remove X-Pad header which was added as a work around to a bug in
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Netscape 2.x to 4.0b2. [Takashi Sato <takashi lans-tv.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Add DTrace Statically Defined Tracing (SDT) probes.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Theo Schlossnagle <jesus omniti.com>, Paul Querna]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_proxy_balancer: Move all load balancing implementations
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley as individual, self-contained mod_proxy submodules under
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Rename APIs to include ap_ prefix:
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley find_child_by_pid -> ap_find_child_by_pid
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley suck_in_APR -> ap_suck_in_APR
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence sys_privileges_handlers -> ap_sys_privileges_handlers
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley unixd_accept -> ap_unixd_accept
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley unixd_config -> ap_unixd_config
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley unixd_killpg -> ap_unixd_killpg
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley unixd_set_global_mutex_perms -> ap_unixd_set_global_mutex_perms
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence unixd_set_proc_mutex_perms -> ap_unixd_set_proc_mutex_perms
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley unixd_set_rlimit -> ap_unixd_set_rlimit
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Paul Querna]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_lbmethod_heartbeat: New module to load balance mod_proxy workers
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley based on heartbeats. [Paul Querna]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_heartmonitor: New module to collect heartbeats, and write out a file
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley so that other modules can load balance traffic as needed. [Paul Querna]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_heartbeat: New module to generate multicast heartbeats to know if a
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley server is online. [Paul Querna]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_buffer: Honour the flush bucket and flush the buffer in the
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley input filter. Make sure that metadata buckets are written to
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley the buffer, not to the final brigade. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_buffer: Optimise the buffering of heap buckets when the heap
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley buckets stay exactly APR_BUCKET_BUFF_SIZE long. [Graham Leggett,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Ruediger Pluem]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_buffer: Optional support for buffering of the input and output
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley filter stacks. Can collapse many small buckets into fewer larger
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley buckets, and prevents excessively small chunks being sent over
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley the wire. [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_privileges: new module to make httpd on Solaris privileges-aware
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley and to enable different virtualhosts to run with different
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley privileges and Unix user/group IDs [Nick Kew]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_mem_cache: this module has been removed. [William Rowe]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) authn/z: Remove mod_authn_default and mod_authz_default.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley [Chris Darroch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) authz: Fix handling of authz configurations, make default authz
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley logic replicate 2.2.x authz logic, and replace <Satisfy*>, Reject,
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley and AuthzMergeRules directives with Match, <Match*>, and AuthzMerge
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley directives. [Chris Darroch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_authn_core: Prevent crash when provider alias created to
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley provider which is not yet registered. [Chris Darroch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_authn_core: Add AuthType of None to support disabling
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley authentication. [Chris Darroch]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) core: Allow <Limit> and <LimitExcept> directives to nest, and
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley constrain their use to conform with that of other access control
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley and authorization directives. [Chris Darroch]
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence *) unixd: turn existing code into a module, and turn the set user/group
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley and chroot into a child_init function. [Nick Kew]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_dir: Support "DirectoryIndex disabled"
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley Suggested By André Warnier <aw ice-sa.com> [Eric Covener]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_ssl: Send Content-Type application/ocsp-request for POST requests to
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley OSCP responders. PR 46014 [Dr Stephen Henson <steve openssl.org>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_authnz_ldap: don't return NULL-valued environment variables to
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley other modules. PR 39045 [Francois Pesce <francois.pesce gmail.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Don't adjust case in pathname components that are not of interest
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley to mod_mime. Fixes mod_negotiation's use of such components.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley PR 43250 [Basant Kumar Kukreja <basant.kukreja sun.com>]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) Be tolerant in what you accept - accept slightly broken
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley status lines from a backend provided they include a valid status code.
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) New module mod_sed: filter Request/Response bodies through sed
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_auth_form: Make sure that basic authentication is correctly
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley faked directly after login. [Graham Leggett]
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence *) mod_session_cookie, mod_session_dbd: Make sure cookies are set both
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley within the output headers and error output headers, so that the
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley session is maintained across redirects. [Graham Leggett]
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley *) mod_auth_form: Make sure the logged in user is populated correctly
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley after a form login. Fixes a missing REMOTE_USER variable directly
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley following a login. [Graham Leggett]
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence *) mod_session_cookie: Make sure that cookie attributes are correctly
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley included in the blank cookie when cookies are removed. This fixes an
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley inability to log out when using mod_auth_form. [Graham Leggett]
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley *) mod_session: Prevent a segfault when a CGI script sets a cookie with a
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley null value. [David Shane Holden <dpejesh apache.org>]
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley *) core, authn/z: Determine registered authn/z providers directly in
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley ap_setup_auth_internal(), which allows optional functions that just
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley wrapped ap_list_provider_names() to be removed from authn/z modules.
