CHANGES revision e34223f72e630187c4d8ac7c22da5096c833eb20
1840745dd553b2ff5b114a03cde40a2a404aa559Michael GraffChanges with Apache 2.1.0-dev
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence [Remove entries to the current 2.0 section below, when backported]
1840745dd553b2ff5b114a03cde40a2a404aa559Michael Graff *) Add ap_log_cerror() for logging messages associated with particular
1840745dd553b2ff5b114a03cde40a2a404aa559Michael Graff client connections. [Jeff Trawick]
15a44745412679c30a6d022733925af70a38b715David Lawrence *) core: Add a warning message if the request line read fails.
15a44745412679c30a6d022733925af70a38b715David Lawrence [Paul Querna]
15a44745412679c30a6d022733925af70a38b715David Lawrence *) mod_cache: Add CacheIgnoreHeaders directive. PR 30399.
15a44745412679c30a6d022733925af70a38b715David Lawrence *) mod_rewrite: Removed the MaxRedirects option in favor of the
15a44745412679c30a6d022733925af70a38b715David Lawrence core LimitInternalRecursion directive. [Andr� Malo]
1840745dd553b2ff5b114a03cde40a2a404aa559Michael Graff *) SECURITY: CAN-2004-0885 (cve.mitre.org)
d22b4de3f1c3151979e2a064cb271007c710c5a7Mark Andrews mod_ssl: Fix a bug which allowed an SSLCipherSuite setting to be
9c3531d72aeaad6c5f01efe6a1c82023e1379e4dDavid Lawrence bypassed during an SSL renegotiation. PR 31505.
1840745dd553b2ff5b114a03cde40a2a404aa559Michael Graff [Hartmut Keil <Hartmut.Keil adnovum.ch>, Joe Orton]
1840745dd553b2ff5b114a03cde40a2a404aa559Michael Graff *) mod_auth_ldap: Handle the inconsistent way in which the MS LDAP
1840745dd553b2ff5b114a03cde40a2a404aa559Michael Graff library handles special characters. PR 24437 [Jess Holle]
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson *) Unix MPMs: Shut down the server more quickly when child processes are
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson slow to exit. [Joe Orton, Jeff Trawick]
1a69a1a78cfaa86f3b68bbc965232b7876d4da2aDavid Lawrence *) mod_info: Added listing of the Request Hooks and added more build
8a47ea1dadd3b985f5266f198423e01e225e218dDavid Lawrence information like 'httpd -V' contains. Changed output to XHTML.
440be4c866f6935ac069db79a414304507a664c2Michael Graff *) mod_info: Rewrote config tree walk using a recursive function.
1840745dd553b2ff5b114a03cde40a2a404aa559Michael Graff Added ?config option. Added printout of config filename and line numbers.
fd15c8e32ed0c1cfd3ed737858a81966e7fbaeacAndreas Gustafsson [Rici Lake <rici ricilake.net>, Paul Querna]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) mod_proxy: Fix type error that prevents proxy-sendchunks from working.
c14c6f86ae1607eb39b8b37be25599b8cb923062Bob Halley [Justin Erenkrantz]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) mod_proxy: Fix data corruption by properly setting aside buckets.
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson [Justin Erenkrantz]
1a69a1a78cfaa86f3b68bbc965232b7876d4da2aDavid Lawrence *) mod_proxy: If a request has a blank body and has a 0 Content-Length
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson headers, pass that to the proxy. [Justin Erenkrantz]
8f16e457f722681f67ee6af9c1cd39553f6dcc9aAndreas Gustafsson *) Recognize QSA flag in mod_rewrite again.
1a69a1a78cfaa86f3b68bbc965232b7876d4da2aDavid Lawrence [Jan Kratochvil <rcpt-dev.AT.httpd.apache.org jankratochvil.net>]
f93d33e24fdf76eb2558168f018b8992bcfc5681Andreas Gustafsson *) Restructured mod_auth_ldap to fit the new authentication model.
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley The module is now called authnz_ldap and has been moved out of
c6e10b826ec1df8da01a7b1b4620d7e0adfcb247James Brister the modules/experimental area and into modules/aaa with the other
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson auth modules. Both the authn_ldap provider and the authz_ldap
1840745dd553b2ff5b114a03cde40a2a404aa559Michael Graff handler are contained within the authnz_ldap module. The
63c82cf3ce90e60d3140b0d1c10d9cea9e0740f5Brian Wellington authz_ldap handler introduces 3 new "requires" values for handling
63c82cf3ce90e60d3140b0d1c10d9cea9e0740f5Brian Wellington authorization. These handlers are ldap-user, ldap-group and
b03758b04ea5134c805d44fcc5315c878c6f7996Andreas Gustafsson ldap-dn. [Brad Nicholes]
a4b6a1622b1b6672a6e0c7186167bbe3997568c6Bob Halley *) Fix some compiler warnings in proxy
353dcaf1cc77d122d9b4b750bbbfc4c96b4b292bAndreas Gustafsson [Geoffrey Young <geoff@modperlcookbook.org>]
bcc1d6507b69be307fc1e0206827a0b09b10ba4bBob Halley *) mod_ssl: Add SSL_CLIENT_V_REMAIN variable, representing the
533b0475054882ea1c81cb1ec4aa3e6750711bbcBob Halley number of days until the client cert expires. [Joe Orton]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Add test_config hook, run only if httpd is invoked using -t.
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Improve error handling for corrupted pid files. [Jeff Trawick]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) mod_proxy.c and proxy_util.c: Enable compiling on 2.0-HEAD
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson (for backwards compatibility):
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson Avoids mod_ssl.h (not included in 2.0-HEAD) and
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson use apr_socket_create_ex for 0.9.x
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Added proxy_ajp.c module for proxy support to ajp:// backends.
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson [Jean Frederic Clere]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Fixes the build of proxy on Windows. Since the proxy_module is declared
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson as extern using AP_MODULE_DECLARE_DATA that expands to dllexport, there
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson is a LNK2001 error when building proxy_http. [Mladen Turk]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Remove LDAP toolkit specific code from util_ldap and mod_auth_ldap.
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson [Graham Leggett]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Remove deprecated/removed APR_STATUS_IS_SUCCESS(). [Justin Erenkrantz]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) perchild MPM: Fix thread safety problem in the use of longjmp().
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson [Tsuyoshi SASAMOTO <nazonazo super.win.ne.jp>]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Add load balancer support to the scoreboard in preparation for
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson load balancing support in mod_proxy. [Mladen Turk]
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley *) mod_nw_ssl: Added the directive NWSSLUpgradeable to mod_nw_ssl to
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley allow a non-secure connection to be upgraded to secure connections
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson [Brad Nicholes]
c6e10b826ec1df8da01a7b1b4620d7e0adfcb247James Brister *) core: Add Options= syntax to AllowOverride to specify which options
7efc8c3f692fc3226c00ce8bdc1b90eb06562352David Lawrence may be overridden in .htaccess files. PR 29310.
7efc8c3f692fc3226c00ce8bdc1b90eb06562352David Lawrence [Tom Alsberg <alsbergt cs.huji.ac.il>, Paul Querna]
7efc8c3f692fc3226c00ce8bdc1b90eb06562352David Lawrence *) ab: Handle long URLs with an error instead of an buffer overflow.
7efc8c3f692fc3226c00ce8bdc1b90eb06562352David Lawrence PR 28204. [Erik Weide <erik.weidel mplus-technologies.de>, Paul Querna]
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson *) mod_so, core: Add new command line options to print all loaded
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson modules. '-t -D DUMP_MODULES' and '-M' will show all static
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson and shared modules as loaded from the configuration file.
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson *) mod_autoindex: Add ShowForbidden to IndexOptions to list files
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson that are not shown because the subrequest returned 401 or 403.
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson PR 10575. [Paul Querna]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) mod_headers: implement "Early" processing option in post_read_request
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington to enable Header and RequestHeader directives to be used to set up
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington testcases for pre-fixups request phases [Nick Kew]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) mod_proxy: multiple bugfixes, principally support cookies in
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson ProxyPassReverse, and don't canonicalise URL passed to backend.
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson Documentation correspondingly updated. [Nick Kew <nick webthing.com>]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) mod_deflate: support gzip flags in inflate_out_filter
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson [Nick Kew <nick webthing.com>]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) Drop the ErrorHeader directive which turned out to be a misnomer.
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson Instead there's a new optional flag for the Header directive
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson ('always'), which keeps the former ErrorHeader functionality.
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) mod_deflate: Don't deflate responses with zero length
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson e.g. proxied 304's [Allan Edwards]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) <IfModule> now recognizes the module identifier in addition to the
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson file name. PR 29003. [Edward Rudd <eddie omegaware.com>, Andr� Malo]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) mod_ssl: Add "SSLHonorCipherOrder" directive to enable the
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson OpenSSL 0.9.7 flag which uses the server's cipher order rather
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson than the client's. PR 28665.
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson [Jim Schneider <jschneid netilla.com>]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) mod_ssl: Drop support for the CompatEnvVars argument to
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence SSLOptions, which was never actually implemented in 2.0.
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence *) Fix bug in mod_deflate that unconditionally sent deflate'd output
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence even when Accept-Encoding is not present. [Justin Erenkrantz]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Pass environment variables through to piped loggers and start
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson them via the shell, resolving regressions since 1.3. PR 28815
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson [Ken Coar, Jeff Trawick]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) External rewrite map responses are no longer limited to 2048
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson bytes. [Andr� Malo]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Proxy server was deleting cookies that Apache had already
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson assigned if the origin server had set any cookies. PR 27023.
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson [Jim Jagielski]
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence *) Removed old and unmaintained ap_add_named_module API and changed
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson the following APIs to return an error instead of hard exiting:
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson ap_add_module, ap_add_loaded_module, ap_setup_prelinked_modules,
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence and ap_process_resource_config. [Andr� Malo]
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson *) mod_headers: Allow %% in header values to represent a literal %.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) mod_headers: Allow env clauses also for 'echo' and 'unset' actions.
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson *) mod_headers: Allow 'echo' also for ErrorHeaders. [Andr� Malo]
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson *) mod_deflate: New option for DEFLATE output file (force-gzip),
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson new output filter 'INFLATE' for uncompressing responses.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence [Nick Kew <Nick at WebThing dot com>, Ian Holsman]
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson *) Added new module mod_version, which provides version dependent
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence configuration containers. [Andr� Malo]
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson *) mod_log_config now logs all Set-Cookie headers if the %{Set-Cookie}o
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson format is used. PR 27787. [Andr� Malo]
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson *) Allow Digest providers to return AUTH_DENIED to propagate a 401
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson status and terminate the provider chain prior to checking the password.
507ee70afd23b893c06afb28ee93b260e4e38acfAndreas Gustafsson [Geoffrey Young]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) mod_cgid: Don't allow Scriptsock to be specified inside VirtualHost;
507ee70afd23b893c06afb28ee93b260e4e38acfAndreas Gustafsson Don't place script socket inside default server root instead of
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence actual server root. PR 27886. [Jeff Trawick]
507ee70afd23b893c06afb28ee93b260e4e38acfAndreas Gustafsson *) mod_proxy: Fix handling of non-200 success status codes when
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson "ProxyErrorOverride On" is configured. PR 20183.
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson [Marcus Janson <marcus.janson tre.se>, Joe Orton]
507ee70afd23b893c06afb28ee93b260e4e38acfAndreas Gustafsson *) Threaded MPMs for Unix and Win32: Add support for ThreadStackSize
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson directive (previously NetWare-only) to override default thread
507ee70afd23b893c06afb28ee93b260e4e38acfAndreas Gustafsson stack size for threads which handle client connections. Required
507ee70afd23b893c06afb28ee93b260e4e38acfAndreas Gustafsson for some third-party modules on platforms with small default
507ee70afd23b893c06afb28ee93b260e4e38acfAndreas Gustafsson thread stack size. [Jeff Trawick]
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson *) minor mod_auth_basic and mod_auth_digest sync. mod_auth_basic
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson now populates r->user with the (possibly unauthenticated) user,
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson and mod_auth_digest returns 500 when a provider returns
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson AUTH_GENERAL_ERROR.
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson [Geoffrey Young]
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson *) The whole codebase was relicensed and is now available under
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence the Apache License, Version 2.0 (http://www.apache.org/licenses).
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson [Apache Software Foundation]
507ee70afd23b893c06afb28ee93b260e4e38acfAndreas Gustafsson *) Delete some make-generated files in the server directory during
507ee70afd23b893c06afb28ee93b260e4e38acfAndreas Gustafsson "make clean" processing. PR 26552. [Jeff Trawick]
507ee70afd23b893c06afb28ee93b260e4e38acfAndreas Gustafsson *) Add core version query function (ap_get_server_revision) and
507ee70afd23b893c06afb28ee93b260e4e38acfAndreas Gustafsson accompanying ap_version_t structure (minor MMN bump).
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson *) mod_rewrite: EOLs sent by external rewritemaps are now consumed
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson as whole. That way, on systems with more than one EOL character
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson rewritemap programs no longer need to switch stdout to binary
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson mode. PR 25635. [Andr� Malo]
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews *) mod_rewrite: Introduce the ability to force a content handler via
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson the [handler=...] flag. [Andr� Malo]
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson *) mod_rewrite: Introduce the RewriteCond -x check, which returns
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson true if the pattern is a file with execution permissions.
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington *) mod_rewrite: Allow proxying and RewriteRules in directory context
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington for subrequests. PR 14648, 15114. [Andr� Malo]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) mod_rewrite: Allow setting of any valid HTTP response code.
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson PR 25917. [Andr� Malo]
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson *) mod_rewrite: Cookie creation now works locale independent.
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson *) mod_ssl: Add support for distributed session cache using 'distcache'.
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson [Geoff Thorpe <geoff geoffthorpe.net>]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) mod_dav: Disallow requests with an unescaped hash character in
900b9aa25ebd2f4b6633974c257d4b8e852a60f7Andreas Gustafsson the Request-URI. PR 21779. [Amit Athavale <amit_athavale lycos.com>]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) mod_proxy with ProxyErrorOverride On in a reverse-proxy configuration
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence attaches a body to the 302 response and a wrong Content-Length header.
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson PR: 22951 [Ermanno Scaglione scaglione ..at.. starnetone.de]
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson *) Bring ErrorHeader concept forward from 1.3, so that response
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson header fields can be set for return even on errors or external
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson redirects. [Ken Coar]
34b394b43e2207e8f8f3703f0402422121455638David Lawrence *) Fix <Limit> and <LimitExcept> parsing to require a closing '>'
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson in the initial container. PR 25414.
34b394b43e2207e8f8f3703f0402422121455638David Lawrence [Geoffrey Young <geoff apache.org>]
34b394b43e2207e8f8f3703f0402422121455638David Lawrence *) Clean up httpd -V output: Instead of displaying the MPM source
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson directory, display the MPM name and some MPM properties.
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson [Geoffrey Young <geoff apache.org>]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) mod_ssl/mod_status: Re-enable support for output of SSL session
6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence cache information in server-status page. [Joe Orton]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) mod_ssl: Remove the shmht session cache, shmcb should be used
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson instead. [Joe Orton]
6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence *) mod_logio: Account for some bytes handed to the network layer prior to
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson dropped connections. [Jeff Trawick]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) mod_autoindex: new directive IndexStyleSheet
1a69a1a78cfaa86f3b68bbc965232b7876d4da2aDavid Lawrence [Tyler Riddle <triddle_1999 yahoo.com>, Paul Querna <chip force-elite.com>]
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson *) Fix uninitialized gprof directory name in prefork MPM. PR 24450.
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson [Chris Knight <Christopher.D.Knight nasa.gov>]
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington *) Log an error when requests for URIs which fail to map to a valid
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington filesystem name are rejected with 403. [Jeff Trawick]
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington *) Switch to APR 1.0 API.
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence *) Major overhaul of mod_include's filter parser. The new parser code
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence is expected to be more robust and should catch all of the edge cases
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington that were not handled by the previous one. This includes a binary
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson incompatible change of mod_include's external API. [Andr� Malo]
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson *) mod_rewrite: Allow forced mimetypes [T=...] to get expanded.
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson PR 14223. [Andr� Malo]
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson *) mod_rewrite: Fix LA-U and LA-F lookups in directory context. Previously
864a05fa261c3b0b5d16d2d494f00afff8a3080bAndreas Gustafsson the current rewrite state was just used as lookup path, which lead to
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence strange and often useless results. Related to PR 8493. [Andr� Malo]
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson *) Change Listen directive to bind to all addresses when a hostname is
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson not specified. [Justin Erenkrantz]
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson *) Correct failure with Listen directives on machines with IPv6 enabled.
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson [Colm MacC�rthaigh <colm stdlib.net>, Justin Erenkrantz]
c50936eb40263b65ebf6afe4e6556e2dc67c10e4Brian Wellington *) Fix a link failure in mod_ssl when the OpenSSL libraries contain
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson the ENGINE functions but the engine header files are missing.
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson [Cliff Woolley]
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson *) mod_rewrite: RewriteRules in server context using the force
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff type feature [T=...] no longer disable MultiViews. [Andr� Malo]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) mod_rewrite: Allow piped rewrite logs to be relative to ServerRoot.
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) mod_authz_groupfile: Strip trailing spaces of group names. This
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff hopefully saves some hours of searching for typos. PR 12863.
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) mod_actions: Propagate the handler name to the action script via
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff the REDIRECT_HANDLER environment variable. [Andr� Malo]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) mod_actions: Introduce the "virtual" modifier to the Action directive,
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff which allows the use of handlers for virtual locations. PR 8431.
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) mod_speling: Recognize AcceptPathInfo setting for the particular
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff location. Default is to reject path information. PR 21059.
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) mod_ext_filter: Add the ability to filter request bodies.
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff [Philipp Reisner <philipp.reisner linbit.com>]
ed019cabc1cc75d4412010c331876e4ae5080a4dDavid Lawrence *) Fix some broken log messages in WinNT MPM.
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) prefork MPM: Use the right permissions for the directory created
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff for gprof support. [Jim Carlson <jcarlson jnous.com>]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Fix a compile failure with recent OpenSSL and picky compilers
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff (e.g., OpenSSL 0.9.7a and xlc_r on AIX). [Jeff Trawick]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) OpenSSL headers should be included as "openssl/ssl.h", and not rely on
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff the INCLUDE path to be defined properly.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence PR 11310. [Geoff Thorpe <geoff geoffthorpe.net>]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Modify APACHE_CHECK_SSL_TOOLKIT to detect SSL-C. [Madhusudan Mathihalli]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Replace the APACHE_CHECK_SSL_TOOLKIT method with a cleaner one, using
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence autoconf tools (AC_CHECK_HEADER, AC_CHECK_LIB etc).
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff [Geoff Thorpe <geoff geoffthorpe.net>]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) change directive name from 'compressionlevel' to 'deflatecompressionlevel'
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff [Ian Holsman, Andr� Malo]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) mod_negotiation: quality values are now parsed independent from
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff the current locale. level values are now really parsed as integers.
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff PR 17564. [Andr� Malo]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Extend mod_negotiation to evaluate the environment variables
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff no-gzip and gzip-only-text/html the same way as mod_deflate does.
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) mod_rewrite: Fix some problems reporting errors with mapping
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff programs (RewriteMap prg:/something). [Jeff Trawick]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Return 413 if chunk-ext-header is too long rather than reading from
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff the truncated line. PR 15857. [Justin Erenkrantz]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Allow restart of httpd to occur even with syntax errors in the config
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff file. PR 16813. [Justin Erenkrantz]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Use APR_LAYOUT instead of APACHE_LAYOUT in configure. PR 15679.
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff [Justin Erenkrantz]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Remove files on 'make distclean' that should be. PR 15592.
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff [Justin Erenkrantz]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Allow apachectl to perform status with links and elinks as well.
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff [Justin Erenkrantz]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) mod_log_config change optional hook to return previous handler
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff [Ian Holsman]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Forward port of mod_actions' ability to handle arbitrary methods
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff with the Script directive. [Andr� Malo]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Let suexec send a message to stderr, if it failed or its policy
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff was violated. This message appears in the error log and allows
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff for easier debugging. PR 5381, 7638, 8255, 10773. [Andr� Malo]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Modify buildconf to copy all required files into httpd's tree.
96ef51763f92c032e276a0b645f3b0cbe9b98a5bAndreas Gustafsson [Thom May <thom planetarytramp.net>]
96ef51763f92c032e276a0b645f3b0cbe9b98a5bAndreas Gustafsson *) Allow mod_dav to do weak entity comparison functions.
96ef51763f92c032e276a0b645f3b0cbe9b98a5bAndreas Gustafsson [Justin Erenkrantz]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Move RFC 1413 ident requests from core to new module mod_ident.
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Add mod_authz_owner - a forward port of "Require file-owner"
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff and "Require file-group", which was already present in version
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff 1.3.21. [Andr� Malo]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Add mod_dav_lock - a generic subset of the DAV locking implementation.
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson [Justin Erenkrantz]
6c046c19a39157503ab0222a344743944b52eb94Andreas Gustafsson *) Replace some of the mutex locking in the worker MPM with
dded22b184a3057408dffeb0870768b3a46ea9d9Andreas Gustafsson atomic operations for higher concurrency. [Brian Pane]
6c046c19a39157503ab0222a344743944b52eb94Andreas Gustafsson *) Allow 'make depend' to work with non-GCC compilers.
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson [Justin Erenkrantz]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) If an httpd.conf has commented out AddModule directives,
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff apxs -i -a will add an un-commented AddModule directive for
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley the new module, which breaks the config.
77668e0fcec255c2ec4fa8c167da142255430f23Andreas Gustafsson PR: 11212 [Joe Orton]
029f5aa86138aa9c32b3dc3c8a00626eea961d35James Brister *) Fix mod_proxy handling of filtered input bodies. [Justin Erenkrantz]
bf08eb90e44ed8717d538442600c4ad11adac61dBrian Wellington *) Move the check of the Expect request header field after the hook
f5facdfc297825bbd99adf45421dd2ba13a1132eBob Halley for ap_post_read_request, since that is the only opportunity for
77668e0fcec255c2ec4fa8c167da142255430f23Andreas Gustafsson modules to handle Expect extensions. [Justin Erenkrantz]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Rewrite of aaa modules to an authn/authz model.