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley [Chris Darroch]
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley *) authn/z: Convert common provider version strings to macros.
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley [Chris Darroch]
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley *) core: When testing for slash-terminated configuration paths in
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley ap_location_walk(), don't look past the start of an empty string
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley such as that created by a <Location ""> directive.
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley [Chris Darroch]
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley *) core, mod_proxy: If a kept_body is present, it becomes safe for
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley subrequests to support message bodies. Make sure that safety
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley checks within the core and within the proxy are not triggered
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley when kept_body is present. This makes it possible to embed
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley proxied POST requests within mod_include. [Graham Leggett]
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley *) mod_auth_form: Make sure the input filter stack is properly set
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley up before reading the login form. Make sure the kept body filter
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley is correctly inserted to ensure the body can be read a second
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley time safely should the authn be successful. [Graham Leggett,
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley Ruediger Pluem]
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley *) mod_request: Insert the KEPT_BODY filter via the insert_filter
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley hook instead of during fixups. Add a safety check to ensure the
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley filters cannot be inserted more than once. [Graham Leggett,
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley Ruediger Pluem]
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley *) ap_cache_cacheable_headers_out() will (now) always
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley merge an error headers _before_ clearing them and _before_
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence merging in the actual entity headers and doing normal
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley hop-by-hop cleansing. [Dirk-Willem van Gulik].
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley *) cache: retire ap_cache_cacheable_hdrs_out() which was used
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley for both in- and out-put headers; and replace it by a single
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley ap_cache_cacheable_headers() wrapped in a in- and out-put
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley specific ap_cache_cacheable_headers_in()/out(). The latter
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley which will also merge error and ensure content-type. To keep
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence cache modules consistent with ease. This API change bumps
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley up the minor MM by one [Dirk-Willem van Gulik].
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley *) Move the KeptBodySize directive, kept_body filters and the
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley ap_parse_request_body function out of the http module and into a
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley new module called mod_request, reducing the size of the core.
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley [Graham Leggett]
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley *) mod_dbd: Handle integer configuration directive parameters with a
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley dedicated function.
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence *) Change the directives within the mod_session* modules to be valid
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley both inside and outside the location/directory sections, as
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley suggested by wrowe. [Graham Leggett]
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley *) mod_auth_form: Add a module capable of allowing end users to log
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley in using an HTML form, storing the credentials within mod_session.
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley [Graham Leggett]
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley *) Add a function to the http filters that is able to parse an HTML
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley form request with the type of application/x-www-form-urlencoded.
7c0876aa42e6abaa8779bcb83962ccf20a9f4da3Bob Halley [Graham Leggett]
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley *) mod_session_crypto: Initialise SSL in the post config hook.
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley [Ruediger Pluem, Graham Leggett]
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley *) mod_session_dbd: Add a session implementation capable of storing
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley session information in a SQL database via the dbd interface. Useful
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley for sites where session privacy is important. [Graham Leggett]
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley *) mod_session_crypto: Add a session encoding implementation capable
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley of encrypting and decrypting sessions wherever they may be stored.
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley Introduces a level of privacy when sessions are stored on the
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley browser. [Graham Leggett]
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley *) mod_session_cookie: Add a session implementation capable of storing
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley session information within cookies on the browser. Useful for high
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley volume sites where server bound sessions are too resource intensive.
a2171e092382f8f8a72b1f73436ddf93918c7719Bob Halley [Graham Leggett]
a5d43b72413db3edd6b36a58f9bdf2cf6ff692f2Bob Halley *) mod_session: Add a generic session interface to unify the different
491b48ec3f3ef014312688776ddbd4eab8a2c10cMichael Graff attempts at saving persistent sessions across requests.
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence [Graham Leggett]
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence *) core, authn/z: Avoid calling access control hooks for internal requests
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence with configurations which match those of initial request. Revert to
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence original behaviour (call access control hooks for internal requests
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence with URIs different from initial request) if any access control hooks or
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence providers are not registered as permitting this optimization.
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence Introduce wrappers for access control hook and provider registration
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence which can accept additional mode and flag data. [Chris Darroch]
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence *) Introduced ap_expr API for expression evaluation.
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence This is adapted from mod_include, which is the first module
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence to use the new API.
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence *) mod_authz_dbd: When redirecting after successful login/logout per
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence AuthzDBDRedirectQuery, do not report authorization failure, and use
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence first row returned by database query instead of last row.
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence [Chris Darroch]
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence *) mod_ldap: Correctly return all requested attribute values
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence when some attributes have a null value.
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence PR 44560 [Anders Kaseorg <anders kaseorg.com>]
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence *) core: check symlink ownership if both FollowSymlinks and
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence SymlinksIfOwnerMatch are set [Nick Kew]
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence *) core: fix origin checking in SymlinksIfOwnerMatch
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence PR 36783 [Robert L Mathews <rob-apache.org.bugs tigertech.net>]
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence *) Activate mod_cache, mod_file_cache and mod_disk_cache as part of the
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence 'most' set for '--enable-modules' and '--enable-shared-mods'. Include
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence mod_mem_cache in 'all' as well. [Dirk-Willem van Gulik]
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence *) Also install mod_so.h, mod_rewrite.h and mod_cache.h; as these
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence contain public function declarations which are useful for
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence third party module authors. PR 42431 [Dirk-Willem van Gulik].
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence *) mod_dir, mod_negotiation: pass the output filter information
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence to newly created sub requests; as these are later on used
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence as true requests with an internal redirect. This allows for
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence mod_cache et.al. to trap the results of the redirect.
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence [Dirk-Willem van Gulik, Ruediger Pluem]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) mod_ldap: Add support (taking advantage of the new APR capability)
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence for ldap rebind callback while chasing referrals. This allows direct
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley searches on LDAP servers (in particular MS Active Directory 2003+)
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley using referrals without the use of the global catalog.
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley PRs 26538, 40268, and 42557 [Paul J. Reder]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) ApacheMonitor.exe: Introduce --kill argument for use by the
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley installer. This will permit the installation tool to remove
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley all running instances before attempting to remove the .exe.
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence [William Rowe]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) mod_ssl: Add support for OCSP validation of client certificates.
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley PR 41123. [Marc Stern <marc.stern approach.be>, Joe Orton]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) mod_serf: New module for Reverse Proxying. [Paul Querna]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) core: Add the option to keep aside a request body up to a certain
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley size that would otherwise be discarded, to be consumed by filters
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley such as mod_include. When enabled for a directory, POST requests
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley to shtml files can be passed through to embedded scripts as POST
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence requests, rather being downgraded to GET requests. [Graham Leggett]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) mod_ssl: Fix TLS upgrade (RFC 2817) support. PR 41231. [Joe Orton]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) scoreboard: Correctly declare ap_time_process_request.
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) core; scoreboard: ap_get_scoreboard_worker(sbh) now takes the sbh member
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley from the connection rec, ap_get_scoreboard_worker(proc, thread) will now
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley provide the unusual legacy lookup. [William Rowe]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) mpm winnt: fix null pointer dereference
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley PR 42572 [Davi Arnaut]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) mod_authnz_ldap, mod_authn_dbd: Tidy up the code to expose authn
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley parameters to the environment. Improve portability to
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley EBCDIC machines by using apr_toupper(). [Martin Kraemer]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) mod_ldap, mod_authnz_ldap: Add support for nested groups (i.e. the ability
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley to authorize an authenticated user via a "require ldap-group X" directive
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley where the user is not in group X, but is in a subgroup contained in X.
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley PR 42891 [Paul J. Reder]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) mod_ssl: Add support for caching SSL Sessions in memcached. [Paul Querna]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) apxs: Enhance -q flag to print all known variables and their values
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley when invoked without variable name(s).
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley [William Rowe, Sander Temme]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) apxs: Eliminate run-time check for mod_so. PR 40653.
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence [David M. Lee <dmlee crossroads.com>]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) beos MPM: Create pmain pool and run modules' child_init hooks when
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley entering ap_mpm_run(), then destroy pmain when exiting ap_mpm_run().