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff [Dirk-Willem van Gulik, Justin Erenkrantz]
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson [Apache 2.1.0-dev includes those bug fixes and changes with the
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley Apache 2.0.xx tree as documented, and except as noted, below.]
f5facdfc297825bbd99adf45421dd2ba13a1132eBob HalleyChanges with Apache 2.0.53
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson *) apxs: fix handling of -Wc/-Wl and "-o mod_foo.so". PR 31448
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson *) mod_ldap: Fix format strings to use %APR_PID_T_FMT instead of %d.
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson [Jeff Trawick]
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson *) mod_cache: CacheDisable will only disable the URLs it was meant to
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson disable, not all caching. PR 31128.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence [Edward Rudd <eddie omegaware.com>, Paul Querna]
d22b4de3f1c3151979e2a064cb271007c710c5a7Mark Andrews *) mod_cache: Try to correctly follow RFC 2616 13.3 on validating stale
d22b4de3f1c3151979e2a064cb271007c710c5a7Mark Andrews cache responses. [Justin Erenkrantz]
d22b4de3f1c3151979e2a064cb271007c710c5a7Mark Andrews *) mod_rewrite: Handle per-location rules when r->filename is unset.
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley Previously this would segfault or simply not match as expected,
77668e0fcec255c2ec4fa8c167da142255430f23Andreas Gustafsson depending on the platform. [Jeff Trawick]
77668e0fcec255c2ec4fa8c167da142255430f23Andreas Gustafsson *) mod_rewrite: Fix query string handling for proxied URLs. PR 14518.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence [michael teitler <michael.teitler cetelem.fr>,
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence Jan Kratochvil <rcpt-dev.AT.httpd.apache.org jankratochvil.net>]
77668e0fcec255c2ec4fa8c167da142255430f23Andreas Gustafsson *) mod_rewrite: Fix 0 bytes write into random memory position.
77668e0fcec255c2ec4fa8c167da142255430f23Andreas Gustafsson PR 31036. [Andr� Malo]
77668e0fcec255c2ec4fa8c167da142255430f23Andreas Gustafsson *) mod_disk_cache: Do not store aborted content. PR 21492.
77668e0fcec255c2ec4fa8c167da142255430f23Andreas Gustafsson *) mod_disk_cache: Correctly store cached content type. PR 30278.
77668e0fcec255c2ec4fa8c167da142255430f23Andreas Gustafsson *) mod_ldap: prevent the possiblity of an infinite loop in the LDAP
77668e0fcec255c2ec4fa8c167da142255430f23Andreas Gustafsson statistics display. PR 29216 [Graham Leggett]
77668e0fcec255c2ec4fa8c167da142255430f23Andreas Gustafsson *) mod_ldap: fix a bogus error message to tell the user which file
77668e0fcec255c2ec4fa8c167da142255430f23Andreas Gustafsson is causing a potential problem with the LDAP shared memory cache.
77668e0fcec255c2ec4fa8c167da142255430f23Andreas Gustafsson PR 31431 [Graham Leggett]
77668e0fcec255c2ec4fa8c167da142255430f23Andreas Gustafsson *) mod_disk_cache: Do not store hop-by-hop headers. [Justin Erenkrantz]
77668e0fcec255c2ec4fa8c167da142255430f23Andreas Gustafsson *) Fix the re-linking issue when purging elements from the LDAP cache
d6f63eca91110a65f098181b396fb5a33ff17259Bob Halley PR 24801 [Jess Holle <jessh ptc.com>]
77668e0fcec255c2ec4fa8c167da142255430f23Andreas Gustafsson *) mod_disk_cache: Fix races in saving responses. [Justin Erenkrantz]
fd15c8e32ed0c1cfd3ed737858a81966e7fbaeacAndreas Gustafsson *) Fix Expires handling in mod_cache. [Justin Erenkrantz]
807b4620fa367fe1ce1b782be7ccfb0a73b8113dAndreas Gustafsson *) Alter mod_expires to run at a different filter priority to allow
807b4620fa367fe1ce1b782be7ccfb0a73b8113dAndreas Gustafsson proper Expires storage by mod_cache. [Justin Erenkrantz]
1a69a1a78cfaa86f3b68bbc965232b7876d4da2aDavid LawrenceChanges with Apache 2.0.52
84ef83d296b422e92ff418b654f37d50ebec4e95Andreas Gustafsson *) Fix the global mutex crash when the global mutex is never allocated due
807b4620fa367fe1ce1b782be7ccfb0a73b8113dAndreas Gustafsson to disabled/empty caches. [Jess Holle <jessh ptc.com>]
8f79820c6930ee5ef6b4a54f36d2559400bdf47dAndreas Gustafsson *) SECURITY: CAN-2004-0811 (cve.mitre.org)
807b4620fa367fe1ce1b782be7ccfb0a73b8113dAndreas Gustafsson Fix merging of the Satisfy directive, which was applied to
3a34b87c878990c6303358efd22265c2c5980c65Mark Andrews the surrounding context and could allow access despite configured
3a34b87c878990c6303358efd22265c2c5980c65Mark Andrews authentication. PR 31315. [Rici Lake <rici ricilake.net>]
3a34b87c878990c6303358efd22265c2c5980c65Mark Andrews *) Fix the handling of URIs containing %2F when AllowEncodedSlashes
3a34b87c878990c6303358efd22265c2c5980c65Mark Andrews is enabled. Previously, such urls would still be rejected.
3a34b87c878990c6303358efd22265c2c5980c65Mark Andrews [Jeff Trawick, Bill Stoddard]
3a34b87c878990c6303358efd22265c2c5980c65Mark Andrews *) mod_mem_cache: Fixed race condition causing segfault because of memory being
3a34b87c878990c6303358efd22265c2c5980c65Mark Andrews freed twice, or reused after being freed.
3a34b87c878990c6303358efd22265c2c5980c65Mark Andrews [J. Clar, W. Stoddard, G. Ames]
3a34b87c878990c6303358efd22265c2c5980c65Mark Andrews *) Add -l option to rotatelogs to let it use local time rather than
3a34b87c878990c6303358efd22265c2c5980c65Mark Andrews UTC. PR 24417. [Ken Coar, Uli Zappe <uli ritual.org>]
325c88703c78ddb975994f7123ab4f93b6650a87Bob Halley *) mod_log_config: Fix a bug which prevented request completion time
73ca2fa48635c5386b4df809ee6ae9a51bb6c8b3Bob Halley from being logged for I_INSIST_ON_EXTRA_CYCLES_FOR_CLF_COMPLIANCE
73ca2fa48635c5386b4df809ee6ae9a51bb6c8b3Bob Halley processing. PR 29696. [Alois Treindl <alois astro.ch>]
73ca2fa48635c5386b4df809ee6ae9a51bb6c8b3Bob HalleyChanges with Apache 2.0.51
73ca2fa48635c5386b4df809ee6ae9a51bb6c8b3Bob Halley *) mod_include no longer checks for recursion, because that's done
73ca2fa48635c5386b4df809ee6ae9a51bb6c8b3Bob Halley in the core. This allows for careful usage of recursive SSI.
73ca2fa48635c5386b4df809ee6ae9a51bb6c8b3Bob Halley [Andr� Malo]
73ca2fa48635c5386b4df809ee6ae9a51bb6c8b3Bob Halley *) Fix memory leak in the cache handling of mod_rewrite. PR 27862.
73ca2fa48635c5386b4df809ee6ae9a51bb6c8b3Bob Halley [chunyan sheng <shengperson yahoo.com>, Andr� Malo]
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley *) Include directives no longer refuse to process symlinks on
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley directories. Instead there's now a maximum nesting level
c14c6f86ae1607eb39b8b37be25599b8cb923062Bob Halley of included directories (128 as distributed). This is configurable
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley at compile time using the -DAP_MAX_INCLUDE_DIR_DEPTH switch.
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff PR 28492. [Andr� Malo]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) Win32: apache -k start|restart|install|config can leave stranded
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff piped logger processes (eg, rotatelogs.exe) due to improper
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson server shutdown on these code paths.
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson [Bill Stoddard]
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff *) SECURITY: CAN-2004-0751 (cve.mitre.org)
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff mod_ssl: Fix a segfault in the SSL input filter which could be
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff triggered if using "speculative" mode, for instance by a
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff proxy request to an SSL server. PR 30134. [Joe Orton]
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley *) mod_rewrite: Add %{SSL:...} and %{HTTPS} variable lookups.
f5facdfc297825bbd99adf45421dd2ba13a1132eBob Halley PR 30464. [Joe Orton, Madhusudan Mathihalli]
f5facdfc297825bbd99adf45421dd2ba13a1132eBob Halley *) mod_ssl: Add new 'ssl_is_https' optional function. [Joe Orton]
8f9f5011b0977a646994cebba972c5924feec9cfAndreas Gustafsson *) Prevent CGI script output which includes a Content-Range header
57423b6cf92905e78c32153ec25c6e213a59139bAndreas Gustafsson from being passed through the byterange filter. [Joe Orton]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) Satisfy directives now can be influenced by a surrounding <Limit>
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington container. PR 14726. [Andr� Malo]
f5facdfc297825bbd99adf45421dd2ba13a1132eBob Halley *) mod_rewrite now officially supports RewriteRules in <Proxy> sections.
f5facdfc297825bbd99adf45421dd2ba13a1132eBob Halley PR 27985. [Andr� Malo]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) mod_disk_cache: Implement binary format for on-disk header files.
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley [Brian Akins <bakins web.turner.com>, Justin Erenkrantz]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) mod_disk_cache: Optimize network performance of disk cache subsystem by
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley allowing zero-copy (sendfile) writes and other miscellaneous fixes.
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson [Justin Erenkrantz]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) mod_cache, mod_disk_cache, mod_mem_cache: Refactor cache modules, and
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson switch to the provider API instead of hooks. [Justin Erenkrantz]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) mod_autoindex: Don't truncate the directory listing if a stat()
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson call fails (for instance on a >2Gb file). PR 17357.
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Makefile fix: httpd is linked against LIBS given to the
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson 'make' invocation. PR 7882. [Joe Orton]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) WinNT MPM: Fix a broken log message at termination. PR 28063.
bf08eb90e44ed8717d538442600c4ad11adac61dBrian Wellington [Eider Oliveira <eider bol.com.br>]
bf08eb90e44ed8717d538442600c4ad11adac61dBrian Wellington *) Prevent Win32 pool corruption at startup [Allan Edwards]
c885fad9b8bf204ae9e62c9acb0321e2bcca30a4Andreas Gustafsson *) mod_ssl: Add "SSLUserName" directive to set r->user based on a
bf08eb90e44ed8717d538442600c4ad11adac61dBrian Wellington chosen SSL environment variable. PR 20957.
bf08eb90e44ed8717d538442600c4ad11adac61dBrian Wellington [Martin v. Loewis <martin v.loewis.de>]
03ccfda9ec9fde56c83b381eccbac44071b36143Andreas Gustafsson *) suexec: Pass the SERVER_SIGNATURE envvar through to CGIs.
03ccfda9ec9fde56c83b381eccbac44071b36143Andreas Gustafsson *) apachectl: Fix a problem finding envvars if sbindir != bindir.
6d5b03be41fab615c0ca02cfb79d5d2dd1b59ab4Andreas Gustafsson PR 30723. [Friedrich Haubensak <hsk imb-jena.de>]
6d5b03be41fab615c0ca02cfb79d5d2dd1b59ab4Andreas Gustafsson *) mod_ssl: Build on RHEL 3. PR 18989. [Justin Erenkrantz]
6d5b03be41fab615c0ca02cfb79d5d2dd1b59ab4Andreas Gustafsson *) SECURITY: CAN-2004-0748 (cve.mitre.org)
6d5b03be41fab615c0ca02cfb79d5d2dd1b59ab4Andreas Gustafsson mod_ssl: Fix a potential infinite loop. PR 29964. [Joe Orton]
6d5b03be41fab615c0ca02cfb79d5d2dd1b59ab4Andreas Gustafsson *) mod_ssl: Avoid startup failure after unclean shutdown if using shmcb.
6d5b03be41fab615c0ca02cfb79d5d2dd1b59ab4Andreas Gustafsson PR 18989. [Joe Orton]
03ccfda9ec9fde56c83b381eccbac44071b36143Andreas Gustafsson *) mod_userdir: Ensure that the userdir identity is used for
03ccfda9ec9fde56c83b381eccbac44071b36143Andreas Gustafsson suexec userdir access in a virtual host which has suexec configured.
03ccfda9ec9fde56c83b381eccbac44071b36143Andreas Gustafsson PR 18156. [Joshua Slive]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) mod_rewrite no longer confuses the RewriteMap caches if
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson different maps defined in different virtual hosts use the
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson same map name. PR 26462. [Andr� Malo]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) mod_setenvif: Remove "support" for Remote_User variable which
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson never worked at all. PR 25725. [Andr� Malo]
66e2dd5001f249bc5e2c89074df41f769f13bf07Andreas Gustafsson *) Backport from 2.1 / Regression from 1.3: mod_headers now knows
66e2dd5001f249bc5e2c89074df41f769f13bf07Andreas Gustafsson again the functionality of the ErrorHeader directive. But instead
66e2dd5001f249bc5e2c89074df41f769f13bf07Andreas Gustafsson using this misnomer additional flags to the Header directive were
2e097e67d87630bbefb5c1b0bea6f1bc8b2ec86dAndreas Gustafsson introduced ("always" and "onsuccess", defaulting to the latter).
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence PR 28657. [Andr� Malo]
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence *) Use the higher performing 'httpready' Accept Filter on all platforms
66e2dd5001f249bc5e2c89074df41f769f13bf07Andreas Gustafsson except FreeBSD < 4.1.1. [Paul Querna]
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence *) mod_usertrack: Escape the cookie name before pasting into the
2e097e67d87630bbefb5c1b0bea6f1bc8b2ec86dAndreas Gustafsson regexp. [Andr� Malo]
66e2dd5001f249bc5e2c89074df41f769f13bf07Andreas Gustafsson *) Extend the SetEnvIf directive to capture subexpressions of the
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson matched value. [Andr� Malo]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson *) Recursive Include directives no longer crash. The server stops
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson including configuration files after a certain nesting level (128
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson as distributed). This is configurable at compile time using the
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson -DAP_MAX_INCLUDE_DEPTH switch. PR 28370. [Andr� Malo]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson *) mod_dir: the trailing-slash behaviour is now configurable using the
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson DirectorySlash directive. [Andr� Malo]
6d3496c045bbf35514b4697ff20741975083e125Michael Graff *) Allow proxying of resources that are invoked via DirectoryIndex.
6d3496c045bbf35514b4697ff20741975083e125Michael Graff PR 14648, 15112, 29961. [Andr� Malo]
6d3496c045bbf35514b4697ff20741975083e125Michael Graff *) util_ldap: Switched the lock types on the shared memory cache
6d3496c045bbf35514b4697ff20741975083e125Michael Graff from thread reader/writer locks to global mutexes in order to
6d3496c045bbf35514b4697ff20741975083e125Michael Graff provide cross process cache protection. [Brad Nicholes]
6d3496c045bbf35514b4697ff20741975083e125Michael Graff *) util_ldap: Reworked the cache locking scheme to eliminate duplicate
6d3496c045bbf35514b4697ff20741975083e125Michael Graff cache entries in the credentials cache due to race conditions.
6d3496c045bbf35514b4697ff20741975083e125Michael Graff [Brad Nicholes]
6d3496c045bbf35514b4697ff20741975083e125Michael Graff *) util_ldap: Enhanced the util_ldap cache-info display to show more
6d3496c045bbf35514b4697ff20741975083e125Michael Graff detail about the contents and current state of the cache.
6d3496c045bbf35514b4697ff20741975083e125Michael Graff [Brad Nicholes]
6d3496c045bbf35514b4697ff20741975083e125Michael Graff *) Enable the option to support anonymous shared memory in mod_ldap.
6d3496c045bbf35514b4697ff20741975083e125Michael Graff This makes the cache work on Linux again. [Graham Leggett]
6d3496c045bbf35514b4697ff20741975083e125Michael Graff *) Enable special ErrorDocument value 'default' which restores the
6d3496c045bbf35514b4697ff20741975083e125Michael Graff canned server response for the scope of the directive.
6d3496c045bbf35514b4697ff20741975083e125Michael Graff [Geoffrey Young, Andr� Malo]
6d3496c045bbf35514b4697ff20741975083e125Michael Graff *) work around MSIE Digest auth bug - if AuthDigestEnableQueryStringHack
2e097e67d87630bbefb5c1b0bea6f1bc8b2ec86dAndreas Gustafsson is set in r->subprocess_env allow mismatched query strings to pass.
2e097e67d87630bbefb5c1b0bea6f1bc8b2ec86dAndreas Gustafsson PR 27758. [Paul Querna, Geoffrey Young]
2e097e67d87630bbefb5c1b0bea6f1bc8b2ec86dAndreas Gustafsson *) Accept URLs for the ServerAdmin directive. If the supplied
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence argument is not recognized as an URL, assume it's a mail address.
2e097e67d87630bbefb5c1b0bea6f1bc8b2ec86dAndreas Gustafsson PR 28174. [Andr� Malo, Paul Querna]
2e097e67d87630bbefb5c1b0bea6f1bc8b2ec86dAndreas Gustafsson *) initialize server arrays prior to calling ap_setup_prelinked_modules
2e097e67d87630bbefb5c1b0bea6f1bc8b2ec86dAndreas Gustafsson so that static modules can push Defines values when registering
edcb93b49c763709ead9374a15ec3b7c4d904383Andreas Gustafsson hooks just like DSO modules can ["Philippe M. Chiasson" <gozer cpan.org>]
edcb93b49c763709ead9374a15ec3b7c4d904383Andreas Gustafsson *) Small fix to allow reverse proxying to an ftp server. Previously
edcb93b49c763709ead9374a15ec3b7c4d904383Andreas Gustafsson an attempt to do this would try and connect to 0.0.0.0, regardless
edcb93b49c763709ead9374a15ec3b7c4d904383Andreas Gustafsson of the server specified. PR 24922
edcb93b49c763709ead9374a15ec3b7c4d904383Andreas Gustafsson [Pascal Terjan <pterjan@linuxfr.org>]
edcb93b49c763709ead9374a15ec3b7c4d904383Andreas Gustafsson *) Add the NOTICE file to the rpm spec file in compliance with the
edcb93b49c763709ead9374a15ec3b7c4d904383Andreas Gustafsson Apache v2.0 license. [Graham Leggett]
edcb93b49c763709ead9374a15ec3b7c4d904383Andreas Gustafsson *) RPM spec file changes: changed default dependancy to link to db4
edcb93b49c763709ead9374a15ec3b7c4d904383Andreas Gustafsson instead of db3. Fixed complaints about unpackaged files.
edcb93b49c763709ead9374a15ec3b7c4d904383Andreas Gustafsson [Graham Leggett]
edcb93b49c763709ead9374a15ec3b7c4d904383Andreas GustafssonChanges with Apache 2.0.50
edcb93b49c763709ead9374a15ec3b7c4d904383Andreas Gustafsson *) SECURITY: CAN-2004-0493 (cve.mitre.org)
d9b7ec02d9ad4a5c611f2deeb18875819ae62662Andreas Gustafsson Close a denial of service vulnerability identified by Georgi
d9b7ec02d9ad4a5c611f2deeb18875819ae62662Andreas Gustafsson Guninski which could lead to memory exhaustion with certain
d9b7ec02d9ad4a5c611f2deeb18875819ae62662Andreas Gustafsson input data. [Jeff Trawick]
507ee70afd23b893c06afb28ee93b260e4e38acfAndreas Gustafsson *) mod_cgi: Handle output on stderr during script execution on Unix
eb3807ea5494fbad3bc83531217416f3512e725bAndreas Gustafsson platforms; preventing deadlock when stderr output fills pipe buffer.
65e117d576ffa9588abc070c570c84d6c258e3baAndreas Gustafsson Also fixes case where stderr from nph- scripts could be lost.
d9b7ec02d9ad4a5c611f2deeb18875819ae62662Andreas Gustafsson PR 22030, 18348. [Joe Orton, Jeff Trawick]
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson *) mod_alias now emits a warning if it detects overlapping *Alias*
029f5aa86138aa9c32b3dc3c8a00626eea961d35James Brister directives. [Andr� Malo]
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson *) mod_rewrite no longer turns forward proxy requests into reverse proxy
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson requests. PR 28125 [ast domdv.de, Andr� Malo]
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson *) ap_set_sub_req_protocol and ap_finalize_sub_req_protocol are now
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson exported on Win32 and Netware as well (minor MMN bump). PR 28523.
c8c884b79b3cb4a9e279391f913edc36f31608e9Andreas Gustafsson [Edward Rudd <eddie omegaware.com>, Andr� Malo]
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson *) Restore the ability to disable the use of AcceptEx on Win9x systems
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson automatically (broken in 2.0.49). PR 28529. [Andr� Malo]
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson *) <VirtualHost myhost> now applies to all IP addresses for myhost
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson instead of just the first one reported by the resolver. This
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson corrects a regression since 1.3. [Jeff Trawick]
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson *) util_ldap: allow relative paths for LDAPTrustedCA to be resolved
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson against ServerRoot PR#26602 [Brad Nicholes]
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson *) SECURITY: CAN-2004-0488 (cve.mitre.org)
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson mod_ssl: Fix a buffer overflow in the FakeBasicAuth code for a
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson (trusted) client certificate subject DN which exceeds 6K in length.
164f0b0caefe9cb4d2475f458caadb8b28a6060fAndreas Gustafsson *) mod_dav_fs: Fix MKCOL response for missing parent collections, which
164f0b0caefe9cb4d2475f458caadb8b28a6060fAndreas Gustafsson caused issues for the Eclipse WebDAV extension.
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley PR 29034. [Joe Orton]
f5facdfc297825bbd99adf45421dd2ba13a1132eBob Halley *) mod_deflate: Fix memory consumption (which was proportional to the
d6f63eca91110a65f098181b396fb5a33ff17259Bob Halley response size). PR 29318. [Joe Orton]
d6f63eca91110a65f098181b396fb5a33ff17259Bob Halley *) mod_ssl: Log the errors returned on failure to load or initialize
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley a crypto accelerator engine. [Joe Orton]
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley *) Allow RequestHeader directives to be conditional. PR 27951.
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson [Vincent Deffontaines <vincent gryzor.com>, Andr� Malo]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Allow LimitRequestBody to be reset to unlimited. PR 29106
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Fix a bunch of cases where the return code of the regex compiler
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington was not checked properly. This affects: mod_setenvif, mod_usertrack,
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington mod_proxy, mod_proxy_ftp and core. PR 28218. [Andr� Malo]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) mod_ssl: Fix a potential segfault in the 'shmcb' session cache for
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington small cache sizes. PR 27751. [Geoff Thorpe <geoff geoffthorpe.net>]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Remove 2Gb log file size restriction on some 32-bit platforms.
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington PR 13511. [Joe Orton]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) mod_logio no longer removes the EOS bucket. PR 27928.
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington [Bojan Smojver <bojan rexursive.com>]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) htpasswd no longer refuses to process files that contain empty
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington lines. [Andr� Malo]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Regression from 1.3: At startup, suexec now will be checked for
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington availability, the setuid bit and user root. The works only if
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington httpd is compiled with the shipped APR version (0.9.5).
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington PR 28287. [Andr� Malo]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Unix MPMs: Stop dropping connections when the file descriptor
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington is at least FD_SETSIZE. [Jeff Trawick]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) Fix handling of IPv6 numeric strings in mod_proxy. [Jeff Trawick]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) mod_isapi: send_response_header() failed to copy status string's
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson last character. PR 20619. [Jesse Pelton <jsp pkc.com>]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Fix a segfault when requests for shared memory fails and returns
22608315e8e08b1fef12bce6e123c9ff6fe7a17cAndreas Gustafsson NULL. Fix a segfault caused by a lack of bounds checking on the
3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff cache. PR 24801. [Graham Leggett]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) Throw an error message if an attempt is made to use the LDAPTrustedCA
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson or LDAPTrustedCAType directives in a VirtualHost. PR 26390
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson [Brad Nicholes]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) Fix a potential segfault if the bind password in the LDAP cache
8ac1e9e3dab3b3c4682b0fcd217cff700c75a32bAndreas Gustafsson is NULL. PR 28250. [Jari Ahonen <jah progress.com>]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) Quotes cannot be used around require group and require dn
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson directives, update the documentation to reflect this. Also add
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson quotes around the dn and group within debug messages, to make it
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson more obvious why authentication is failing if quotes are used in
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson error. PR 19304. [Graham Leggett]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) The Microsoft LDAP SDK escapes filters for us, stop util_ldap
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson from escaping filters twice when the backslash character is used.
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson PR 24437. [Jess Holle <jessh ptc.com>]
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson *) Overhaul handling of LDAP error conditions, so that the util_ldap_*
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson functions leave the connections in a sane state after errors have
9c2a9c5306c7619040a61b25b07c5f51ef6a40d9Brian Wellington occurred. PR 27748, 17274, 17599, 18661, 21787, 24595, 24683, 27134,
9c2a9c5306c7619040a61b25b07c5f51ef6a40d9Brian Wellington 27271 [Graham Leggett]
7efc8c3f692fc3226c00ce8bdc1b90eb06562352David Lawrence *) mod_ldap calls ldap_simple_bind_s() to validate the user
7efc8c3f692fc3226c00ce8bdc1b90eb06562352David Lawrence credentials. If the bind fails, the connection is left
7efc8c3f692fc3226c00ce8bdc1b90eb06562352David Lawrence in an unbound state. Make sure that the ldap connection
7efc8c3f692fc3226c00ce8bdc1b90eb06562352David Lawrence record is updated to show that the connection is no longer
7efc8c3f692fc3226c00ce8bdc1b90eb06562352David Lawrence bound. [Brad Nicholes]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) Ensure that lines in the request which are too long are
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson properly terminated before logging.
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson [Tsurutani Naoki <turutani scphys.kyoto-u.ac.jp>]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) Update the bind credentials for the cached LDAP connection to
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson reflect the last bind. This prevents util_ldap from creating
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson unnecessary connections rather than reusing cached connections.
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson [Brad Nicholes]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) mod_isapi: GetServerVariable returned improperly terminated header
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson fields given "ALL_HTTP" or "ALL_RAW". PR 20656.
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson [Jesse Pelton <jsp pkc.com>]
ef9f3246f4fd4acfbefde8bd269fd5c9b4df1217Brian Wellington *) mod_isapi: GetServerVariable("ALL_RAW") returned the wrong buffer
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence size. PR 20617. [Jesse Pelton <jsp pkc.com>]
22608315e8e08b1fef12bce6e123c9ff6fe7a17cAndreas Gustafsson *) mod_dav: Fix a problem that could cause crashes when manipulating
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson locks on some platforms. [Jeff Trawick]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) mod_headers no longer crashes if an empty header value should
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence be added. [Andr� Malo]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) Fix segfault in mod_expires, which occured under certain
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson circumstances. PR 28047. [Andr� Malo]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) htpasswd: use apr_temp_dir_get() and general cleanup
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson [Guenter Knauf <eflash gmx.net>, Thom May]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) mod_ssl: Fix memory leak in session cache handling. PR 26562
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson [Madhusudan Mathihalli]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) mod_ssl: Fix potential segfaults when performing SSL shutdown from
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson a pool cleanup. PR 27945. [Joe Orton]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Add forensic logging module (mod_log_forensic).
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) logresolve: Allow size of log line buffer to be overridden at
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington build time (MAXLINE). PR 27793. [Jeff Trawick]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Fix the comment delimiter in htdbm so that it correctly parses the
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington username comment. Also add a terminate function to allow NetWare
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington to pause the output before the screen is destroyed.
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington [Guenter Knauf <eflash gmx.net>, Brad Nicholes]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Fix crash when Apache was started with no Listen directives.
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington [Michael Corcoran <mcorcoran warpsolutions.com>]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) core_output_filter: Fix bug that could result in sending
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington garbage over the network when module handlers construct
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington bucket brigades containing multiple file buckets all referencing
992b1b2aeecf50351b4378f0ac6346cb0ba3e103Andreas Gustafsson the same open file descriptor. [Bojan Smojver]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Fix memory corruption problem with ap_custom_response() function.
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington The core per-dir config would later point to request pool data
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington that would be reused for different purposes on different requests.
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington [Jeff Trawick, based on an old 1.3 patch submitted by Will Lowe]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Win32: Tweak worker thread accounting routines to eliminate
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington server hang when number of Listen directives in httpd.conf
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington is greater than or equal to the setting of ThreadsPerChild.
076c955ef03923790c4fc9acb07f17077f046860David Lawrence [Bill Stoddard]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian WellingtonChanges with Apache 2.0.49
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) SECURITY: CAN-2004-0174 (cve.mitre.org)
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington Fix starvation issue on listening sockets where a short-lived
dbe4e41b8169f9d7ce9bcb39fd3e9954251aa697David Lawrence connection on a rarely-accessed listening socket will cause a
03a89d793846fae03d2f682fdef3d00ef059717dDavid Lawrence child to hold the accept mutex and block out new connections until
03a89d793846fae03d2f682fdef3d00ef059717dDavid Lawrence another connection arrives on that rarely-accessed listening socket.
03a89d793846fae03d2f682fdef3d00ef059717dDavid Lawrence With Apache 2.x there is no performance concern about enabling the
03a89d793846fae03d2f682fdef3d00ef059717dDavid Lawrence logic for platforms which don't need it, so it is enabled everywhere
03a89d793846fae03d2f682fdef3d00ef059717dDavid Lawrence except for Win32. [Jeff Trawick]
03a89d793846fae03d2f682fdef3d00ef059717dDavid Lawrence *) mod_cgid: Fix storage corruption caused by use of incorrect pool.
03a89d793846fae03d2f682fdef3d00ef059717dDavid Lawrence [Jeff Trawick]
03a89d793846fae03d2f682fdef3d00ef059717dDavid Lawrence *) Win32: find_read_listeners was not correctly handling multiple
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington listeners on the Win32DisableAcceptEx path. [Bill Stoddard]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Fix bug in mod_usertrack when no CookieName is set. PR 24483.
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington [Manni Wood <manniwood planet-save.com>]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Fix some piped log problems: bogus "piped log program '(null)'
076c955ef03923790c4fc9acb07f17077f046860David Lawrence failed" messages during restart and problem with the logger
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington respawning again after Apache is stopped. PR 21648, PR 24805.
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington [Jeff Trawick]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Fixed file extensions for real media files and removed rpm extension
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington from mime.types. PR 26079. [Allan Sandfeld <kde carewolf.com>]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Remove compile-time length limit on request strings. Length is
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington now enforced solely with the LimitRequestLine config directive.
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington [Paul J. Reder]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) mod_ssl: Send the Close Alert message to the peer before closing
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington the SSL session. PR 27428. [Madhusudan Mathihalli, Joe Orton]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) SECURITY: CVE-2004-0113 (cve.mitre.org)
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington mod_ssl: Fix a memory leak in plain-HTTP-on-SSL-port handling.
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington PR 27106. [Joe Orton]
b534d5f57fe3dee3a0f9ea41d2583245c2036e8bAndreas Gustafsson *) mod_ssl: Fix bug in passphrase handling which could cause spurious
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington failures in SSL functions later. PR 21160. [Joe Orton]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) mod_log_config: Fix corruption of buffered logs with threaded
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington MPMs. PR 25520. [Jeff Trawick]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Fix mod_include's expression parser to recognize strings correctly
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington even if they start with an escaped token. [Andr� Malo]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Add fatal exception hook for use by diagnostic modules. The hook
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington is only available if the --enable-exception-hook configure parm
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington is used and the EnableExceptionHook directive has been set to
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington "on". [Jeff Trawick]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Allow mod_auth_digest to work with sub-requests with different
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington methods than the original request. PR 25040.
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson [Josh Dady <jpd indecisive.com>]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) fix "Expected </Foo>> but saw </Foo>" errors in nested,
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson argumentless containers.
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson ["Philippe M. Chiasson" <gozer cpan.org>]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) mod_auth_ldap: Fix some segfaults in the cache logic. PR 18756.
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson [Matthieu Estrade <apache moresecurity.org>, Brad Nicholes]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) mod_cgid: Restart the cgid daemon if it crashes. PR 19849
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson [Glenn Nielsen <glenn apache.org>]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) The whole codebase was relicensed and is now available under
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson the Apache License, Version 2.0 (http://www.apache.org/licenses).
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson [Apache Software Foundation]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) Fixed cache-removal order in mod_mem_cache.
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley [Jean-Jacques Clar, Cliff Woolley]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) mod_setenvif: Fix the regex optimizer, which under circumstances
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley treated the supplied regex as literal string. PR 24219.
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley [Andr� Malo]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) ap_mpm.h: Fix include guard of ap_mpm.h to reference mpm
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley instead of mmn. [Andr� Malo]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) mod_rewrite: Catch an edge case, where strange subsequent RewriteRules
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley could lead to a 400 (Bad Request) response. [Andr� Malo]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) Keep focus of ITERATE and ITERATE2 on the current module when
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington the module chooses to return DECLINE_CMD for the directive.
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington PR 22299. [Geoffrey Young <geoff apache.org>]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) Add support for IMT minor-type wildcards (e.g., text/*) to
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington ExpiresByType. PR#7991 [Ken Coar]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) Fix segfault in mod_mem_cache cache_insert() due to cache size
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington becoming negative. PR: 21285, 21287
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington [Bill Stoddard, Massimo Torquati, Jean-Jacques Clar]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) core.c: If large file support is enabled, allow any file that is
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington greater than AP_MAX_SENDFILE to be split into multiple buckets.
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington This allows Apache to send files that are greater than 2gig.
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington Otherwise we run into 32/64 bit type mismatches in the file size.
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington [Brad Nicholes]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) proxy_http fix: mod_proxy hangs when both KeepAlive and
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington ProxyErrorOverride are enabled, and a non-200 response without a
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington body is generated by the backend server. (e.g.: a client makes a
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington request containing the "If-Modified-Since" and "If-None-Match"
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington headers, to which the backend server respond with status 304.)
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington [Graham Wiseman <gwiseman fscinternet.com>, Richard Reiner]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) mod_dav: Reject requests which include an unescaped fragment in the
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington Request-URI. PR 21779. [Amit Athavale <amit_athavale lycos.com>]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) Build array of allowed methods with proper dimensions, fixing
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington possible memory corruption. [Jeff Trawick]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) mod_ssl: Fix potential segfault on lookup of SSL_SESSION_ID.
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington PR 15057. [Otmar Lendl <lendl nic.at>]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) mod_ssl: Fix streaming output from an nph- CGI script. PR 21944
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) mod_usertrack no longer inspects the Cookie2 header for
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington the cookie name. PR 11475. [Chris Darrochi <chrisd pearsoncmg.com>]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) mod_usertrack no longer overwrites other cookies.
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington PR 26002. [Scott Moore <apache nopdesign.com>]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) worker MPM: fix stack overlay bug that could cause the parent
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington process to crash. [Jeff Trawick]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) Win32: Add Win32DisableAcceptEx directive. This Windows
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington NT/2000/CP directive is useful to work around bugs in some
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington third party layered service providers like virus scanners,
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington VPN and firewall products, that do not properly handle
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington WinSock 2 APIs. Use this directive if your server is issuing
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington AcceptEx failed messages.
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington [Allan Edwards, Bill Rowe, Bill Stoddard, Jeff Trawick]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) Make REMOTE_PORT variable available in mod_rewrite.
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington PR 25772. [Andr� Malo]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) Fix a long delay with CGI requests and keepalive connections on
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington AIX. [Jeff Trawick]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) mod_autoindex: Add 'XHTML' option in order to allow switching between
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington HTML 3.2 and XHTML 1.0 output. PR 23747. [Andr� Malo]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) Add XHTML Document Type Definitions to httpd.h (minor MMN bump).
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) mod_ssl: Advertise SSL library version as determined at run-time rather
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington than at compile-time. PR 23956. [Eric Seidel <seidel apple.com>]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) mod_ssl: Fix segfault on a non-SSL request if the 'c' log
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson format code is used. PR 22741. [Gary E. Miller <gem rellim.com>]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Fix build with parallel make. PR 24643. [Joe Orton]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) mod_rewrite: In external rewrite maps lookup keys containing
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson a newline now cause a lookup failure. PR 14453.
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson [Cedric Gavage <cedric.gavage unixtech.be>, Andr� Malo]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Backport major overhaul of mod_include's filter parser from 2.1.
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson The new parser code is expected to be more robust and should
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson catch all of the edge cases that were not handled by the previous one.
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson The 2.1 external API changes were hidden by a wrapper which is
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson expected to keep the API backwards compatible. [Andr� Malo]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Add a hook (insert_error_filter) to allow filters to re-insert
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson themselves during processing of error responses. Enable mod_expires
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson to use the new hook to include Expires headers in valid error
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson responses. This addresses an RFC violation. It fixes PRs 19794,
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson 24884, and 25123. [Paul J. Reder]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Add Polish translation of error messages. PR 25101.
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson [Tomasz Kepczynski <tomek jot23.org>]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Add AP_MPMQ_MPM_STATE function code for ap_mpm_query. (Not yet
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson supported for BeOS or OS/2 MPMs.) [Jeff Trawick, Brad Nicholes,
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson Bill Stoddard]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Add mod_status hook to allow modules to add to the mod_status
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson report. [Joe Orton]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Fix htdbm to generate comment fields in DBM files correctly.
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson [Justin Erenkrantz]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) mod_dav: Use bucket brigades when reading PUT data. This avoids
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson problems if the data stream is modified by an input filter. PR 22104.
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson [Tim Robbins <tim robbins.dropbear.id.au>, Andr� Malo]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Fix RewriteBase directive to not add double slashes. [Andr� Malo]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) Improve 'configure --help' output for some modules. [Astrid Ke�ler]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Correct UseCanonicalName Off to properly check incoming port number.
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson [Jim Jagielski]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Fix slow graceful restarts with prefork MPM. [Joe Orton]
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson *) Fix a problem with namespace mappings being dropped in mod_dav_fs;
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson if any property values were set which defined namespaces these
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson came out mangled in the PROPFIND response. PR 11637.
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley [Amit Athavale <amit_athavale persistent.co.in>]
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley *) mod_dav: Return a WWW-auth header for MOVE/COPY requests where
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley the destination resource gives a 401. PR 15571. [Joe Orton]
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson *) SECURITY: CVE-2003-0020 (cve.mitre.org)
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson Escape arbitrary data before writing into the errorlog. Unescaped
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson errorlogs are still possible using the compile time switch
cb726f24e7a8b3d49815497ebb4a566fe9e195bfAndreas Gustafsson "-DAP_UNSAFE_ERROR_LOG_UNESCAPED". [Geoffrey Young, Andr� Malo]
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley *) mod_autoindex / core: Don't fail to show filenames containing
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley special characters like '%'. PR 13598. [Andr� Malo]
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson *) mod_status: Report total CPU time accurately when using a threaded
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson MPM. PR 23795. [Jeff Trawick]
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson *) Fix memory leak in handling of request bodies during reverse
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley proxy operations. PR 24991. [Larry Toppi <larry.toppi citrix.com>]
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley *) Win32 MPM: Implement MaxMemFree to enable setting an upper
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson limit on the amount of storage used by the bucket brigades
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson in each server thread. [Bill Stoddard]
6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence *) Modified the cache code to be header-location agnostic. Also
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson fixed a number of other cache code bugs related to PR 15852.
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson Includes a patch submitted by Sushma Rai <rsushma novell.com>.
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson This fixes mod_mem_cache but not mod_disk_cache yet so I'm not
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson closing the PR since that is what they are using. [Paul J. Reder]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) complain via error_log when mod_include's INCLUDES filter is
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley enabled, but the relevant Options flag allowing the filter to run
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson for the specific resource wasn't set, so that the filter won't
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley silently get skipped. next remove itself, so the warning will be
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley logged only once [Stas Bekman, Jeff Trawick, Bill Rowe]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) mod_info: HTML escape configuration information so it displays
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson correctly. PR 24232. [Thom May]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Restore the ability to add a description for directories that
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson don't contain an index file. (Broken in 2.0.48) [Andr� Malo]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Fix a problem with the display of empty variables ("SetEnv foo") in
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson mod_include. PR 24734 [Markus Julen <mj zermatt.net>]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) mod_log_config: Log the minutes component of the timezone correctly.
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley PR 23642. [Hong-Gunn Chew <hgbug gunnet.org>]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) mod_proxy: Fix cases where an invalid status-line could be sent
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley to the client. PR 23998. [Joe Orton]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) mod_ssl: Fix segfaults at startup if other modules which use OpenSSL
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley are also loaded. [Joe Orton]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) mod_ssl: Use human-readable OpenSSL error strings in logs; use
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley thread-safe interface for retrieving error strings. [Joe Orton]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) mod_expires: Initialize ExpiresDefault to NULL instead of "" to
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley avoid reporting an Internal Server error if it is used without
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley having been set in the httpd.conf file. PR: 23748, 24459
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley [Andre Malo, Liam Quinn <liam htmlhelp.com>]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) mod_autoindex: Don't omit the <tr> start tag if the SuppressIcon
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley option is set. PR 21668. [Jesse Tie-Ten-Quee <highos highos.com>]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) mod_include no longer allows an ETag header on 304 responses.
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley PR 19355. [Geoffrey Young <geoff apache.org>, Andr� Malo]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) EBCDIC: Convert header fields to ASCII before sending (broken
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley since 2.0.44). [Martin Kraemer]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) Fix the inability to log errors like exec failure in
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley mod_ext_filter/mod_cgi script children. This was broken after
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley such children stopped inheriting the error log handle.
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley [Jeff Trawick]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) Fix mod_info to use the real config file name, not the default
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley config file name. [Aryeh Katz <aryeh secured-services.com>]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) Set the scoreboard state to indicate logging prior to running
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley logging hooks so that server-status will show 'L' for hung loggers
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley instead of 'W'. [Jeff Trawick]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob HalleyChanges with Apache 2.0.48
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) SECURITY [CAN-2003-0789]: mod_cgid: Resolve some mishandling of
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington the AF_UNIX socket used to communicate with the cgid daemon and
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley the CGI script. [Jeff Trawick]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington *) SECURITY [CAN-2003-0542]: Fix buffer overflows in mod_alias and
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington mod_rewrite which occurred if one configured a regular expression
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley with more than 9 captures. [Andr� Malo]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) mod_include: fix segfault which occured if the filename was not
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson set, for example, when processing some error conditions.
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson PR 23836. [Brian Akins <bakins web.turner.com>, Andr� Malo]
cb726f24e7a8b3d49815497ebb4a566fe9e195bfAndreas Gustafsson *) fix the config parser to support <Foo>..</Foo> containers (no
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson arguments in the opening tag) supported by httpd 1.3. Without
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson this change mod_perl 2.0's <Perl> sections are broken.
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson ["Philippe M. Chiasson" <gozer cpan.org>]
cb726f24e7a8b3d49815497ebb4a566fe9e195bfAndreas Gustafsson *) mod_cgid: fix a hash table corruption problem which could
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson result in the wrong script being cleaned up at the end of a
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson request. [Jeff Trawick]
cb726f24e7a8b3d49815497ebb4a566fe9e195bfAndreas Gustafsson *) Update httpd-*.conf to be clearer in describing the connection
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley between AddType and AddEncoding for defining the meaning of
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley compressed file extensions. [Roy Fielding]
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson *) mod_rewrite: Don't die silently when failing to open RewriteLogs.
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson PR 23416. [Andr� Malo]
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson *) mod_rewrite: Fix mod_rewrite's support of the [P] option to send
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence rewritten request using "proxy:". The code was adding multiple "proxy:"
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson fields in the rewritten URI. PR: 13946.
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley [Eider Oliveira <eider bol.com.br>]
6b99e640f34b3e9b3f2b4dcb10986f78e85fe1a4Andreas Gustafsson *) cache_util: Fix ap_check_cache_freshness to check max_age, smax_age, and
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley expires as directed in RFC 2616. [Thomas Castelle <tcastelle generali.fr>]
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley *) Ensure that ssl-std.conf is generated at configure time, and switch
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson to using the expanded config variables to work the same as
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson *) mod_ssl: Fix segfaults after renegotiation failure. PR 21370
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson *) mod_autoindex: If a directory contains a file listed in the
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley DirectoryIndex directive, the folder icon is no longer replaced
875ad7d99d1b2bf9afcf11b73f5e65ac012ba745Andreas Gustafsson by the icon of that file. PR 9587.
875ad7d99d1b2bf9afcf11b73f5e65ac012ba745Andreas Gustafsson [David Shane Holden <dpejesh yahoo.com>]
875ad7d99d1b2bf9afcf11b73f5e65ac012ba745Andreas Gustafsson *) Fixed mod_usertrack to not get false positive matches on the
875ad7d99d1b2bf9afcf11b73f5e65ac012ba745Andreas Gustafsson user-tracking cookie's name. PR 16661.
875ad7d99d1b2bf9afcf11b73f5e65ac012ba745Andreas Gustafsson [Manni Wood <manniwood planet-save.com>]
875ad7d99d1b2bf9afcf11b73f5e65ac012ba745Andreas Gustafsson *) mod_cache: Fix the cache code so that responses can be cached
875ad7d99d1b2bf9afcf11b73f5e65ac012ba745Andreas Gustafsson if they have an Expires header but no Etag or Last-Modified
875ad7d99d1b2bf9afcf11b73f5e65ac012ba745Andreas Gustafsson headers. PR 23130.
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) mod_log_config: Fix %b log format to write really "-" when 0 bytes
ea96c33a393c338db917f7e311b56f63b31925acAndreas Gustafsson were sent (e.g. with 304 or 204 response codes). [Astrid Ke�ler]
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson *) Modify ap_get_client_block() to note if it has seen EOS.
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson [Justin Erenkrantz]
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson *) Fix a bug, where mod_deflate sometimes unconditionally compressed the
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson content if the Accept-Encoding header contained only other tokens than
2e097e67d87630bbefb5c1b0bea6f1bc8b2ec86dAndreas Gustafsson "gzip" (such as "deflate"). PR 21523. [Joe Orton, Andr� Malo]
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson *) Avoid an infinite recursion, which occured if the name of an included
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson config file or directory contained a wildcard character. PR 22194.
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley *) mod_ssl: Fix a problem setting variables that represent the
d60f5b9bc8c1e1f7ddebc6c7834f7550a8e8be6fBob Halley client certificate chain. PR 21371 [Jeff Trawick]
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley *) Unix: Handle permissions settings for flock-based mutexes in
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley unixd_set_global|proc_mutex_perms(). Allow the functions to be
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley called for any type of mutex. PR 20312 [Jeff Trawick]
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley *) ab: Work over non-loopback on Unix again. PR 21495. [Jeff Trawick]
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley *) Fix a misleading message from the some of the threaded MPMs when
325c88703c78ddb975994f7123ab4f93b6650a87Bob Halley MaxClients has to be lowered due to the setting of ServerLimit.
325c88703c78ddb975994f7123ab4f93b6650a87Bob Halley [Jeff Trawick]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Lower the severity of the "listener thread didn't exit" message
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson to debug, as it is of interest only to developers. PR 9011
0f03a5d6a7e9b6da3c30ebef053abaf486f5b312Andreas Gustafsson [Jeff Trawick]
029f5aa86138aa9c32b3dc3c8a00626eea961d35James Brister *) MPMs: The bucket brigades subsystem now honors the MaxMemFree setting.
0f03a5d6a7e9b6da3c30ebef053abaf486f5b312Andreas Gustafsson [Cliff Woolley, Jean-Jacques Clar]
029f5aa86138aa9c32b3dc3c8a00626eea961d35James Brister *) Install config.nice into the build/ directory to make
0f03a5d6a7e9b6da3c30ebef053abaf486f5b312Andreas Gustafsson minor version upgrades easier. [Joshua Slive]
0f03a5d6a7e9b6da3c30ebef053abaf486f5b312Andreas Gustafsson *) Fix mod_deflate so that it does not call deflate() without checking
0f03a5d6a7e9b6da3c30ebef053abaf486f5b312Andreas Gustafsson first whether it has something to deflate. (Currently this causes
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley deflate to generate a fatal error according to the zlib spec.)
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley PR 22259. [Stas Bekman]
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley *) mod_ssl: Fix FakeBasicAuth for subrequest. Log an error when an
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley identity spoof is encountered.
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley [Sander Striker]
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley *) mod_rewrite: Ignore RewriteRules in .htaccess files if the directory
71385229ce0f2c7d277ca16bbc554bb3bdf9f587Andreas Gustafsson containing the .htaccess file is requested without a trailing slash.
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley PR 20195. [Andr� Malo]
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley *) ab: Overlong credentials given via command line no longer clobber
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley the buffer. [Andr� Malo]
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley *) mod_deflate: Don't attempt to hold all of the response until we're
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley done. [Justin Erenkrantz]
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley *) Assure that we block properly when reading input bodies with SSL.
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley PR 19242. [David Deaves <David.Deaves dd.id.au>, William Rowe]
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley *) Update mime.types to include latest IANA and W3C types. [Roy Fielding]
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley *) mod_ext_filter: Set additional environment variables for use by
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley the external filter. PR 20944. [Andrew Ho, Jeff Trawick]
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley *) Fix buildconf errors when libtool version changes. [Jeff Trawick]
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley *) Remember an authenticated user during internal redirects if the
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley redirection target is not access protected and pass it
8545bb47650a61d0d59fd2cb0080268df890cae6Bob Halley to scripts using the REDIRECT_REMOTE_USER environment variable.
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson PR 10678, 11602. [Andr� Malo]
b00a764bc8feb6ee6a9b50ef90000870ff03aaeaBrian Wellington *) mod_include: Fix a trio of bugs that would cause various unusual
b00a764bc8feb6ee6a9b50ef90000870ff03aaeaBrian Wellington sequences of parsed bytes to omit portions of the output stream.
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson PR 21095. [Ron Park <ronald.park cnet.com>, Andr� Malo, Cliff Woolley]
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson *) Update the header token parsing code to allow LWS between the
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson token word and the ':' seperator. [PR 16520]
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson [Kris Verbeeck <kris.verbeeck advalvas.be>, Nicel KM <mnicel yahoo.com>]
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson *) Eliminate creation of a temporary table in ap_get_mime_headers_core()
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson [Joe Schaefer <joe+gmane sunstarsys.com>]
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson *) Added FreeBSD directory layout. PR 21100.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence [Sander Holthaus <info orangexl.com>, Andr� Malo]
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson *) Fix NULL-pointer issue in ab when parsing an incomplete or non-HTTP
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson response. PR 21085. [Glenn Nielsen <glenn apache.org>, Andr� Malo]
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson *) mod_rewrite: Perform child initialization on the rewrite log lock.
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson This fixes a log corruption issue when flock-based serialization
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson is used (e.g., FreeBSD). [Jeff Trawick]
9ee5efde7df57cbe70fb9b32c9d898e8ef7eca1eBob Halley *) Don't respect the Server header field as set by modules and CGIs.
9ee5efde7df57cbe70fb9b32c9d898e8ef7eca1eBob Halley As with 1.3, for proxy requests any such field is from the origin
9ee5efde7df57cbe70fb9b32c9d898e8ef7eca1eBob Halley server; otherwise it will have our server info as controlled by
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley the ServerTokens directive. [Jeff Trawick]
016326d111130b2810cb453d6bf2ff94f398b050Bob HalleyChanges with Apache 2.0.47
2e097e67d87630bbefb5c1b0bea6f1bc8b2ec86dAndreas Gustafsson *) SECURITY [CAN-2003-0192]: Fixed a bug whereby certain sequences
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson of per-directory renegotiations and the SSLCipherSuite directive
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson being used to upgrade from a weak ciphersuite to a strong one
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson could result in the weak ciphersuite being used in place of the
1c4fb0e31596318b2a712247c7f8bed21412964cAndreas Gustafsson strong one. [Ben Laurie]
9ee5efde7df57cbe70fb9b32c9d898e8ef7eca1eBob Halley *) SECURITY [CAN-2003-0253]: Fixed a bug in prefork MPM causing
029f5aa86138aa9c32b3dc3c8a00626eea961d35James Brister temporary denial of service when accept() on a rarely accessed port
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson returns certain errors. Reported by Saheed Akhtar
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley *) SECURITY [CAN-2003-0254]: Fixed a bug in ftp proxy causing denial
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson of service when target host is IPv6 but proxy server can't create
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson IPv6 socket. Fixed by the reporter. [Yoshioka Tsuneo
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson *) SECURITY [VU#379828] Prevent the server from crashing when entering
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley infinite loops. The new LimitInternalRecursion directive configures
533b0475054882ea1c81cb1ec4aa3e6750711bbcBob Halley limits of subsequent internal redirects and nested subrequests, after
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson which the request will be aborted. PR 19753 (and probably others).
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley [William Rowe, Jeff Trawick, Andr� Malo]
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley *) core_output_filter: don't split the brigade after a FLUSH bucket if
92583b722bfdcc5714dfd77711c54fee55f51c5dBob Halley it's the last bucket. This prevents creating unneccessary empty
a4b6a1622b1b6672a6e0c7186167bbe3997568c6Bob Halley brigades which may not be destroyed until the end of a keepalive
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson *) Add support for "streamy" PROPFIND responses.
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson [Ben Collins-Sussman <sussman collab.net>]
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson *) mod_cgid: Eliminate a double-close of a socket. This resolves
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson various operational problems in a threaded MPM, since on the
0c637e129e5623d6d70574617bf848ec73a468f8Andreas Gustafsson second attempt to close the socket, the same descriptor was
0c637e129e5623d6d70574617bf848ec73a468f8Andreas Gustafsson often already in use by another thread for another purpose.
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson [Jeff Trawick]
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson *) mod_negotiation: Introduce "prefer-language" environment variable,
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson which allows to influence the negotiation process on request basis
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson to prefer a certain language. [Andr� Malo]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Make mod_expires' ExpiresByType work properly, including for
0c637e129e5623d6d70574617bf848ec73a468f8Andreas Gustafsson dynamically-generated documents. [Ken Coar, Bill Stoddard]
0c637e129e5623d6d70574617bf848ec73a468f8Andreas GustafssonChanges with Apache 2.0.46
a55d0a9080c8ef4117d2fc27f63220a56afb2434Andreas Gustafsson *) SECURITY [CAN-2003-0245]: Fixed a bug causing apr_pvsprintf() to crash
d22b4de3f1c3151979e2a064cb271007c710c5a7Mark Andrews by sending an overly long string. This can be triggered remotely
d22b4de3f1c3151979e2a064cb271007c710c5a7Mark Andrews through mod_dav, mod_ssl, and other mechanisms. Reported by David
e01ecff4b1562a24e6de7e9396c60e9dffdb78ceAndreas Gustafsson Endler <DEndler iDefense.com>.
e01ecff4b1562a24e6de7e9396c60e9dffdb78ceAndreas Gustafsson [Joe Orton <jorton redhat.com>]
cfab2f4e039052fd5c71f8de93a9510bec0581f9Andreas Gustafsson *) SECURITY [CAN-2003-0189]: Fixed a denial-of-service vulnerability
029f5aa86138aa9c32b3dc3c8a00626eea961d35James Brister affecting basic authentication on Unix platforms related to
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence thread-safety in apr_password_validate(). The problem was reported
cfab2f4e039052fd5c71f8de93a9510bec0581f9Andreas Gustafsson by John Hughes <john.hughes entegrity.com>.
e01ecff4b1562a24e6de7e9396c60e9dffdb78ceAndreas Gustafsson *) Fix for mod_dav. Call the 'can_be_activity' callback, if provided,
029f5aa86138aa9c32b3dc3c8a00626eea961d35James Brister when a MKACTIVITY request comes in.
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence [Ben Collins-Sussman <sussman collab.net>]
e01ecff4b1562a24e6de7e9396c60e9dffdb78ceAndreas Gustafsson *) Perform run-time query in apxs for apr and apr-util's includes.
e01ecff4b1562a24e6de7e9396c60e9dffdb78ceAndreas Gustafsson [Justin Erenkrantz]
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson *) run libtool from the apr install directory (in case that is different
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson from the apache install directory) [Jeff Trawick]
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson *) configure.in: Play nice with libtool-1.5. [Wilfredo Sanchez]
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson *) If mod_mime_magic does not know the content-type, do not attempt to
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson guess. PR 16908. [Andrew Gapon <agapon telcordia.com>]
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson *) ssl session caching(shmht) : Fix a SEGV problem with SHMHT session
a55d0a9080c8ef4117d2fc27f63220a56afb2434Andreas Gustafsson caching. PR 17864.
a55d0a9080c8ef4117d2fc27f63220a56afb2434Andreas Gustafsson [Andreas Leimbacher <andreasl67 yahoo.de>, Madhusudan Mathihalli]
a55d0a9080c8ef4117d2fc27f63220a56afb2434Andreas Gustafsson *) Add a delete flag to htpasswd.
a55d0a9080c8ef4117d2fc27f63220a56afb2434Andreas Gustafsson *) Fix mod_rewrite's handling of absolute URIs. The escaping routines
a55d0a9080c8ef4117d2fc27f63220a56afb2434Andreas Gustafsson now work scheme dependent and the query string will only be
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence appended if supported by the particular scheme. [Andr� Malo]
a55d0a9080c8ef4117d2fc27f63220a56afb2434Andreas Gustafsson *) Add another check for already compressed content in mod_deflate.
0c637e129e5623d6d70574617bf848ec73a468f8Andreas Gustafsson PR 19913. [Tsuyoshi SASAMOTO <nazonazo super.win.ne.jp>]
c14c6f86ae1607eb39b8b37be25599b8cb923062Bob Halley *) Fixes for VPATH builds; copying special.mk and any future .mk files
c14c6f86ae1607eb39b8b37be25599b8cb923062Bob Halley from the source tree as well as the build tree (now creates a usable
a55d0a9080c8ef4117d2fc27f63220a56afb2434Andreas Gustafsson configuration for apxs), and eliminated redundant -I'nclude paths.
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence [William Rowe]
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence *) Code fixes, constness corrections and ssl_toolkit_compat.h updates
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson for SSLC and OpenSSL toolkit compatibility. Still work remains to
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson be done to cripple features based on the limitations of RSA's binary
a55d0a9080c8ef4117d2fc27f63220a56afb2434Andreas Gustafsson distribution of their SSL-C toolkit.
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson [William Rowe, Madhusudan Mathihalli, Jeff Trawick]
a55d0a9080c8ef4117d2fc27f63220a56afb2434Andreas Gustafsson *) Linux 2.4+: If Apache is started as root and you code
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson CoreDumpDirectory, coredumps are enabled via the prctl() syscall.
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson *) ap_get_mime_headers_core: allocate space for the trailing null
657f3b3768ef2d7c4f8663f9a116c67e8b4e9206Andreas Gustafsson when folding is in effect.
657f3b3768ef2d7c4f8663f9a116c67e8b4e9206Andreas Gustafsson PR 18170 [Peter Mayne <PeterMayne SPAM_SUX.ap.spherion.com>]
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence *) Fix --enable-mods-shared=most and other variants. [Aaron Bannert]
657f3b3768ef2d7c4f8663f9a116c67e8b4e9206Andreas Gustafsson *) mod_log_config: Add the ability to log the id of the thread
657f3b3768ef2d7c4f8663f9a116c67e8b4e9206Andreas Gustafsson processing the request via new %P formats. [Jeff Trawick]
657f3b3768ef2d7c4f8663f9a116c67e8b4e9206Andreas Gustafsson *) Use appropriate language codes for Czech (cs) and Traditional Chinese
657f3b3768ef2d7c4f8663f9a116c67e8b4e9206Andreas Gustafsson (zh-tw) in default config files. PR 9427. [Andr� Malo]
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence *) mod_auth_ldap: Use generic whitespace character class when parsing
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence "require" directives, instead of literal spaces only. PR 17135.
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson *) Hook mod_rewrite's type checker before mod_mime's one. That way the
657f3b3768ef2d7c4f8663f9a116c67e8b4e9206Andreas Gustafsson RewriteRule [T=...] Flag should work as expected now. PR 19626.
f1f2f8bd47370a231c5c700ef918bd6ad6c7d042Andreas Gustafsson *) htpasswd: Check the processed file on validity. If a line is not empty
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence and not a comment, it must contain at least one colon. Otherwise exit
c14c6f86ae1607eb39b8b37be25599b8cb923062Bob Halley with error code 7. [Kris Verbeeck <Kris.Verbeeck ubizen.com>, Thom May]
c14c6f86ae1607eb39b8b37be25599b8cb923062Bob Halley *) Fix a problem that caused httpd to be linked with incorrect flags
c14c6f86ae1607eb39b8b37be25599b8cb923062Bob Halley on some platforms when mod_so was enabled by default, breaking
c14c6f86ae1607eb39b8b37be25599b8cb923062Bob Halley DSOs on AIX. PR 19012 [Jeff Trawick]
b00a764bc8feb6ee6a9b50ef90000870ff03aaeaBrian Wellington *) By default, use the same CC and CPP with which APR was built.
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson The user can override with CC and CPP environment variables.
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson [Jeff Trawick]
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson *) Fix ap_construct_url() so that it surrounds IPv6 literal address
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson strings with []. This fixes certain types of redirection.
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson PR 19207. [Jeff Trawick]
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson *) forward port of buffer overflow fixes for htdigest. [Thom May]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Added AllowEncodedSlashes directive to permit control of whether
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson the server will accept encoded slashes ('%2f') in the URI path.
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson Default condition is off (the historical behaviour). This permits
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson environments in which the path-info needs to contain encoded
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson slashes. PR 543, 2389, 3581, 3589, 5687, 7066, 7865, 14639. [Ken Coar]
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson *) When using Redirect in directory context, append requested query
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson string if there's no one supplied by configuration. PR 10961.
c14c6f86ae1607eb39b8b37be25599b8cb923062Bob Halley [Andr� Malo]
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson *) Unescape the supplied wildcard pattern in mod_autoindex. Otherwise
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson the pattern will not always match as desired. PR 12596.
0c637e129e5623d6d70574617bf848ec73a468f8Andreas Gustafsson *) mod_autoindex now emits and accepts modern query string parameter
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson delimiters (;). Thus column headers no longer contain unescaped
0c637e129e5623d6d70574617bf848ec73a468f8Andreas Gustafsson ampersands. PR 10880 [Andr� Malo]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Enable ap_sock_disable_nagle for Windows. This along with the
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson addition of APR_TCP_NODELAY_INHERITED to apr.hw will cause Nagle
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson to be disabled for Windows. [Allan Edwards]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Correct a mis-correlation between mpm_common.c and mpm_common.h;
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson This patch reverts us to pre-2.0.46 behavior, using the
0c637e129e5623d6d70574617bf848ec73a468f8Andreas Gustafsson ap_sock_disable_nagle noop macro, because ap_sock_disable_nagle
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff was never compiled on Win32. [Allan Edwards, William Rowe]
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) Fix a build problem with passing unsupported --enable-layout
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson args to apr and apr-util. This broke binbuild.sh as well as
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson user-specified layout parameters. PR 18649 [Justin Erenkrantz,
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson *) If a Date response header was already set in the headers array,
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence this value was ignored in favour of the current time. This meant
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence that Date headers on proxied requests where rewritten when they
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley should not have been. PR: 14376 [Graham Leggett]
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson *) Add code to buildconf that produces an httpd.spec file from
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson httpd.spec.in, using build/get-version.sh from APR.
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson [Graham Leggett]
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson *) Fixed a segfault when multiple ProxyBlock directives were used.
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson PR: 19023 [Sami Tikka <sami.tikka f-secure.com>]
0c637e129e5623d6d70574617bf848ec73a468f8Andreas Gustafsson *) SECURITY [CAN-2003-0134] OS2: Fix a Denial of Service vulnerability
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff identified and reported by Robert Howard <rihoward rawbw.com> that
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson where device names faulted the running OS2 worker process.
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson The fix is actually in APR 0.9.4. [Brian Havard]
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson *) Forward port: Escape special characters (especially control
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson characters) in mod_log_config to make a clear distinction between
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson client-supplied strings (with special characters) and server-side
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson strings. This was already introduced in version 1.3.25.
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson *) mod_deflate: Check also err_headers_out for an already set
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson Content-Encoding: gzip header. This prevents gzip compressed content
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson from a CGI script from being compressed once more. PR 17797.
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas GustafssonChanges with Apache 2.0.45
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson *) Fix possible segfaults under obscure error conditions within the
8571e5ca3732d3ae954588c2aad40ae31a2bec90Andreas Gustafsson cgid daemon. [Jeff Trawick, William Rowe]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) SECURITY [CAN-2003-0132]: Close a Denial of Service vulnerability
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley identified by David Endler <DEndler iDefense.com> on all platforms.
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington An unlimited stream of newlines were acceptable between requests
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley where each <lf> would allocate an 80 byte buffer, leading very
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington quickly to memory exahustion. [Brian Pane]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington *) Added an rpm build script.
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington [Graham Leggett, Joe Orton <jorton redhat.com>]
9bd232838e08e9fcb070dd1aa2ce17604ce88469Andreas Gustafsson *) Simpler, faster code path for request header scanning [Brian Pane]
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley *) SECURITY: Eliminated leaks of several file descriptors to child
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson processes, such as CGI scripts. This fix depends on the APR library
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley release 0.9.2 or later (0.9.3 was distributed with the httpd
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson source tarball for Apache 2.0.45.) PR 17206
582732ce15d48cb521a32a551de3ce5ad2cc3290Andreas Gustafsson [Christian Kratzer <ck cksoft.de>, Bjoern A. Zeeb <bz zabbadoz.net>]
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley *) Fix path handling of mod_rewrite, especially on non-unix systems.
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley There was some confusion between local paths and URL paths.
9e694201cfe00011e98bfa9cdb6358e7d050be7bAndreas Gustafsson PR 12902. [Andr� Malo]
9e694201cfe00011e98bfa9cdb6358e7d050be7bAndreas Gustafsson *) Prevent endless loops of internal redirects in mod_rewrite by
d4e608c5bc38af9d50fed2e89442ed05dd3c335fBrian Wellington aborting after exceeding a limit of internal redirects. The
165250c40336857867bbfc29023d3d06fc823b97Brian Wellington limit defaults to 10 and can be changed using the RewriteOptions
d4e608c5bc38af9d50fed2e89442ed05dd3c335fBrian Wellington directive. PR 17462. [Andr� Malo]
9e694201cfe00011e98bfa9cdb6358e7d050be7bAndreas Gustafsson *) Win32: Avoid busy wait (consuming all the CPU idle cycles) when
9e694201cfe00011e98bfa9cdb6358e7d050be7bAndreas Gustafsson all worker threads are busy.
9e694201cfe00011e98bfa9cdb6358e7d050be7bAndreas Gustafsson [Igor Nazarenko <igor_nazarenko hotmail.com>]
9ee5efde7df57cbe70fb9b32c9d898e8ef7eca1eBob Halley *) Keep the subrequest filter in place when a subrequest is
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence redirected. PR 15423. [Jeff Trawick]
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence *) you can now specify the compression level for mod_deflate.
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence [Ian Holsman, Stephen Pierzchala <stephen pierzchala.com>,
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence Michael Schroepl <Michael.Schroepl telekurs.de>]
a8277d18aad1adbfbb59e9693529b4453b2bcb8eAndreas Gustafsson *) mod_deflate: Extend the DeflateFilterNote directive to
a8277d18aad1adbfbb59e9693529b4453b2bcb8eAndreas Gustafsson allow accurate logging of the filter's in- and outstream.
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence *) Allow SSLMutex to select/use the full range of APR locking
a8277d18aad1adbfbb59e9693529b4453b2bcb8eAndreas Gustafsson mechanisms available to it. Also, fix the bug that SSLMutex uses
353dcaf1cc77d122d9b4b750bbbfc4c96b4b292bAndreas Gustafsson APR_LOCK_DEFAULT no matter what. PR 8122 [Jim Jagielski,
353dcaf1cc77d122d9b4b750bbbfc4c96b4b292bAndreas Gustafsson Martin Kutschker <martin.t.kutschker blackbox.net>]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) Restore the ability of htdigest.exe to create files that contain
a8277d18aad1adbfbb59e9693529b4453b2bcb8eAndreas Gustafsson more than one user. PR 12910. [Andr� Malo]
353dcaf1cc77d122d9b4b750bbbfc4c96b4b292bAndreas Gustafsson *) Improve binary compatibility of the core between debug (aka
f30f2b279c63fd2f6b5d781a03f48d7e87ac3855Andreas Gustafsson maintainer-mode) and a non-debug compile.
f30f2b279c63fd2f6b5d781a03f48d7e87ac3855Andreas Gustafsson [Sander Striker]
7193a1762e428cfba06907e51fa9e4bce3b5569aAndreas Gustafsson *) mod_usertrack: don't set the cookie in subrequests. This works
7193a1762e428cfba06907e51fa9e4bce3b5569aAndreas Gustafsson around the problem that cookies were set twice during fast internal
f30f2b279c63fd2f6b5d781a03f48d7e87ac3855Andreas Gustafsson redirects. PR 13211. [Andr� Malo]
353dcaf1cc77d122d9b4b750bbbfc4c96b4b292bAndreas Gustafsson *) mod_autoindex no longer forgets output format and enabled version
353dcaf1cc77d122d9b4b750bbbfc4c96b4b292bAndreas Gustafsson sort in linked column headers. [Andr� Malo]
e02c696ea586f8dcc7c6145cc0f143f887960cd4Andreas Gustafsson *) Use .sv instead of .se as extension for Swedish documents in the
e02c696ea586f8dcc7c6145cc0f143f887960cd4Andreas Gustafsson default configuration. PR 12877. [Andr� Malo]
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson *) Updated mod_ldap and mod_auth_ldap to support the Novell LDAP SDK SSL
e02c696ea586f8dcc7c6145cc0f143f887960cd4Andreas Gustafsson and standardized the LDAP SSL support across the various LDAP SDKs.
e02c696ea586f8dcc7c6145cc0f143f887960cd4Andreas Gustafsson Isolated the SSL functionality to mod_ldap rather than speading it
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson across mod_auth_ldap and mod_ldap. Also added LDAPTrustedCA
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson and LDAPTrustedCAType directives to mod_ldap to allow for a more
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson common method of specifying the SSL certificate.
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson [Dave Ward, Brad Nicholes]
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson *) Fixed mod_ssl's SSLCertificateChain initialization to no longer
353dcaf1cc77d122d9b4b750bbbfc4c96b4b292bAndreas Gustafsson skip the first cert of the chain by default. This misbehavior
353dcaf1cc77d122d9b4b750bbbfc4c96b4b292bAndreas Gustafsson was introduced in 2.0.34. PR 14560 [Madhusudan Mathihalli]
353dcaf1cc77d122d9b4b750bbbfc4c96b4b292bAndreas Gustafsson *) mod_cgi, mod_cgid, mod_ext_filter: Log errors when scripts cannot
be91d961934c8530021a660f4c70414138e00d4eMichael Graff be started on Unix because of such problems as bad permissions,
353dcaf1cc77d122d9b4b750bbbfc4c96b4b292bAndreas Gustafsson bad shebang line, etc. [Jeff Trawick]
7d040ee1bd52d67dbefd95ce592ff7bb0e1c9f59Andreas Gustafsson *) Fix 64-bit problem in mod_ssl input logic.
7d040ee1bd52d67dbefd95ce592ff7bb0e1c9f59Andreas Gustafsson [Madhusudan Mathihalli <madhusudan_mathihalli hp.com>]
7d040ee1bd52d67dbefd95ce592ff7bb0e1c9f59Andreas Gustafsson *) Fix potential memory leaks in mod_deflate on malformed data. PR 16046.
7d040ee1bd52d67dbefd95ce592ff7bb0e1c9f59Andreas Gustafsson [Justin Erenkrantz]
7efc8c3f692fc3226c00ce8bdc1b90eb06562352David Lawrence *) Rewrite ap_xml_parse_input to use bucket brigades. PR 16134.
7efc8c3f692fc3226c00ce8bdc1b90eb06562352David Lawrence [Justin Erenkrantz]
7efc8c3f692fc3226c00ce8bdc1b90eb06562352David Lawrence *) Fix segfault which occurred when a section in an included
7efc8c3f692fc3226c00ce8bdc1b90eb06562352David Lawrence configuration file was not closed. PR 17093. [Andr� Malo]
573b8b48d888e3f203ddd3fc78eafa986b9af44bAndreas Gustafsson *) Enhance the behavior of mod_isapi's WriteClient() callback to
0c637e129e5623d6d70574617bf848ec73a468f8Andreas Gustafsson provide better emulation for isapi modules that presume that the
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence first WriteClient() call may send status and headers. An example
cb74b247bfdf63674fd406b8a4cb35d0d6e957d1Andreas Gustafsson of WriteClient() abuse is the foxisapi module, which relies on
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson that assumpion and now works. [William Rowe, Milan Kosina]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Check the return value of ap_run_pre_connection(). So if the
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson pre_connection phase fails (without setting c->aborted)
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson ap_run_process_connection is not executed. [Stas Bekman]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Fixed a problem with mod_ldap which caused it to fault when caching
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson was disabled. Needed to make sure that the code did not
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson attempt to use the cache if it didn't exist. Also fixed some memory
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson leaks which were due to not releasing LDAP resources on error
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson conditions. [Brad Nicholes]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Hook mod_proxy's fixup before mod_rewrite's fixup, so that by
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson mod_rewrite proxied URLs will not be escaped accidentally by
1c4fb0e31596318b2a712247c7f8bed21412964cAndreas Gustafsson mod_proxy's fixup. PR 16368 [Andr� Malo]
1c4fb0e31596318b2a712247c7f8bed21412964cAndreas Gustafsson *) While processing filters on internal redirects, remember seen EOS
1c4fb0e31596318b2a712247c7f8bed21412964cAndreas Gustafsson buckets also in the request structure of the redirect issuer(s). This
1c4fb0e31596318b2a712247c7f8bed21412964cAndreas Gustafsson prevents filters (such as mod_deflate) from adding garbage to the
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson response. PR 14451. [Andr� Malo]
6c046c19a39157503ab0222a344743944b52eb94Andreas Gustafsson *) suexec: Be more pedantic when cleaning environment. Clean it
6c046c19a39157503ab0222a344743944b52eb94Andreas Gustafsson immediately after startup. PR 2790, 10449.
6c046c19a39157503ab0222a344743944b52eb94Andreas Gustafsson [Jeff Stewart <jws purdue.edu>, Andr� Malo]
6c046c19a39157503ab0222a344743944b52eb94Andreas Gustafsson *) Fix apxs to insert LoadModule directives only outside of sections.
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson PR 8712, 9012. [Andr� Malo]
1840745dd553b2ff5b114a03cde40a2a404aa559Michael Graff *) Fix suexec compile error under SUNOS4, where strerror() doesn't
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson exist. PR 5913, 9977.
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson [Jonathan W Miner <Jonathan.W.Miner lmco.com>]
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson *) Fix If header parsing when a non-mod_dav lock token is passed to it.
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson PR 16452. [Justin Erenkrantz]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) mod_auth_digest no longer tries to guess AuthDigestDomain, if it's
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson not specified. Now it assumes "/" as already documented. PR 16937.
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson *) Try to log an error if a piped log program fails. Try to
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson restart a piped log program in more failure situations. Fix an
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson existing problem with error handling in piped_log_spawn(). Use
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson new APR apr_proc_create() features to prevent Apache from starting
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson on Unix* in most cases where a piped log program can be started,
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson and add log messages for the other situations. *Other platforms
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson already failed Apache initialization if a piped log program
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson couldn't be started. PR 15761 [Jeff Trawick]
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson *) Fix mod_cern_meta to not create empty metafiles when the
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson metafile searched for does not exist. PR 12353
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson [Owen Rees <owen_rees hp.com>]
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson *) Introduce debugging symbols for Win32 release builds, both .pdb
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence and .dbg files (older debuggers and Dr. Watson-type utilities
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson on WinNT or Win9x don't support the newer .pdb flavor.)
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson [Allen Edwards, William Rowe]
533b0475054882ea1c81cb1ec4aa3e6750711bbcBob Halley *) Fix bug where 'Satisfy Any' without an AuthType lost all MIME
533b0475054882ea1c81cb1ec4aa3e6750711bbcBob Halley information (and more). Related to PR 9076. [Andr� Malo]
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff *) mod_file_cache: fix segfault serving mmaped cached files.
9ee5efde7df57cbe70fb9b32c9d898e8ef7eca1eBob Halley [Bill Stoddard]
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley *) mod_file_cache: fixed a segfault when multiple MMapFile directives
a4b6a1622b1b6672a6e0c7186167bbe3997568c6Bob Halley were used. PR 16313. [Cliff Woolley]
165250c40336857867bbfc29023d3d06fc823b97Brian Wellington *) Fix a nasty segfault in mmap_bucket_setaside() caused by passing
165250c40336857867bbfc29023d3d06fc823b97Brian Wellington an incompatible pointer type to mmap_bucket_destroy(void*).
165250c40336857867bbfc29023d3d06fc823b97Brian Wellington [Gerard Eviston <geviston bigpond.net.au>]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Enable the -n name parameter on NetWare to allow the
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson administrator to rename the Apache console screen
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson [Brad Nicholes]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Fixed piped access logs on Win32 by disabling OTHER_CHILD
ca9739800f045cd4d39014f98b920d4354b5bd14Michael Graff support by default in APR. More development is required
ca9739800f045cd4d39014f98b920d4354b5bd14Michael Graff to deploy OTHER_CHILD on Win32. [William Rowe]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Use saner default config values for suexec. PR 15713.
b03758b04ea5134c805d44fcc5315c878c6f7996Andreas Gustafsson [Thom May <thom planetarytramp.net>]
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson *) mod_rewrite: Allow "RewriteEngine Off" even if no "Options FollowSymlinks"
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson (or SymlinksIfOwnermatch) is set. PR 12395. [Andr� Malo]
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson *) apxs: Include any special APR ld flags when linking the DSO.
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson This resolves problems on AIX when building a DSO with apxs+gcc.
9ee5efde7df57cbe70fb9b32c9d898e8ef7eca1eBob Halley [Jeff Trawick]
016326d111130b2810cb453d6bf2ff94f398b050Bob Halley *) Added character set support to mod_auth_LDAP to allow it to
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson convert extended characters used in the user ID to UTF-8
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson before authenticating against the LDAP directory. The new
036df8a12dc56126ada0e472c22d93d55eef9675Andreas Gustafsson directive AuthLDAPCharsetConfig is used to specify the config
a4b6a1622b1b6672a6e0c7186167bbe3997568c6Bob Halley file that contains the character set conversion table.
b8257bd2d872546e7cc358fdf32331ce8850bca4Bob Halley [Brad Nicholes]
7f4db15e68befbd2f7a6f9c81a6702fe9cd6610fMichael Graff *) Don't remove the Content-Length from responses in mod_proxy
533b0475054882ea1c81cb1ec4aa3e6750711bbcBob Halley PR: 8677 [Brian Pane]
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley *) Ensure LDAP version is set to v3 on every bind. PR 14235.
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff [Sergey A. Lipnevich <sergeyli pisem.net>]
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson *) Fix mod_ldap to open an existing shared memory file should one
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson already exist. PR 12757. [Scooter Morris <scooter gene.com>,
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson Graham Leggett]
a4b6a1622b1b6672a6e0c7186167bbe3997568c6Bob Halley *) Fix the ulimit command used by apachectl on Tru64. PR 13609.
b8257bd2d872546e7cc358fdf32331ce8850bca4Bob Halley [Joseph Senulis <Joseph.Senulis dnr.state.wi.us>, Jeff Trawick]
582732ce15d48cb521a32a551de3ce5ad2cc3290Andreas Gustafsson *) Change the ulimit command used by apachectl on AIX so that it
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley works in all locales. [Jeff Trawick]
173b32c660c1e4d5141b5ca740e8fab3c593652fBob Halley *) mod_ext_filter: Fix a problem building argument lists which
582732ce15d48cb521a32a551de3ce5ad2cc3290Andreas Gustafsson occasionally caused exec to fail. PR 15491. [Jeff Trawick]
173b32c660c1e4d5141b5ca740e8fab3c593652fBob HalleyChanges with Apache 2.0.44
b03758b04ea5134c805d44fcc5315c878c6f7996Andreas Gustafsson *) mod_autoindex: Bring forward the IndexOptions IgnoreCase option
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson from Apache 1.3. PR 14276
22608315e8e08b1fef12bce6e123c9ff6fe7a17cAndreas Gustafsson [David Shane Holden <dpejesh yahoo.com>, William Rowe]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) mod_mime: Workaround to prevent a segfault if r->filename=NULL
165250c40336857867bbfc29023d3d06fc823b97Brian Wellington *) Reorder the definitions for mod_ldap and mod_auth_ldap within
99abbe0bc4e2ee45515c7b9c4cf538e68206d90dAndreas Gustafsson config.m4 to make sure the parent mod_ldap is defined first.
46993e1d9d18410a5852b7d990338b70b158855cMichael Graff This ensures that mod_ldap comes before mod_auth_ldap in the
ad61cbe04f3660c2db07a9d288a2594319cea90bAndreas Gustafsson httpd.conf file, which is necessary for mod_auth_ldap to load.
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson PR 14256 [Graham Leggett]
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson *) Fix the building of cgi command lines when the query string
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson contains '='. PR 13914 [Ville Skytt� <ville.skytta iki.fi>,
533b0475054882ea1c81cb1ec4aa3e6750711bbcBob Halley Jeff Trawick]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Rename CacheMaxStreamingBuffer to MCacheMaxStreamingBuffer. Move
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson implementation of MCacheMaxStreamingBuffer from mod_cache to
582732ce15d48cb521a32a551de3ce5ad2cc3290Andreas Gustafsson mod_mem_cache. MCacheMaxStreamingBuffer now defaults to the
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence lesser of 100,000 bytes or MCacheMaxCacheObjectSize. This should
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson eliminate the need for explicitly coding MCacheMaxStreamingBuffer
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson in most configurations. [Bill Stoddard]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) mod_cache: Fix PR 15113, a core dump in cache_in_filter when
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson a redirect occurs. The code was passing a format string and
ad61cbe04f3660c2db07a9d288a2594319cea90bAndreas Gustafsson integer to apr_pstrcat. Changed to apr_psprintf.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence [Paul J. Reder]
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson *) Replace APU_HAS_LDAPSSL_CLIENT_INIT with APU_HAS_LDAP_NETSCAPE_SSL
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson as set by apr-util in util_ldap.c. This should allow mod_ldap
582732ce15d48cb521a32a551de3ce5ad2cc3290Andreas Gustafsson to work with the Netscape/Mozilla LDAP library. [�yvin S�mme
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson <somme oslo.westerngeco.slb.com>, Graham Leggett]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) Fix critical bug in new --enable-v4-mapped configure option
0084a7ed9c64a588d3ed0fe1f026854a659b7831Andreas Gustafsson implementation which broke IPv4 listening sockets on some
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence systems. [hiroyuki hanai <hanai imgsrc.co.jp>]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence *) mod_setenvif: Fix BrowserMatchNoCase support for non-regex
a1747570262ed336c213aaf6bd31bc91993a46deAndreas Gustafsson patterns [Andr� Malo <nd perlig.de>]
7e03d1e22fc9ef120cd16089ccbf27ad1639efe9Andreas Gustafsson *) Add version string to provider API. [Justin Erenkrantz]
582732ce15d48cb521a32a551de3ce5ad2cc3290Andreas Gustafsson *) build: './configure && make' now works without an in-tree
d22b4de3f1c3151979e2a064cb271007c710c5a7Mark Andrews apr and apr-util. [Wilfredo Sanchez]
b03758b04ea5134c805d44fcc5315c878c6f7996Andreas Gustafsson *) mod_negotiation: Set the appropriate mime response headers
b03758b04ea5134c805d44fcc5315c878c6f7996Andreas Gustafsson (Content-Type, charset, Content-Language and Content-Encoding)
582732ce15d48cb521a32a551de3ce5ad2cc3290Andreas Gustafsson for negotated type-map "Body:" responses (such as the error
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson pages.) [Andr� Malo <nd perlig.de>]
3013dcc59de034a139a1aba98a5fa7f8da3d1299Bob Halley *) mod_log_config: Allow '%%' escaping in CustomLog format
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson strings to insert a literal, single '%'.
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson [Andr� Malo <nd perlig.de>]
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson *) mod_autoindex: AddDescription directives for directories
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson now work as in Apache 1.3, where no trailing '/' is
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson specified on the directory name. Previously, the trailing
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson '/' *had* to be specified, which was incompatible with
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson Apache 1.3. PR 7990 [Jeff Trawick]
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson *) Fix for PR 14556. The expiry calculations in mod_cache were
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson trying to perform "now + ((date - lastmod) * factor)" where
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson date == lastmod resulting in "now + 0". The code now follows
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson the else path (using the default expiration) if date is
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson equal to lastmod. [Sergey <rx armstrike.com>, Paul J. Reder]
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington *) Use AP_DECLARE in the debug versions of ap_strXXX in case the
d4e608c5bc38af9d50fed2e89442ed05dd3c335fBrian Wellington default calling convention is not the same as the one used by
63c82cf3ce90e60d3140b0d1c10d9cea9e0740f5Brian Wellington AP_DECLARE. [Juan Rivera <Juan.Rivera citrix.com>]
165250c40336857867bbfc29023d3d06fc823b97Brian Wellington *) mod_cache: Don't cache response header fields designated
d4e608c5bc38af9d50fed2e89442ed05dd3c335fBrian Wellington as hop-by-hop headers in HTTP/1.1 (RFC 2616 Section 13.5.1).
9e694201cfe00011e98bfa9cdb6358e7d050be7bAndreas Gustafsson [Estrade Matthieu <estrade-m ifrance.com>, Brian Pane]
ad61cbe04f3660c2db07a9d288a2594319cea90bAndreas Gustafsson *) mod_cgid: Handle environment variables containing newlines.
ad61cbe04f3660c2db07a9d288a2594319cea90bAndreas Gustafsson PR 14550 [Piotr Czejkowski <apache czarny.eu.org>, Jeff
d6f63eca91110a65f098181b396fb5a33ff17259Bob Halley *) Move mod_ext_filter out of experimental and into filters.
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson [Jeff Trawick]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Fixed a memory leak in mod_deflate with dynamic content.
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson PR 14321 [Ken Franken <kfranken decisionmark.com>]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Add --[enable|disable]-v4-mapped configure option to control
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson whether or not Apache expects to handle IPv4 connections
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson on IPv6 listening sockets. Either setting will work on
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson systems with the IPV6_V6ONLY socket option. --enable-v4-mapped
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson must be used on systems that always allow IPv4 connections on
9fdf20d0dea288572033095995547789059d4d6bAndreas Gustafsson IPv6 listening sockets. PR 14037 (Bugzilla), PR 7492 (Gnats)
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson [Jeff Trawick]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) This fixes a problem where the underlying cache code
d22b4de3f1c3151979e2a064cb271007c710c5a7Mark Andrews indicated that there was one more element on the cache
d22b4de3f1c3151979e2a064cb271007c710c5a7Mark Andrews than there actually was. This happened since element 0
99abbe0bc4e2ee45515c7b9c4cf538e68206d90dAndreas Gustafsson exists but is not used. This code allocates the correct
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson number of useable elements and reports the number of
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson actually used elements. The previous code only allowed
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson MCacheMaxObjectCount-1 objects to be stored in the
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence cache. [Paul J. Reder]
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson *) mod_setenvif: Add SERVER_ADDR special keyword to allow
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson envariable setting according to the server IP address
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson which received the request. [Ken Coar]
d22b4de3f1c3151979e2a064cb271007c710c5a7Mark Andrews *) mod_cgid: Terminate CGI scripts when the client connection
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson drops. PR 8388 [Jeff Trawick]
9e694201cfe00011e98bfa9cdb6358e7d050be7bAndreas Gustafsson *) Rearrange OpenSSL engine initialization to support RAND
9e694201cfe00011e98bfa9cdb6358e7d050be7bAndreas Gustafsson redirection on crypto accelerator.
9e694201cfe00011e98bfa9cdb6358e7d050be7bAndreas Gustafsson [Frederic DONNAT <frederic.donnat zencod.com>]
63c82cf3ce90e60d3140b0d1c10d9cea9e0740f5Brian Wellington *) Always emit Vary header if mod_deflate is involved in the
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson request. [Andre Malo <nd perlig.de>]
582732ce15d48cb521a32a551de3ce5ad2cc3290Andreas Gustafsson *) mod_isapi: Stop unsetting the 'empty' query string result with
206a60c0d78303feaf407eb8806c60dd34aabb0bAndreas Gustafsson a NULL argument in ecb->lpszQueryString, eliminating segfaults
1921b4f61906c1e0f1a708dd82fd9e430a0e1af8Andreas Gustafsson for some ISAPI modules. PR 14399
a1747570262ed336c213aaf6bd31bc91993a46deAndreas Gustafsson *) mod_isapi: Fix an issue where the HSE_REQ_DONE_WITH_SESSION
559b10cc8f3e1dc4d93f55c9336f74839e9fa362Andreas Gustafsson notification is received before the HttpExtensionProc() returns
559b10cc8f3e1dc4d93f55c9336f74839e9fa362Andreas Gustafsson HSE_STATUS_PENDING. This only affected isapi .dll's configured
559b10cc8f3e1dc4d93f55c9336f74839e9fa362Andreas Gustafsson with the ISAPIFakeAsync on directive. PR 11918
143c2d39fafc0e36e0fa291b7708b60309e5a1b6Andreas Gustafsson [John DeSetto <jdesetto radiantsystems.com>, William Rowe]
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson *) mod_isapi: Fix the issue where all results from mod_isapi would
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson run through the core die handler resulting in invalid responses
6017f424ee3c02d7f22132c77576ea38542fa949Andreas Gustafsson or access log entries. PR 10216 [William Rowe]
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson *) Improves the user friendliness of the CacheRoot processing
7efc8c3f692fc3226c00ce8bdc1b90eb06562352David Lawrence over my last pass. This version avoids the pool allocations
c0564c15e73fc366a9200fc47dfcc7894382aa98Andreas Gustafsson but doesn't avoid all of the runtime checks. It no longer
8e12f9c899a07e505eb24c264123a0c7e36fe789David Lawrence terminates during post-config processing. An error is logged
8e12f9c899a07e505eb24c264123a0c7e36fe789David Lawrence once per worker, indicating that the CacheRoot needs to be set.
b8257bd2d872546e7cc358fdf32331ce8850bca4Bob Halley [Paul J. Reder]
b8257bd2d872546e7cc358fdf32331ce8850bca4Bob Halley *) Fix a bug where we keep files open until the end of a
b8257bd2d872546e7cc358fdf32331ce8850bca4Bob Halley keepalive connection, which can result in:
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson (24)Too many open files: file permissions deny server access
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson especially on threaded servers. [Greg Ames, Jeff Trawick]
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson *) Fix a bug in which mod_proxy sent an invalid Content-Length
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff when a proxied URL was invoked as a server-side include within
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson a page generated in response to a form POST. [Brian Pane]
9ee5efde7df57cbe70fb9b32c9d898e8ef7eca1eBob Halley *) Added code to process min and max file size directives and to
419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff init the expirychk flag in mod_disk_cache. Added a clarifying
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson comment to cache_util. [Paul J. Reder]
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson *) The value emitted by ServerSignature now mimics the Server HTTP
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson header as controlled by ServerTokens. [Francis Daly <deva daoine.org>]
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson *) Gracefully handly retry situations in the SSL input filter,
419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff by following the SSL libraries' retry semantics.
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson [William Rowe]
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson *) Terminate CGI scripts when the client connection drops. This
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson fix only applies to some normal paths in mod_cgi. mod_cgid
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson is still busted. PR 8388 [Jeff Trawick]
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson *) Fix a bug where 416 "Range not satisfiable" was being
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson returned for content that should have been redirected.
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson *) Fix memory leak in mod_ssl from internal SSL library allocations
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson within SSL_get_peer_certificate and X509_get_pubkey.
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson Madhusudan Mathihalli <madhusudan_mathihalli hp.com>].
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson *) mod_ssl uses free() inappropriately in several places, to free
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson memory which has been previously allocated inside OpenSSL.
b45b364f2255f4abfec674e5ff94b803e34b3e83Andreas Gustafsson Such memory should be freed with OPENSSL_free(), not with free().
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson [Nadav Har'El <nyh math.technion.ac.il>,
515277c0e83829341f3c6f13c3cd32f8b4eeb104Andreas Gustafsson Madhusudan Mathihalli <madhusudan_mathihalli hp.com>].
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson *) Emit a message to the error log when we return 404 because
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson the URI contained '%2f'. (This was previously nastily silent
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson and difficult to debug.) [Ken Coar]
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson *) Fix streaming output from an nph- CGI script. CGI:IRC now
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson works. PR 8482 [Jeff Trawick]
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson *) More accurate logging of bytes sent in mod_logio when
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson the client terminates the connection before the response
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson is completely sent [Bojan Smojver <bojan rexursive.com>]
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson *) Fix some problems in the perchild MPM.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence [Jonas Eriksson <jonas webkonsulterna.com>]
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson *) Change the CacheRoot processing to check for a required
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson value at config time. This saves a lot of wasted processing
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson if the mod_disk_cache module is loaded but no CacheRoot
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson was provided. This fix also adds code to log an error
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson and avoid useless pallocs and procesing when the computed
419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff cache file name cannot be opened. This also updates the
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson docs accordingly. [Paul J. Reder]
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson *) Introduce the EnableSendfile directive, allowing users of NFS
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson shares to disable sendfile mechanics when they either fail
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson outright or provide intermitantly corrupted data. PR
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson [William Rowe]
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson *) Resolve the error "An operation was attempted on something
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson that is not a socket. : winnt_accept: AcceptEx failed.
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson Attempting to recover." for users of various firewall and
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson anti-virus software on Windows. PR 8325 [William Rowe]
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson *) Add the ProxyBadHeader directive, which gives the admin some
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson control on how mod_proxy should handle bogus HTTP headers from
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson proxied servers. This allows 2.0 to "emulate" 1.3's behavior if
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson desired. [Jim Jagielski]
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson *) Change the LDAP modules to export their symbols correctly
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson during a Windows build. Add dsp files for Windows. Update
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson README.ldap file for Windows build instructions.
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson *) Performance improvements for the code that generates HTTP
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson response headers [Brian Pane]
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson *) Add -S as a synonym for -t -DDUMP_VHOSTS.
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson [Thom May <thom planetarytramp.net>]
419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff *) Fix a bug with dbm rewrite maps which caused the wrong value to
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson be used when the key was not found in the dbm. PR 13204
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson [Jeff Trawick]
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson *) Fix a problem with streaming script output and mod_cgid.
f5f38e9930344a30db725816e2f1c5edb9c2ac55Andreas Gustafsson [Jeff Trawick]
*) Add ap_register_provider/ap_lookup_provider API.
[John K. Sterling <john sterls.com>, Justin Erenkrantz]
hostname. Reported by Matthew Murphy <mattmurphy kc.rr.com>.
*) SECURITY [CVE-2002-1156] (cve.mitre.org):
this feature. [Jay Ball <jay veggiespam.com>]
received. [Bojan Smojver <bojan rexursive.com>]
server, namely /usr/local/apache2.
[SangBeom han <sbhan os.korea.ac.kr>]
authenticate. [Dr Richard Reiner <rreiner fscinternet.com>,
Richard Danielli <rdanielli fscinternet.com>, Graham Wiseman
<gwiseman fscinternet.com>, David Henderson
<dhenderson fscinternet.com>]
setttings. [Matthieu Estrade <estrade-m ifrance.com>]
segment of an Include statement (eg.. include /foo/bar/*.conf).
[Joe Orton <jorton redhat.com>]
*) mod_cache: cache_storage.c. Add the hostname and any request
[Kris Verbeeck <krisv be.ubizen.com>]
[Sander Temme <sctemme covalent.net>]
[Joe Schaefer <joe+apache sunstarsys.com>]
[Ian Holsman, Peter Bieringer <pb bieringer.de>]
[Justin Erenkrantz, Andrew Ho <andrew tellme.com>]
*) Restored the experimental leader/followers MPM to working
[Leon Brocard <acme astray.com>]
[Ian Holsman / Rob Cromwell <apachechangelog robcromwell.com>]
'EDITBIN /STACK:size apache.exe' can be used to change this
value directly in the apache.exe executable.
[Andr� Malo, Astrid Ke�ler <kess kess-net.de>]
maps. The dbm type (e.g., ndbm, gdbm) can be specified on the
*) Fixed mod_rewrite's RewriteMap prg: support so that request/response
[Ian Darwin <Ian779 darwinsys.com>]
*) thread safety & proxy-ftp [Alexey Panchenko <alexey liwest.ru>, Ian Holsman]
*) SECURITY [CAN-2002-0661] (cve.mitre.org):
httpd.conf context before any other Alias or Redirect directives;
Reported by Auriemma Luigi <bugtest sitoverde.com>.
*) SECURITY [CAN-2002-0654] (cve.mitre.org):
negotiation. Reported by Auriemma Luigi <bugtest sitoverde.com>.
*) SECURITY [CAN-2002-0654] (cve.mitre.org):
Close a path-revealing exposure in cgi/cgid when we
child process /path-to-script/script.pl" revealing the full path
of the script. Reported by Jim Race <jrace qualys.com>.
*) mod-deflate now checks to make sure that 'gzip-only-text/html' is
PR 10946 [William Rowe, David Shane Holden <dpejesh yahoo.com>]
PR 11030. [Jeff Trawick, David Shane Holden <dpejesh yahoo.com>]
[Shantonu Sen <ssen apple.com>]
the response should be filtered. Previously, "intype=text/html"
wouldn't match something like "text/html;charset=8859_1".
[Craig Sebenik <craig netapp.com>]
*) Get proxy ftp to work over IPv6. [Shoichi Sakane <sakane kame.net>]
*) Update SuSE layout. [Peter Poeml <poeml suse.de>]
[Thomas Sjogren <thomas northernsecurity.net>,
Erik Abele <erik codefaktor.de>, Rich Bowen, Joshua Slive]
[James Cox <imajes php.net>]
[Arthur P. Smith <apsmith aps.org>, Jeff Trawick]
[Perry Harrington <pedward webcom.com>]
*) Major overhaul of mod_dav, mod_dav_fs and the experimental/cache
modules to bring them up to the current apr/apr-util APIs.
[Brian Degenhardt <bmd mp3.com>, Ian Holsman]
*) Fix a silly htpasswd.c logic error that incorrectly reported that
*) Fixed a build problem in htpasswd.c on Win32.
[Guenter Knauf <eflash gmx.net>, Cliff Woolley]
*) We must set the MIME-type for .shtml files to text/html if we want them
[Dave Dyer <ddyer real-me.net>]
to replace. [Andreas Hasenack <andreas netbank.com.br>]
*) Fix install-bindist.sh so that it finds any perl instead of just
file. PR 9729 [Matthew Brecknell <mbrecknell orchestream.com>]
on the same drive as /winnt/system32. [William Rowe]
querying certain other variables from config_vars.mk. PR 9316
variables. [Stas Bekman <stas stason.org>]
besides server-root/build. PR 8453
*) Allow instdso.sh to work with full paths to the shared module.
*) Fixed Win32 wintty.exe support to assure the window title is valid.
*) SECURITY [CVE-2002-0392] (cve.mitre.org) [CERT VU#944335]:
[James Tait <JTait wyrddreams.demon.co.uk>]
*) Fix problem where mod_cache/mod_disk_cache was incorrectly
PR 7810 [Colm MacCarthaigh <colmmacc redbrick.dcu.ie>]
PR 7791, 8291 [Colm MacCarthaigh <colmmacc redbrick.dcu.ie>]
[Tsuyoshi Sasamoto <nazonazo super.win.ne.jp>, Brad Nicholes]
"<!--#if" directives [Julius Gawlas <julius_gawlas hp.com>]
[Cliff Woolley, Robin Johnson <robbat2 orbis-terrarum.net>]
[Kazuhisa ASADA <kaz asada.sytes.net>]
"make certificate" feature of mod_ssl for Apache 1.3.x. Test
may now be specified to the <File/Directory > container, rather
rather than MS APIs (using our own mod_isapi.h headers for ISAPI
[Andreas Sundstr�m <sunkan zappa.cx>]
[Asada Kazuhisa <kaz asada.sytes.net>]
that Alias/ScriptAlias will override Userdir. PR 8841
[Tahiry Ramanamampanoharana <nomentsoa hotmail.com>, Cliff Woolley]
*) Remove autom4te.cache in 'make distclean'.
[Thom May <thom planetarytramp.net>]
*) Fix generated httpd.conf to respect layout for LoadModule lines.
PR 8170. [Thom May <thom planetarytramp.net>]
*) Reverted a minor optimization in mod_ssl.c that used the vhost ID
program in SSLLog "| /path/to/program". [Cliff Woolley]
*-std.conf files. [Aaron Bannert]
[Colm <colmmacc redbrick.dcu.ie>]
*) Fix Win32 'short name' aliases in httpd.conf directives.
*) Fix generation of default httpd.conf when the layout paths are
experimental directory. [Scott Lamb <slamb slamb.org>]
ap_uname2id. [Scott Lamb <slamb slamb.org>]
underneath them. PR 8016 [David Shane Holden <dpejesh yahoo.com>]
*) Change instdso.sh to use libtool --install everywhere and then
and the old instdso.sh logic to simply cp the DSO didn't handle
directory. [Thom May <thom planetarytramp.net>]
located in server/mpm/experimental. [Justin Erenkrantz]
[Andreas Hasenack <andreas netbank.com.br>]
rel_logfiledir. PR 7841. [Andreas Hasenack <andreas netbank.com.br>]
*) Deprecated the apr_lock.h API. Please see the following files
[Ryan Morgan <rmorgan covalent.net>]
*) add optional fixup hook to proxy [Daniel Lopez <daniel covalent.net>]
*) fix possible compilation problem in ssl_engine_kernel.c. PR 7802
[Sung Kim <hunkim cse.ucsc.edu>]
*) Allow all Perchild directives to accept either numerical UID/GID
by Taisuke Yamada <tai iij.ad.jp> [Dirk-Willem van Gulik].
so that we can stop using malloc/free so frequently.
[Linus Walleij <triad df.lth.se>, Justin Erenkrantz]
*) Added exp_foo and rel_foo variables to config_vars.mk for
*) Fix some restart/terminate problems in the worker MPM. Don't
*) Add new M_FOO symbols for the WebDAV/DeltaV methods specified by
RFC 3253. Improved the method name/number mapping functions.
*) remove sock_enable_linger from connection.c [Ian Holsman]
has a '.' at the end (PR 9187) [Ryan Cruse <ryan estara.com>]
apr_shm. [Madhusudan Mathihalli <madhusudan_mathihalli hp.com>]
*) Fix apxs -g handling. Move config_vars.mk from the top build
*) Add a missing manualdir entry in the Debian config.layout.
[Thom May <thom planetarytramp.net>]
*) Modify receive/send loop in proxy_http and proxy_ftp so that
[Aaron Bannert, James LewisMoss <dres lewismoss.net>]
*) Add a missing errordir entry in the Debian config.layout. PR: 10067
[Dirk-Jan Faber <dirk-jan selwerd.nl>, Aaron Bannert,
Thom May <thom planetarytramp.net>]
HTTP_HEADER->CONTENT_SET/PROTOCOL) [Justin Erenkrantz]
--bindir, etc. [Thom May <thom planetarytramp.net>]
[Thom May <thom planetarytramp.net>]
*) Change mod_ssl to always do a full startup/teardown on restarts.
*) Introduce PassPhraseDialog "|/path/to/pipe" mechanism to mod_ssl.
ignored. [Thom May <thom planetarytramp.net>, Aaron Bannert]
used instead. [Thom May <thom planetarytramp.net>, Aaron Bannert]
to one of the following new lock APIs: apr_thread_mutex.h,
use the apr_lock.h API, as the old API will soon be deprecated.
[Ryan Morgan <rmorgan covalent.net>]
non-keepalive requests. [Ryan Morgan <rmorgan covalent.net>]
[Jos Backus <josb cncdsl.com>, Aaron Bannert]
[Adam Sussman <myddryn vishnu.vidya.com>]
[David MacKenzie <djm pix.net>]
[David MacKenzie <djm pix.net>]
created. [Adam Sussman <myddryn vishnu.vidya.com>]
Content-Lengths. [Sander Striker <striker apache.org>]
behavior without changes to the httpd.conf. [William Rowe]
and apr_file_dup2 functions. Win2K/XP services have no handles
associated for stdin/out/err, which caused unpredictable behavior
[Brian Reid <breid customlogic.com>,
Zvi Har'El <rl math.technion.ac.il>]
*) binbuild.sh: Make sure that we use the expat from our source
"LTFLAGS=' ' apxs -c mod_foo.c" to see what libtool does under
a url like: ftp://user@host/%2f/ (ported from apache_1.3.24)
of a file retrieval. Example: ftp://user@host/httpd/server/*.c
[Joe Orton <joe manyfish.co.uk>]
[Madhusudan Mathihalli <madhusudan_mathihalli hp.com>, Bill Stoddard]
filter stack when handling a GET request. The mod_dav/provider
duplicating the appropriate .h files such as os.h into the include
Use SSL functions/macros instead of directly dereferencing SSL
Add $SSL/include to configure search path.
[Madhusudan Mathihalli <madhusudan_mathihalli hp.com>]
[albert chin <china thewrittenword.com>]
modules (e.g., the identifer for mod_log_config was previously
[James Watson <ap2bug sowega.org>]
*) Change core code to allow an MPM to set hard thread/server
working with more than one vhost/uid. [Aaron Bannert]
mod_foo.so. This fixes some wonkiness on HP-UX, Tru64, and AIX
working on AIX. [Aaron Bannert, Dick Dunbar <RLDunbar pacbell.net>,
Gary Hook <ghook us.ibm.com>, Victor Orlikowski, Jeff Trawick]
*) Add back in the "suEXEC mechanism enabled (wrapper: /path/to/suexec)"
[Yoshifumi Hiramatsu <hiramatu boreas.dti.ne.jp> and
Gomez Henri <hgomez slib.fr>]
configured [John Sterling <sterling covalent.net>]
*) Fix apxs to use sbindir. [Henri Gomez <hgomez slib.fr>]
[Taketo Kabe <kabe sra-tohoku.co.jp>, Cliff Woolley] PR#8804
done being generated. [Brian Pane <bpane pacbell.net>]
[John Sterling <sterling covalent.net>]
*) Add Debian layout. [Daniel Stone <daniel sfarc.net>]
do. [Brian Pane <bpane pacbell.net>]
[Brian Pane <bpane pacbell.net>]
*) Fix infinite loop in mod_cgid.c.
SSL/plain, and depending also on the current setting of
AP_MPMQ_MAX_REQUESTS_DAEMON macros in ap_mpm.h and all standard
*) Introduce htdbm, a user management utility for db/dbm authorization
databases. [Mladen Turk <mturk mappingsoft.com>]
[Brian Pane <bpane pacbell.net>]
the port string. [Zvi Har'El <rl math.technion.ac.il>]
*) Add the support/checkgid helper app, which checks the run-time
*) Fix some bungling of the remote port in rfc1413.c so that
[Brian Pane <bpane pacbell.net>]
input and/or output filters to the request to the origin. While
the default httpd.conf for any module that was compiled
as a DSO. [Aaron Bannert <aaron clove.org>]
[Aaron Bannert <aaron clove.org>]
WinNT/2K machines. [Mladen Turk <mturk mappingsoft.com>]
[Aaron Bannert <aaron clove.org>]
and add commonly used audio/x-mpegurl for m3u extensions.
[Heiko Recktenwald <uzs106 uni-bonn.de>, Lars Eilebrecht]
relocated. [Aaron Bannert <aaron clove.org>]
*) Update the mime.types file to the registered media types as
[Aaron Bannert <aaron clove.org>]
[Brian Pane <bpane pacbell.net>]
[Ian Holsman <ianh cnet.com>]
*) Fix worker MPM's scoreboard logic. [Aaron Bannert <aaron clove.org>]
[Brian Pane <bpane pacbell.net>]
[Aaron Bannert <aaron clove.org>]
segments for. [Aaron Bannert <aaron clove.org>]
*) Fix SSL VPATH builds [Cody Sherr <csherr covalent.net>]
roll build_command_line/build_argv_list into a unified, overrideable
*) Back out the 1.45 change to util_script.c. This change made
[Taketo Kabe <kabe sra-tohoku.co.jp>]
compute variables. [Brian Pane <bpane pacbell.net>]
the file size. [Taketo Kabe <kabe sra-tohoku.co.jp>]
than per character. [Brian Pane <bpane pacbell.net>]
(which is the case with mod_proxy). [Ian Holsman <ianh cnet.com>]
This is not to be confused with support for the WinNT/Win32
cygwin platform users. [Stipe Tolj <tolj wapme-systems.de>]
but refused to check the mime.types file if AddType wasn't given
without setting the AddType text/html html would cause Apache to
[Aaron Bannert <aaron clove.org>]
an explicit request. E.g., if the .Z extension is associated with
an unzip filter, the user request somefile.Z.html, mod_negotiation
.html extension is associated with ContentType text/html.
shortcut moved to http_protocol.c as APR_HOOK_MIDDLE, and the
get/set/delete sessions using mod_ssl's callbacks
[Madhusudan Mathihalli <madhusudan_mathihalli hp.com>,
Geoff Thorpe <geoff geoffthorpe.net>]
pools more cleanly. [Aaron Bannert <aaron clove.org>]
[Madhusudan Mathihalli <madhusudan_mathihalli hp.com>]
[Paul J. Reder <rederpj raleigh.ibm.com>]
[John Sterling <sterling covalent.net>]
[Madhusudan Mathihalli <madhusudan_mathihalli hp.com>]
associated filename (e.g., we're filtering the error document for
*) Added the common error/ tree to the build/install targets
[Dave Carrigan <dave rudedog.org>, Graham Leggett]
[Dave Carrigan <dave rudedog.org>, Graham Leggett]
[Mladen Turk <mturk mappingsoft.com>, William Rowe]
*) Rounded out the mod_mime Add/Remove pairs by adding RemoveLanguage
[Cody Sherr <csherr covalent.net>]
*) We have always used the obsolete/deprecated Netscape syntax
in a dependency list (e.g., OS/390 make, certain levels of GNU
*) Install the SSL headers. [John Sterling <sterling covalent.net>]
[Cody Sherr <csherr covalent.net>]
[Mladen Turk <mturk mappingsoft.com>]
[Richard Labennett <rlabenn us.ibm.com>]
(e.g. for mod_dir) but none can be served. mod_negotation now
*) Add a handler to mod_includes.c. This handler is designed to
and have those methods <limit>able in the httpd.conf. It uses
the same bit mask/shifted offset as the original HTTP methods
an int provides. [Cody Sherr <csherr covalent.net>]
Madhusudan Mathihalli <madhusudan_mathihalli hp.com>,
*) Add a single listener/multiple worker MPM. This MPM is
*) Apache/Win32 now fills in the service description with Apache's
create the proper cgi-bin examples, including a test-cgi.bat, and
fix the perl shebang line for printenv.pl, when installing from
*) Fix a segfault in threaded.c caused by passing uninitialized
*) Fix problem reported by Taketo Kabe <kabe sra-tohoku.co.jp>
[G�nter Knauf <eflash gmx.net>]
#ifdefs. This has bitten us many times in generating the exports.c
[Sander Striker <striker apache.org>]
[Cody Sherr <csherr covalent.net>]
*) Performance improvement to mod_mime.c. find_ct() in mod_mime,
httpd.conf, the tables for languages and charsets are somewhat
a nice speedup. [Brian Pane <bpane pacbell.net>]
[Harrie Hazewinkel <harrie covalent.net>]
with certain invocations (e.g., ab -k -c 6 -n 100 localhost/).
[Ian Holsman <ianh cnet.com>]
*) Fix seg faults and/or missing output from mod_include. The
*) Automatically generate httpd.exp for AIX.
[Ryan Morgan <rmorgan covalent.net>]
add/append/set headers based on this envar thusly:
*) Optimise reset_filter() in http_protocol.c. [Greg Stein]
*) include/ap_compat.h tested and set APR_COMPAT_H instead of AP_COMPAT_H.
This prevented the inclusion of apr_compat.h. PR #7773
[Oleg Broytmann <phd phd.pp.ru>]
been part of Apache on Unix/Linux/BSD since the early v1.3 releases.
[Barrie Slaymaker <barries slaysys.com>]
and moving hints.m4 inline. [Roy Fielding]
[Ian Holsman <IanH cnet.com>]
[Ryan Bloom, Justin Erenkrantz <jerenkrantz ebuilt.com>,
*) Get mod_tls to compile/work better on Windows. PR #7612
*) Fix shutdown/restart hangs in the threaded MPM.
[John K. Sterling <sterling covalent.net>]
[Graham Leggett <minfrin sharp.fm>]
required into the core. [Harrie Hazewinkel <harrie covalent.net>]
[jun-ichiro hagino <itojun iijlab.net>]
[Ryan Morgan <rmorgan covalent.net>]
[Justin Erenkrantz <jerenkrantz ebuilt.com>]
Gnu makefile guidelines. [Justin Erenkrantz <jerenkrantz ebuilt.com>]
[<giles nemeton.com.au>]
--with-module=module_type:/path/to/module.c
The configure script will copy the module.c file to
modules/module_type, and it will be added to the relevant Makefiles.
*) Change the default installation directory to /usr/local/apache2,
as now defined by the "Apache" layout in config.layout. [Marc Slemko]
*) Make generic hooks to work, with mod_generic_hook_import/export
us use a consistent location for the config.layout file, and it
[jun-ichiro hagino <itojun iijlab.net>]
csv/gnuplot format, rudimentary ssl support and various other tweaks
apache. Often by a order of magnitude :-) See talk/paper of Sander
[Taketo Kabe <kabe sra-tohoku.co.jp>]
libtool muck that is now under srclib/apr/build. [Roy Fielding]
*) Fix bug in the Unix threaded.c MPM that allowed child processes
PR #7407 [Taketo Kabe <kiabe sra-tohoku.co.jp>]
[Mike Abbot <mja trudge.engr.sgi.com>, Bill Stoddard]
IPv6 listening sockets were used, allow/deny-from-IPv4-address rules
*) Reimplement the Windows MPM (mpm_winnt.c) to eliminate calling
[Graham Leggett <minfrin sharp.fm>]
[Jon Travis <jtravis covalent.net>]
[Paul J. Reder <rederpj raleigh.ibm.com>]
[Ryan Morgan <rmorgan covalent.net>]
[Dan Rench <drench xnet.com>]
one call to the filter. [Ryan Morgan <rmorgan covalent.net>]
[Mike Abbot <mja trudge.engr.sgi.com>]
[Jon Travis <jtravis covalent.net>]
*) Fix a seg fault in mod_userdir.c. We used to use the pw structure
[Taketo Kabe <kabe sra-tohoku.co.jp> and
Cliff Woolley <cliffwoolley yahoo.com>]
[Jon Travis <jtravis covalent.net>]
versions of MSIE and Netscape. [Clive Lin <clive CirX.ORG>] PR#7142
[Taketo Kabe <kabe sra-tohoku.co.jp>]
current hooks better. [Ryan Morgan <rmorgan covalent.net>]
added feature of allowing a uid/gid per child process. If no
uid/gid is specified, then Perchild behaves exactly like dexter.
[Gomez Henri <new-httpd slib.fr>]
*) Add a very early prototype of SSL support (in mod_tls.c). It is
vital that you read modules/tls/README before attempting to build
to #ifdef it. [Cliff Woolley <cliffwoolley yahoo.com>]
[Paul J. Reder <rederpj raleigh.ibm.com>]
*) Correct a typo in httpd.conf.
[Kunihiro Tanaka <tanaka apache.or.jp>] PR#7154
PR#7170 [Danek Duvall <dduvall eng.sun.com>]
*) Adopt apr user/group name features for mod_rewrite. Eliminates some
'extra' stat's for user/group since they should never occur, and now
Win32/OS2 exceptions without hiccuping. [William Rowe]
*) Modify the apr_stat/lstat/getfileinfo calls within apache to use
*) Move initgroupgs, ap_uname2id and ap_gname2id from util.c to
mpm_common.c. These functions are only valid on some platforms,
*) Update highperformance.conf to work with either prefork or
i.e. syntax like %{LA-U:REMOTE_USER}, and also fix the parsing of
Host: header. PR#7079 [Alexey Toptygin <alexeyt wam.umd.edu>]
hints.m4) of various compilation flags (eg: CFLAGS). Also,
*) Allow the buildconf process to find the config.m4 files in the correct
the changes in Apache 2.0 [Cliff Woolley <cliffwoolley yahoo.com>]
such as apache_2.0a9.tar.gz on FreeBSD again. [Ryan Bloom]
[Cliff Woolley <cliffwoolley yahoo.com>]
server root from the Apache.exe path.
loadable modules, dynamic libs are all named libfoo.dll, and the
makefile.win populates the include, lib and libexec directories.
numeric address strings (e.g., "Listen [fe80::1]:8080").
*) Get the functions in server/linked into the server, regardless of
be loadable into the server. Our new build/install mechanism expects
to build + install on Win32. Makefile.win now rewrites @@ServerRoot@
and installs the conf, htdocs and htdocs/manual directories.
[Paul J. Reder <rederpj raleigh.ibm.com>]
time, and that list is then used to generate the exports.c file.
[Sander van Zoest <sander covalent.net>]
*) Added lib/aputil/ as a placeholder for utility functions which are not
[Paul Reder <rederpj raleigh.ibm.com>]
rotatelogs.c code, and no longer churn log processes for this
[B. W. Fitzpatrick <fitz red-bean.com>]
hostname resolution/address string parsing and building
[Markus Gyger <mgyger itr.ch>]
*) Mod_info.c has now been ported to Apache 2.0. As a part of this
[Ryan Morgan <rmorgan covalent.net>]
[Branko �ibej <brane xbc.nu>]
[Shuichi Kitaguchi <ki hh.iij4u.or.jp>]
*) APR read/write functions and bucket read functions now operate
code in mod_log_config.c
*) In the Apache/Win32 console window, accept Ctrl+C to stop the
since we don't compute digests of filtered (e.g., translated)
*) Update the mime.types file to the registered media types as
*) Namespace protect some macros declared in ap_config.h
[Tomas "�gren" <stric ing.umu.se>]
[Cliff Woolley <cliffwoolley yahoo.com>]
*) Add support for /, //, //servername and //server/sharename
*) Fix another bug in the send_the_file() read/write loop. A partial
*) Reimplement core_output_filter to buffer/save bucket brigades
[Mike Abbott <mja sgi.com>]
*) send_the_file now falls back to a read/write loop on platforms that
*) APR now has UUID generation/formatting/parsing support.
-add rules for cross-compiling in rules.mk. Okay, rule to check for
-add missing "AR=@AR@" to severaly Makefile.in's
["R�diger" Kuhlmann <Tadu gmx.de>]
["R�diger" Kuhlmann <Tadu gmx.de>]
*) Fix building on BSD/OS using its native make. The build system
hook in http_core.c. This removes the need to add the filter in
*) SECURITY [CVE-2000-0913] (cve.mitre.org):
update allows the user to clear or preserve pw/groups/comment.
<IfModule mod_kilroy.c>
<IfModule mod_lovejoy.c>
*) Fix some compile warnings in mod_mmap_static.c
[Mike Abbott <mja sgi.com>]
*) APRVARS.in no longer overwrites the EXTRA_LIBS variable.
[Mike Abbott <mja sgi.com>]
*) Fix compile break on some platforms for mod_mime_magic.c
[John K. Sterling <sterling covalent.net>]
PR #5872 (1.3) [Jun Kuriyama <kuriyama imgsrc.co.jp>]
platforms to hints.m4, which contains (or should contain)
*) Add tables with non-string/binary values to APR.
[Rob Simonson <simo us.ibm.com>]
configuration file started with an IfModule/IfDefine container,
[Gregory Nicholls <gnicholls level8.com>]
[Gregory Nicholls <gnicholls level8.com>]
code was being returned. [Gregory Nicholls <gnicholls level8.com>]
not terminated with cr/lf sequences in Win32. [William Rowe]
*) Move all strings functions in APR to src/lib/apr/strings and create
apr_strings.h for the prototypes. [Ryan Bloom]
*) Clean out obsolete names (from httpd.h) for the HTTP Status Codes
*) Update the lib/expat-lite/ library (bring forward changes from
[Dave Hill <ddhill zk3.dec.com>]
timeouts (i.e, if a timeout was specified, the pipe reverted to
3x the rate of Apache 1.3.(e.g, Apache 1.3 will serve 400 rps
compiled-in limits (e.g., ThreadsPerChild, MaxClients, StartTreads).
[Tyler J. Brooks <tylerjbrooks home.com>, Jeff Trawick]
*) SECURITY [CAN-2000-1204] (cve.mitre.org):
and a user makes a request like http://www.example.com//cgi-bin/cgi
as reported in <news:960999105.344321 ernani.logica.co.uk>
*) Yet another update to saferead/halfduplex stuff -- need to ensure
to the configured User/Group (like other httpd processes)
if the len was negative. Use <sys/un.h> for struct sockaddr_un
doesn't seem to have a problem but /bin/sh on Solaris does.
ContentDigest enabled and we can't/don't mmap the file.
related bugs, and changed shmem/locking to use apr API. Shared-mem
would be errors generating ap_config_auto.h later in the configure
*) Organize http_main.c as independent code, such that no code or
[William Rowe, Jan Just Keijser <KEIJSERJJ logica.com>]
[Ask Bjoern Hansen <ask valueclick.com>]
[Paul Reder <rederpj raleigh.ibm.com>]
in 1.3's ebcdic.c. [Jeff Trawick]
buffer if the implementation knows how to use it (i.e., if L_tmpnam
*) Configure creates config.nice now containing your configure
options. Syntax: ./config.nice [--more-options]
*) Fix mm's memcpy/memset macros, pointer arithmetic was broken.
[Tim Costello <timcostello ozemail.com.au>]
[Chia-liang Kao <clkao CirX.ORG>]
*) The ab program in the src/support directory is now portable using
*) Finished move of ap_md5 routines to apr_md5. Removed ap_md5.h.
Apache.dsw created to bring together all the pieces. Create new file
os/win32/BaseAddr.ref to define module base addresses (to prevent
*) More FAQs and answers from comp.infosystems.www.servers.unix.
[Joshua Slive <slive finance.commerce.ubc.ca>]
in the field. [William Rowe <wrowe lnd.com>]
[William Rowe <wrowe lnd.com>]
[William Rowe <wrowe lnd.com>]
[Brian Martin <bmartin penguincomputing.com>]
fix up from Apache 1.3. #include'ing "ap_mpm.h" fixes up an
[William Rowe <wrowe lnd.com>]
[William Rowe <wrowe lnd.com>]
[William Rowe <wrowe lnd.com>]
we can use ReadFileScatter and WriteFileGather in readwrite.c.
[Allan Edwards <ake raleigh.ibm.com>]
[Brian Martin <bmartin penguincomputing.com>]
fixes to mod_so.c.
[Joshua Slive <slive finance.commerce.ubc.ca>]
[Jon Travis <jtravis covalent.net>]
[Paul Reder <rederpj raleigh.ibm.com>]
[Allan Edwards <ake raleigh.ibm.com>]
[William Rowe <wrowe lnd.com>]
[William Rowe <wrowe lnd.com>]
Makefile.win includes the same user interface as the old
[William Rowe <wrowe lnd.com>] PR#3715
[Allen Prescott <allen clanprescott.com>]
[Jeff Trawick <trawick us.ibm.com>]
*) Put in Korean and Norwegian index.html pages (2.0 and 1.3)
config file. E.g. 'ServerAdmin ${POSTMASTER}'. As commited
it does this on a line by line basis; i.e. if the envvar
ErrorDocument XXX /local/uri
ErrorDocument XXX http://valid/url
*) Changed 'CacheNegotiatedDocs' from its present/not-present
done with --with-module=/path/to/module. Modules can only be added
[Jeff Trawick <trawick us.ibm.com>]
*) Enable Apache to use sendfile/TransmitFile API
*) Make file I/O and network I/O writev/sendv APIs consistent.
bytes_read/bytes_written is always valid (never -1). Plus
some fixes to buff.c to correct problems introduced by the
*) port mod_rewrite to 2.0. [Paul J. Reder <rederpj raleigh.ibm.com>]
[Paul Reder <rederpj raleigh.ibm.com>]
[John Zedlewski <zedlwski Princeton.EDU>]
*) buff.c has been converted to no longer use errno.
[Dilip Khandekar <dilip cup.hp.com>]
automatically for developers from src/Configure.
*) Fixed building of src/support/htpasswd.c
*) Moved mod_auth_digest.c from experimental to standard. [Roy Fielding]
for a wildcard handler. [Dirk <dirkm teleport.com>, Roy Fielding]
*) Support line-continuation feature in config.option file and
*) Implement WINNT Win32 MPM from original Win32 code in http_main.c
(per default used the config.option file).
*) MPM BEOS port. [David Reid <abb37 dial.pipex.com>]
calling order to be specified on a per-hook/per-module basis.
*) os/unix/unixd.[ch]: detach, setuid, setgid, stuff which will be common
*) mpm_prefork: throw away all the alarm/timeout crud; and clean up the
of alloc.c for now. [Dean Gaudet]
based on IP/port. [Ben Laurie]
["Michael H. Voase" <mvoase midcoast.com.au>]
*) I/O layering and BUFF revamp. See docs/buff.txt. [Dean Gaudet]
docs/initial_blurb.txt. [Dean Gaudet]
[James Morris <jmorris intercode.com.au>]
an absolute path to the ./libexec directory where the libhttp.ep file
routines are now called ap_base64* and are 'plain' (i.e., no
pool access or anything clever). Inside util.c the routines acting
*) Fixed assumption of absolute paths in binbuild.sh. [Tony Finch]
src/support/httpd.exp. [Bill Stoddard, Randy Terbush]
*) Make ap_sha1.c compile for EBCDIC platforms: replace remaining LONG
[Tom Vaughan <tvaughan aventail.com>, Roy Fielding]
*) PORT: Improved compilation and DSO support on Sequent DYNIX/ptx.
[Ian Turner <iant sequent.com>] PR#4735
*) Local struct mmap in http_core.c conflicted with system structure
*) Added updated mod_digest as modules/experimental/mod_auth_digest.
[Ronald Tschal�r <ronald innovation.ch>]
up across restarts. [David Harris <dharris drh.net>]
*) CIDR addresses such as a.b.c.d/24 where d != 0 weren't handled
["Paul J. Reder" <rederpj raleigh.ibm.com>] PR#4770
*) RewriteLock/RewriteMap didn't work properly with virtual hosts.
[Dmitry Khrustalev <dima bog.msu.su>] PR#3874
*) PORT: Support for compaq/tandem/com.
Netscape servers. See support/SHA1 for more information.
Caused the separation of ap_md5.c into md5, sha1 and a general
ap_checkpass.c with just a validate_passwd routine. Added a
couple of flags to support/htpasswd. Some reuse of the to64()
[Dirk-Willem van Gulik, Clinton Wong <clintdw netcom.com>]
with ASCII/EBCDIC conversions in "ident" query.
[David McCreedy <McCreedy us.ibm.com>]
are combined, and duplicate tokens (e.g., "Vary: host, host" or
*) Portability changes for BeOS. [David Reid <abb37 dial.pipex.com>]
[Bill Stoddard <stoddard raleigh.ibm.com>]
[Roy Fielding, Joe Orton <jeo101 york.ac.uk>] PR#4499, PR#3806
install the DSO; useful for editing httpd.conf with apxs. Fix
create duplicate LoadModule/AddModule entries; apxs can now be
used to re- enable/disable a module. [Wilfredo Sanchez]
Win 95 users may need to update their TCP/IP stack to pick up
Winsock 2. (See http://www.microsoft.com/windows95/downloads/)
[Bill Stoddard <stoddard raleigh.ibm.com>]
error.log when CGI scripts fail. This makes Apache on Win32
[Bill Stoddard <stoddard raleigh.ibm.com>]
*) Fix `make r' test procedure in src/regex/: ap_isprint was not found.
*) Add DSO support for DGUX 4.x using gcc. Tested on x86 platforms.
[Randy Terbush <randy covalent.net>]
*) Add the new mass-vhost module (mod_vhost_alias.c) developed and
used by Demon Internet, Ltd. [Tony Finch <fanf demon.net>]
[Rasmus Lerdorf <rasmus raleigh.ibm.com>]
[Bill Stoddard <stoddard raleigh.ibm.com>]
parent/child process management code.
[Bill Stoddard <stoddard raleigh.ibm.com>]
[John Giannandrea <jg meer.net>] PR#4122
*) Fix ndbm.h include problems with brain-dead glibc >= 2.1 which
has ndbm.h in a non-standard db1/ subdir. PR#4431, PR#4528
[Henri Gomez <gomez slib.fr>, Ralf S. Engelschall]
*) Determine AP_BYTE_ORDER for ap_config_auto.h and already
content-types are "text/html;parameters". PR#4524 [Ken Coar]
*void. When the OS/platform/compiler supports quads, ap_snprintf()
[Aidan Cully <aidan panix.com>] PR#4456
*) Add RULE_EXPAT, the src/lib/ directory structure, and a modified copy
library. [Jens-Uwe Mager <jum helios.de>, Ralf S. Engelschall]
(e.g., HTTP/0.9 or HTTP/1.1) of the request. [Ken Coar]
[Ralf S. Engelschall, Rex Dieter <rdieter math.unl.edu>] PR#3997
[Jan Gallo <gallo pvt.sk>] PR#3690, PR#4373
*) Switch to /bin/sh5 in APACI on Ultrix and friends to avoid problems with
their brain-dead /bin/sh. [Ralf S. Engelschall] PR#4372
[Todd Vierling <tv pobox.com>] PR#4310
[Petr Lampa <lampa fee.vutbr.cz>] PR#4366, 679
[Raymond S Brand <rsbx rsbx.net>, Ken Coar] PR#1574, 3026, 3529,
the struct stat. [Ed Korthof <ed bitmechanic.com>]
[Salvador Ortiz Garcia <sog msg.com.mx>]
[Rob Saccoccio <robs InfiniteTechnology.com>] PR#2579
*) mod_include's fsize/flastmod should allow only relative paths, just
like "include file". [Jaroslav Benkovsky <benkovsk pha.pvt.cz>]
*) Add iconsdir, htdocsdir, and cgidir to config.layout.
*) Fix minor but annoying bug with the test for Configuration.tmpl
in unix/os.c, and don't install the dyld error handlers, which
*) Add functionality to the install-bindist.sh script created by
binbuild.sh to use tar when copying distribution files to the
install-bindist.sh now detects the local perl5 path to install
[Randy Terbush, Covalent Technologies, <randy covalent.net>]
src/modules/proxy_util.c where a NULL filepointer and
[Graham Leggett <minfrin sharp.fm>,
Tim Costello <tjcostel socs.uts.edu.au>] PR#3178
[Graham Leggett <minfrin sharp.fm>]
have assurance about how string manipulators (e.g., tr) will
[Ken Coar, Dmitry Khrustalev <dima zippy.machaon.ru>] PR#4118
[Raymond S Brand <rsbx rsbx.net>]
[Raymond S Brand <rsbx rsbx.net>] PR#4248
*) Add "opt" (SysV-style) layout to config.layout. [Raymond S Brand
<rsbx rsbx.net>]
[Yitzchak Scott-Thoennes <sthoenna efn.org>, Ralf S. Engelschall] PR#4269
[Joe Moenich <moenich us.ibm.com>]
*) Fix number of bytes copied by read_connection() in src/support/ab.c
[Jim Cox <jc superlink.net>] PR#4271
[Bob Finch <bob nas.com>]
[Paul Sutton <paul awe.com>]
*) Make sure RewriteLock can be used only in the global context, (i.e.
<mariav icgeb.trieste.it>] PR#4260
uncompress/gzip, but those tools sometimes do not produce
[Marcin Cieslak <saper system.pl>] PR#4097
line. [<inkling firstnethou.com>] PR#3770
redirects. [Jose KAHAN <kahan w3.org>] PR#3910, 3806, 3575
[Jacques Distler <distler golem.ph.utexas.edu>] PR#4130
*) PORT: deal with UTS compiler error in http_protocol.c
[Dave Dykstra <dwd bell-labs.com>] PR#4189
*) Add ap_vrprintf() function. [John Tobey <jtobey banta-im.com>] PR#4246
by "Peter 'Luna' Altberg <peter altberg.nu>" and PR#3422
[Peter 'Luna' Altberg <peter altberg.nu>, Ronald Tschal�r]
binary (e.g., image file) in the first place.
[David McCreedy <mccreedy us.ibm.com>]
*) support/htpasswd now permits the password to be specified on the
apache -n apache1 -i -f c:/httpd.conf
Installs apache as service 'apache1' and associates c:/httpd.conf
Installs apache as service 'apache2'. httpd.conf is located under
the default server root (/apache/conf/httpd.conf).
apache -n apache3 -i -d c:/program files/apache
c:/program files/apache.
*) Correct the signed/unsigned character handling for the MD5 routines;
*) OS/2: Rework CGI handling to use spawn*() instead of fork/exec, achieving
*) proxy ftp: instead of using the hardwired string "text/plain" as
<Directory proxy:ftp://some.host>
DefaultType gargle/blurb
*) Be more smart in APACI's configure script when determining the UID/GID
the number of fork()s from one/request to just the odd one an hour.
*) Added proxy, auth and header support to src/support/ab.c. Added a
README file to src/support/
*) Fix sed-substitutions in `make install': path elements like `httpd/conf'
(for instance from an APACI configure --sysconfdir=/etc/httpd/conf
*) PORT: Add support for FreeBSD 4.x [Ralf S. Engelschall]
[Ronald Tschal�r <ronald innovation.ch>] PR#3411
the reboot prompt (which is only given if MSVCRT.DLL system
*) WIN32: Apache.exe now contains an icon. [Paul Sutton]
*) Using APACI, the main config file (usually httpd.conf) was
<wsanchez apple.com>]
[Ryan Bloom <rbb raleigh.ibm.com>]
[Dean Gaudet, Jeff Lewis <lewis stanford.edu>] PR#3872
*) Move the directive `ExtendedStatus' in httpd.conf-dist-win _after_ the
DSO/DLL section because it's a directive from mod_status and isn't
[Martin POESCHL <mpoeschl gmx.net>] PR#3936
option more clear. [Jan Wolter <janc wwnet.net>] PR#3995
[John Tobey <jtobey banta-im.com>] PR#3983
against libap.a and use its ap_snprintf() instead of sprintf() to avoid
*) Add Apple's Mac OS X Server Layout "Rhapsody" to config.layout.
*) Add cgidir, htdocsdir, iconsdir variables to Makefile.tmpl in order
[Michael van Elst <mlelstv serpens.swb.de>, Lars Eilebrecht] PR#3160
*) Use proper pid_t type for saving PIDs in alloc.c. [John Bley]
%v). Useful for mass vhosting. [Tony Finch <dot dotat.at>]
more reliable logs with multiline entries. [Tony Finch <dot dotat.at>]
*) Fixed a few compiler nits. [John Bley <jbb6 acpub.duke.edu>]
in http_core.c. [John Bley, Roy Fielding]
calls. [John Bley <jbb6 acpub.duke.edu>, Jim Jagielski]
[Brian Havard <brianh kheldar.apana.org.au>]
[Joshua Slive <slive finance.commerce.ubc.ca>] PR#2497
*) src/support/: The ApacheBench benchmark program was overhauled by
[David N. Welton <davidw prosa.it>]
*) Added -S option to install.sh so that options can be passed to
the test case of no modules being selected. [<chaz reliant.com>]
is *not* given in the argument list; i.e., the logical negation
*) Win32: Add global symbols missing from ApacheCore.def. [Carl Olsen]
to util.c for parsing an HTTP header field value to extract the next
code different from 500. This allows the proxy to, e.g., return
and no Accept-Language. [James Treacy <treacy debian.org>] PR#3299, 3688
as "com.name" to be served. [Paul Sutton] PR#3769.
make subtasking easier on the OSD/POSIX mainframe environment.
*) Make NDBM file suffix determination for mod_rewrite more accurate, i.e.
[Ryan Bloom <rbb Raleigh.IBM.Com>]
impossible to exploit.) [Rick Perry <perry ece.vill.edu>]
*) Let src/Configure be aware of CFLAGS options starting with plus
signs as it's the case for the HP/UX compiler.
[Doug Yatcilla <yatcilda umdnj.edu>] PR#3681
and this makes its functions available to things in src/support.
*) WIN32: Created new makefiles Makefile_win32.txt (normal build)
and Makefile_win32_debug.txt (debug build) that work on Win95.
nmake /f Makefile_win32.txt # compiles normal build
nmake /f Makefile_win32.txt install # compiles and installs
nmake /f Makefile_win32.txt clean # removes compiled junk
nmake /f Makefile_win32_debug.txt # compiles debug build
nmake /f Makefile_win32_debug.txt install
nmake /f Makefile_win32_debug.txt clean
for FreeBSD 3.0). [Todd Vierling <tv pobox.com>] PR#2462
*) Small fix for mod_env.html: The module was documented as to be _not_
Apache per default. [Sim Harbert <sim mindspring.com>] PR#3572
*) Instead of fixing a bug in the generation procedure for config.status (a
making sure the src/support/ tools are _forced_ to be build last (they
*) Fix installation procedure: Now that os-inline.c is actually used (a
recently fixed bug prevented this) we need to also install os-include.c
`escape' and `unescape' were added which can be used to escape/unescape
to/from hex-encodings in URLs parts (this is especially useful in
*) Major overhaul of mod_negotiation.c, part 2.
- added ap_array_pstrcat() to alloc.c for efficient concatenation
*) Major overhaul of mod_negotiation.c, part 1.
revision (draft-ietf-http-v11-spec-rev-06.txt).
e.g. no feature negotiation). Removed old experimental version.
negotiation results are consistent across backup/restores and mirrors
*) RFC2396 allows the syntax http://host:/path (with no port number)
[David Kristol <dmk bell-labs.com>] PR#3530
*) When modules update/modify the file name in the configfile_t structure,
[Fabien Coelho <coelho cri.ensmp.fr>] PR#3573
CASE_BLIND_FILESYSTEM. [Brian Havard <brianh kheldar.apana.org.au>]
*) The hashbang emulation code in ap_execve.c would interpret
#!/hashbang/scripts correctly, but failed to fall back to a
*) PORT: Added the Cyberguard V2 port [Richard Stagg <stagg lentil.org>]
and another was incorrect. [Mark Anderson <mda discerning.com>] PR#3553
wasn't defined. [Rick Franchuk <rickf transpect.net>]
o fixed auto-suffix handling now that config.layout exists.
config.layout and every path now can be marked this way (not only the
SINGLE_LISTEN_UNSERIALIZED_ACCEPT to NetBSD/OpenBSD section
of ap_config.h to allow serialized accept for multiport listens.
*) PORT: Fixed a misplaced #endif for NetBSD/OpenBSD section
of ap_config.h that would skip several defines if DEFAULT_GROUP
strcasecmp, so allow it in ap_config.h. [Amiel Lee Yee] PR#3247
*) Fix ordering of definitions in ap_config.h so that ap_inline is
[Tom Serkowski <tks bsdi.com>] PR#3453
*) Make generation of src/Configuration.apaci more robust: It failed to
another (e.g. cgi vs. fastcgi). We now check for mod_XXX, libXXX and even
*) In src/Configure remove the SERVER_SUBVERSION support (already deprecated
[Ralf S. Engelschall, Wilfredo Sanchez <wsanchez apple.com>]
[Paul Ausbeck <paula alumni.cse.ucsc.edu>, Paul Sutton] PR#3447
*) Allow special options -Wc,xxx and -Wl,xxx on APXS compile/link command.
IS to the compiler/linker command. [Ralf S. Engelschall]
config.layout. Custom layouts are possible by using FILE:ID as the
The config.layout file consists of <Layout ID>..</Layout> sections
extension (e.g., .fr, .de) can be labelled as being some other
*) mod_include.c:handle_perl() now properly tests for OPT_INCNOEXEC
rather than OPT_INCLUDES [Rainer Schoepf <schoepf uni-mainz.de>]
[Ronald Tschal�r <ronald innovation.ch>] PR#3409
[Martin Plechsmid <plechsmi karlin.mff.cuni.cz>] PR#1987
[Andrew Pimlott <pimlott math.harvard.edu>] PR#3340
[David MacKenzie <djm uu.net>] PR#3394
*) Updated mime.types to reflect current Internet media types
Improved mod_actions.c so that it can use any of the methods
defined in httpd.h. Added ap_method_number_of(method) for
*) PORT: Add a port to the TPF OS. [Joe Moenich <moenich us.ibm.com> and
*) Fix problems with handling of UNC names (e.g., \\host\path)
on Win32. [Ken Parzygnat <kparz us.ibm.com>]
robust, and works. [Ken Parzygnat <kparz us.ibm.com>]
[Manoj Kasichainula, Ken Parzygnat <kparz us.ibm.com>]
*) Move a typedef to fix compile problems on Linux with 1.x kernels.
*) http_config.c would respond with 501 (Method Not Implemented) if a
should have been a 500 response. Likewise, mod_proxy.c would responsd
on-the-fly/batch permute the order of two modules (mod_foo and mod_bar)
mod_foo with the begin of the module list, i.e. it `moves' the module to
which permutes mod_foo with the end of the module list, i.e. it `moves'
synchronisation (Win32). [Ken Parzygnat <kparz raleigh.ibm.com>]
on container start lines (e.g., it wouldn't spot
"<Directory /" as a syntax error). [Ryan Bloom <rbbloom us.ibm.com>]
[Ryan Bloom <rbbloom us.ibm.com>] PR#1799.
[Ken Parzygnat <kparz raleigh.ibm.com>] PR#2078, 2303.
[Ivan Richwalski <ivan seppuku.net>] PR#3249
*) Fix Berkeley-DB/2.x support in mod_auth_db: The data structures were not
parameter. [Ron Klatchko <ron ckm.ucsf.edu>] PR#3171
[Ralf S. Engelschall, Ron Record <rr sco.com>]
httpd.conf-dist* files. The srm and access files now contain
only comments, and httpd.conf has all the combined contents in
*) PORT: DSO/ELF support for FreeBSD 3.0.
[Ralf S. Engelschall, Dirk Froemberg <ibex physik.TU-Berlin.DE>]
do this. [Ken Parzygnat <kparz raleigh.ibm.com>] PR#2976, 3074
[Wilfredo Sanchez <wsanchez apple.com>]
of "-". [Martin Plechsmid <plechsmi karlin.mff.cuni.cz>, Marc Slemko]
*) PORT: DRS 6000 machine. [Paul Debleecker <pdebleecker jetair.be>]
[M. Laak <maert proinv.ee>] PR#3108
[Dave Dykstra <dwd bell-labs.com>] PR#3055
but not tabs). [James Morris <jmorris intercode.com.au>,
[James Grinter <jrg blodwen.demon.co.uk>] PR#3111
[Youichirou Koga <y-koga jp.FreeBSD.org>] PR#3095
[Youichirou Koga <y-koga jp.FreeBSD.org>] PR#3096
*) Fix http://localhost/ hints in top-level INSTALL document.
[Rob Jenson <robjen spotch.com>, Ralf S. Engelschall] PR#3088
[Wilfredo Sanchez <wsanchez apple.com>]
[Ken Parzygnat <kparz raleigh.ibm.com>] PR#2884, 2910
<kparz raleigh.ibm.com>] PR#3001
[Ken Parzygnat <kparz raleigh.ibm.com>] PR#2976, 3074
ap_config.h. [Brian Havard]
*) PORT: Add Pyramid DC/OSx support to configuration mechanism.
[Earle Ake <akee wpdiss1.wpafb.af.mil>]
*) PORT: Fix sys/resource.h handling for Amdahl's UTS 2.1
[Dave Dykstra <dwd bell-labs.com>] PR#3054
*) Correct comment in mod_log_config.c about its internals.
[Elf Sternberg <elf halcyon.com>]
handle the creation of modules.c [Jim Jagielski]
and to avoid problems under platforms where only version 2.x is present.
[Dan Jacobowitz <drow false.org>, Ralf S. Engelschall]
[Bill Stoddard <stoddard raleigh.ibm.com>]
*) Remove redundant substitutions in top-level Makefile.tmpl.
platforms where `nogroup' exists in /etc/group. [Ralf S. Engelschall]
the possibility to override it manually via APACI or src/Configuration.
existance of the file under /usr/include, too.
[Wilfredo Sanchez <wsanchez apple.com>]
[Charles Randall <crandall matchlogic.com>] PR#2947
[Youichirou Koga <y-koga jp.FreeBSD.org>] PR#2991
[Karl Berry <karl gnu.org>] PR#2994
[Youichirou Koga <y-koga jp.FreeBSD.org>] PR#2992
*) Fix possible buffer overflow situation in suexec.c.
[Jeff Stewart <jws purdue.edu>] PR#2790
[Ronald Record <rr sco.com>] PR#2533
*) Fix documentation of ProxyPass/ProxyPassReverse according to the
trailing slash problem. [Jon Drukman <jsd gamespot.com>] PR#2933
[Marc Slemko, Paul Phillips <paulp go2net.com>]
SCO OpenServer. [David Coelho <drc ppt.com>]
in /home/user, not in /, therefore clicking on "../" in the
dump core for replies with invalid headers (e.g., duplicate
plop gmon.out profile data for each child [Doug MacEachern]
config.status script to be immune against arguments with whitespaces.
[Yves Arrouye <yves apple.com>] PR#2866
script `buildinfo.sh' which is both more flexible and already proofed to
*) Make ab.c again pass ``gcc -Wall -Wshadow -Wpointer-arith -Wcast-align
*) Remove bad reference to non-existing SERVER_VERSION in mod_rewrite.html
[Youichirou Koga <y-koga jp.FreeBSD.ORG>] PR#2895
[Kurt Sussman <kls best.com>] PR#2871
*) Bump up MAX_ENV_FLAGS in mod_rewrite.h from the too conservatice limit of
variables in one RewriteRule and had to patch mod_rewrite.h for every
*) Make sure the config.status file is not overridden when just
See include/ap_mmn.h for more details. [Randy Terbush]
*) SECURITY [CVE-1999-1199] (cve.mitre.org):
*) Cleanup of the PrintPath/PrintPathOS2 helper functions. Avoid
following the same idea as "MSVC vs WIN32". Additionally the src/os/emx/
directory was renamed to src/os/os2/ for consistency.
linking the DSOs, i.e. PIC libs and shared libs. Currently the rule is
*) Add correct `model' MIME types from RFC2077 to mime.types file.
*) Fixed examples in mod_rewrite.html document.
[Youichirou Koga <y-koga jp.FreeBSD.org>, Ralf S. Engelschall] PR#2756
[MATSUURA Takanori <t-matsuu protein.osaka-u.ac.jp>]
programs under Win32. [Marco De Michele <mdemichele tin.it>] PR#2483
*) Update the mod_rewrite.html document to correctly reflect the situation
Makefile.tmpl: The umask+cp approach didn't work as expected (especially
*) Fix `distclean' and `clean' targets in src/Makefile.tmpl to have same
src/helper/mkdir.sh script. [Ralf S. Engelschall]
`search' entries in /etc/resolv.conf.
INSTALL file because a lot of users don't read htdocs/manual/dso.html
(compilers complained) and the .so.V.R.P filename extension was adjusted
[Manoj Kasichainula <manojk raleigh.ibm.com>] PR#2355
*) Disable the incorrect entry for application/msword in the
*) Fix broken RANLIB handling in src/Configure (the entry from
src/Configuration.tmpl was ignored) and additionally force RANLIB to
[Steve VanDevender <stevev darkwing.uoregon.edu>, Lars Eilebrecht] PR#2613
*) Autogenerate some HAVE_XXXXX_H defines in conf_auto.h (determined via
TestCompile) instead of defining them manually in conf.h based on less
OS-type and/or OS-version identifiers to discover whether a system header
[Glen Parker <glenebob nwlink.com>] PR#2277
required by HTML 3.2 and later) to mod_mime_magic's conf/magic.
[Anna Shergold <anna inext.co.uk>]
[John Van Essen <jve gamers.org>] PR#2529
*) Add Dynamic Shared Object (DSO) support for SCO5 (OpenServer 5.0.x).
[Ronald Record <rr sco.com>] PR#2533
[Charles Levert <charles comm.polymtl.ca>] PR#2551
[Vadim Kostoglodoff <vadim olly.ru>] PR#2463
*) Fix the Guess-DSO-flags-from-Perl stuff in src/Configure: "perl" was
[Ben Laurie, Bill Stoddard <wgstodda us.ibm.com>] PR#2274
*) PORT: remove broken test for MAP_FILE in http_main.c.
[Wilfredo Sanchez <wsanchez apple.com>]
*) PORT: Change support/apachectl to use "kill -0 $pid" to test if the
but case-insensitive platforms). New #define for this added to conf.h
*) Enable DSO support for OpenBSD in general, not only for 2.x, because it
also works for OpenBSD 1.x. [Ralf S. Engelschall]
[Sam Kington <sam illuminated.co.uk>] PR#2443
reponse. [Ralf S. Engelschall, Charles Fu <ccwf bacchus.com>]
output of Awk. [Bill Houle <bhoule sandiegoca.ncr.com>] PR#2435
of a config.status script (as GNU Autoconf does) which remembers the used
*) Correct initialization of variable `allowed_globals' in http_main.c
[Justin Bradford <justin ukans.edu>] PR#2400
multipart/x-mixed-replace;boundary=ThisRandomString.
[Sean Boudreau <seanb qnx.com>] PR#2390
modules/xxx/Makefile's to avoid problems with SVR4 Make under "full-DSO"
[David MacKenzie <djm va.pubnix.com>] PR#2384
main server. [Christof Damian <damian mediaconsult.com>] PR#2090
[Klaus Weber <kweber chephren.germany.ncr.com>] PR#1973
<Directory /> section of the default access.conf-dist
[Dave Dykstra <dwd bell-labs.com>] PR#2320
*) Fix symbol export list (src/support/httpd.exp) after recent
[Jens-Uwe Mager <jum helios.de>]
solved by another helper script findprg.sh which searches for Perl and
*) Remove the system() call from htpasswd.c, which eliminates a system
[Rex Dieter <rdieter math.unl.edu>] PR#2293, 2316
O_NDELAY on various systems. [Dave Dykstra <dwd bell-labs.com>] PR#2313
*) PORT: helpers/GuessOS updates for various versions for NCR SVR4.
*) Fix recently introduced Win32 child spawning code in mod_rewrite.c which
[Dave Dykstra <dwd bell-labs.com>, Ralf S. Engelschall] PR#2319
configure and src/Configure depend on this.
*) Changes usage of perror/fprintf to stderr to more proper ap_log_error
*) Various OS/2 cleanups ["Brian Havard" <brianh kheldar.apana.org.au>]
*) PORT: QNX needed a #include <sys/mman.h>; and now it uses flock
[Rob Saccoccio <robs InfiniteTechnology.com>] PR#2295, 2296
[W G Stoddard <wgstodda us.ibm.com>]
[W G Stoddard <wgstodda us.ibm.com>] PR#2294
spawn_child was obsoleted and moved to compat.h
memory. [Rob Saccoccio <robs InfiniteTechnology.com>] PR#2252
*) Fix src/support/httpd.exp (DSO export file which is currently only
``RewriteRule ^myscript$ - [T=application/x-httpd-cgi]'' This was often
*) Fix discrepancy in proxy_ftp.c which was causing failures when
[Rick Ohnemus <rick ecompcon.com>]
*) Improve RFC1413 support. [Bob Beck <beck bofh.ucs.ualberta.ca>]
[Ben Laurie and Bill Stoddard <wgstodda us.ibm.com>] PR#1129, 1607
[Ernst Kloppenburg <kloppen isr.uni-stuttgart.de>] PR#2094
*) Support for the NCR MP/RAS 3.0
[John Withers <withers semi.kcsc.mwr.irs.gov>]
*) The LDFLAGS_SHLIB_EXPORT variable of src/Configuration[.tmpl] was
not retrieved in src/Configure and thus was not useable.
- SUBDIRS is now generated in src/Makefile only and not in
Makefile.config because it is a local define for this location.
- update the "depend" targets in Makefile.tmpl files to use $(OSDIR), too.
- replaced SHLIB_OBJS/SHLIBS_OBJ consistently with OBJS_PIC because OBJS
- replaced ugly xx-so.o/xx.so-o hack with a clean and consistent usage
of xxx.lo as GNU libtool does with its PIC objects
- reduce local complexity in modules Makefile.tmpl by moving the last
*) WIN32: Make Win32 work again after the /dev/null DoS fix.
*) When opening "configuration" files (like httpd.conf, htaccess
and htpasswd), Apache will not allow them to be non-/dev/null
necessary. Long-term fix is to either serialize the chdir/spawn combo
htdocs/manual/suexec.html document before using the suexec-related
and htdocs/manual/suexec.html documents.
UID/GID and safe PATH, too.
- overhauled mkshadow.sh script: now its more IFS-safe and approx. twice
*) Add a note to httpd.conf-dist that apache will on some systems fail
and not the original statically list from modules.c
confusion with the next point and reduces the Makefile.tmpl complexity
6. The modules.c generation was extended to now contain two
of loading/linking (we use load=link+load & link=activate instead of
*) Fix the generated mod_xxx.c from "apxs -g -f xxx" after the
*) Add a comment to mod_example.c showing the format of a FLAG command
places in the code (e.g. DATE_GMT). PR#1551
zone information in their tm struct. [Paul Eggert <eggert twinsun.com>]
*) get/set_module_config are trivial enough to be better off inline. Worth
*) Fix off-by-one error in ap_proxy_date_canon() in proxy_util.c
*) Fix debug log messages for BS2000/OSD: instead of logging the whole
[Michael Anderson's <mka redes.int.com.mx>]
*) Make sure the referer_log and agent_log entries in the default httpd.conf
*) WIN32: Make roots of filesystems (e.g. c:/) work. [Ben Laurie]
from mod_so.c to Configure because first it needs $PLAT etc. and second
[Jaromir Dolecek <dolecek ics.muni.cz>] PR#2165
[Jaromir Dolecek <dolecek ics.muni.cz>, Ralf S. Engelschall] PR#2158
AIX variants should work fine, too. Even AIX 3.x should work). This is
which we put into a os/