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley [Chris Darroch]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) netware MPM: Destroy pmain pool when exiting ap_mpm_run() so that
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley cleanups registered in modules' child_init hooks are performed.
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley [Chris Darroch]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) Fix issue which could cause error messages to be written to access logs
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence on Win32. PR 40476. [Tom Donovan <Tom.Donovan acm.org>]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) The LockFile directive, which specifies the location of
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley the accept() mutex lockfile, is deprecated. Instead, the
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley AcceptMutex directive now takes an optional lockfile
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley location parameter, ala SSLMutex. [Jim Jagielski]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) mod_authn_dbd: Export any additional columns queried in the SQL select
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley into the environment with the name AUTHENTICATE_<COLUMN>. This brings
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley mod_authn_dbd behaviour in line with mod_authnz_ldap. [Graham Leggett]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) mod_dbd: Key the storage of prepared statements on the hex string
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley value of server_rec, rather than the server name, as the server name
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley may change (eg when the server name is set) at any time, causing
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley weird behaviour in modules dependent on mod_dbd. [Graham Leggett]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) mod_proxy_fcgi: Added win32 build. [Mladen Turk]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) sendfile_nonblocking() takes the _brigade_ as an argument, gets
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley the first bucket from the brigade, finds it not to be a FILE
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley bucket and barfs. The fix is to pass a bucket rather than a brigade.
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley [Niklas Edmundsson <nikke acc.umu.se>]
12ccbb032ec1b5f6b93aac923f2645a19fc90c75David Lawrence *) mod_rewrite: support rewritemap by SQL query [Nick Kew]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) ap_get_server_version() has been removed. Third-party modules must
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley now use ap_get_server_banner() or ap_get_server_description().
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley [Jeff Trawick]
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence *) All MPMs: Introduce a check_config phase between pre_config and
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence open_logs, to allow modules to review interdependent configuration
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence directive values and adjust them while messages can still be logged
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley to the console. Handle relevant MPM directives during this phase
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence and format messages for both the console and the error log, as
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence appropriate. [Chris Darroch]
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley *) core: Do not allow internal redirects like the DirectoryIndex of mod_dir
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley to circumvent the symbolic link checks imposed by FollowSymLinks and
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence SymLinksIfOwnerMatch. [Nick Kew, Ruediger Pluem, William Rowe]
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley *) New SSLLogLevelDebugDump [ None (default) | IO (not bytes) | Bytes ]
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley configures the I/O Dump of SSL traffic, when LogLevel is set to Debug.
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley The default is none as this is far greater debugging resolution than
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley the typical administrator is prepared to untangle. [William Rowe]
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley *) mod_disk_cache: If possible, check if the size of an object to cache is
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence within the configured boundaries before actually saving data.
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley [Niklas Edmundsson <nikke acc.umu.se>]
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley *) Worker and event MPMs: Remove improper scoreboard updates which were
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley performed in the event of a fork() failure. [Chris Darroch]
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley *) Add support for fcgi:// proxies to mod_rewrite.
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley [Markus Schiegl <ms schiegl.com>]
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley *) Remove incorrect comments from scoreboard.h regarding conditional
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley loading of worker_score structure with mod_status, and remove unused
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence definitions relating to old life_status field.
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley [Chris Darroch <chrisd pearsoncmg.com>]
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley *) Remove allocation of memory for unused array of lb_score pointers
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley in ap_init_scoreboard(). [Chris Darroch <chrisd pearsoncmg.com>]
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley *) Add mod_proxy_fcgi, a FastCGI back end for mod_proxy.
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley [Garrett Rooney, Jim Jagielski, Paul Querna]
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley *) Event MPM: Fill in the scoreboard's tid field. PR 38736.
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley [Chris Darroch <chrisd pearsoncmg.com>]
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley *) mod_charset_lite: Remove Content-Length when output filter can
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley invalidate it. Warn when input filter can invalidate it.
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley [Jeff Trawick]
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley *) Authz: Add the new module mod_authn_core that will provide common
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley authn directives such as 'AuthType', 'AuthName'. Move the directives
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley 'AuthType' and 'AuthName' out of the core module and merge mod_authz_alias
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley into mod_authn_core. [Brad Nicholes]
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley *) Authz: Move the directives 'Order', 'Allow', 'Deny' and 'Satisfy'
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley into the new module mod_access_compat which can be loaded to provide
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley support for these directives.
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence [Brad Nicholes]
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence *) Authz: Move the 'Require' directive from the core module as well as
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence add the directives '<SatisfyAll>', '<SatisfyOne>', '<RequireAlias>'
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR'
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence logic into the authorization processing. [Brad Nicholes]
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence *) Authz: Add the new module mod_authz_core which acts as the
20de4f6c6cd4af09c13c1e0a21f97e49d2139dbeBob Halley authorization provider vector and contains common authz
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence directives. [Brad Nicholes]
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence *) Authz: Renamed mod_authz_dbm authz providers from 'group' and
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence 'file-group' to 'dbm-group' and 'dbm-file-group'. [Brad Nicholes]
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence *) Authz: Added the new authz providers 'env', 'ip', 'host', 'all' to handle
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence host-based access control provided by mod_authz_host and invoked
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence through the 'Require' directive. [Brad Nicholes]
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence *) Authz: Convert all of the authz modules from hook based to
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence provider based. [Brad Nicholes]
566a01eb745d49bd866971062388cd11d525b60dDavid Lawrence *) mod_cache: Add CacheMinExpire directive to set the minimum time in
1ce985ab3c6670662d555c108b35fed84a6a1001David Lawrence seconds to cache a document.
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley [Brian Akins <brian.akins turner.com>, Ruediger Pluem]
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence *) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence *) Fix typo in ProxyStatus syntax error message.
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence [Christophe Jaillet <christophe.jaillet wanadoo.fr>]
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence *) Asynchronous write completion for the Event MPM. [Brian Pane]
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence *) Added an End-Of-Request bucket type. The logging of a request and
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence the freeing of its pool are now done when the EOR bucket is destroyed.
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley This has the effect of delaying the logging until right after the last
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley of the response is sent; ap_core_output_filter() calls the access logger
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley indirectly when it destroys the EOR bucket. [Brian Pane]
8d4257cff01b3821abcb9a21f46c6c6a43bb1e72Bob Halley *) Rewrite of logresolve support utility: IPv6 addresses are now supported
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence and the format of statistical output has changed. [Colm MacCarthaigh]
90839d60d218503da04c4a0bfe57a81c33aa2241David Lawrence *) Rewrite of ap_coreoutput_filter to do nonblocking writes [Brian Pane]
b06bc71d84698c480410478863d9b51589fa6d0cDavid Lawrence *) Added new connection states for handler and write completion
d8dcd6ad4617cc8d7df979bd62101fa9c4bac1bcBob Halley [Brian Pane]
d8dcd6ad4617cc8d7df979bd62101fa9c4bac1bcBob Halley *) mod_cgid: Refuse to work on Solaris 10 due to OS bugs. PR 34264.
d8dcd6ad4617cc8d7df979bd62101fa9c4bac1bcBob Halley [Justin Erenkrantz]
d8dcd6ad4617cc8d7df979bd62101fa9c4bac1bcBob Halley *) Teach mod_ssl to use arbitrary OIDs in an SSLRequire directive,
d8dcd6ad4617cc8d7df979bd62101fa9c4bac1bcBob Halley allowing string-valued client certificate attributes to be used for
d8dcd6ad4617cc8d7df979bd62101fa9c4bac1bcBob Halley access control, as in: SSLRequire "value" in OID("1.3.6.1.4.1.18060.1")
d8dcd6ad4617cc8d7df979bd62101fa9c4bac1bcBob Halley [Martin Kraemer, David Reid]
d8dcd6ad4617cc8d7df979bd62101fa9c4bac1bcBob Halley [Apache 2.3.0-dev includes those bug fixes and changes with the
d8dcd6ad4617cc8d7df979bd62101fa9c4bac1bcBob Halley Apache 2.2.xx tree as documented, and except as noted, below.]
d8dcd6ad4617cc8d7df979bd62101fa9c4bac1bcBob HalleyChanges with Apache 2.2.x and later:
d8dcd6ad4617cc8d7df979bd62101fa9c4bac1bcBob Halley *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
d8dcd6ad4617cc8d7df979bd62101fa9c4bac1bcBob HalleyChanges with Apache 2.0.x and later: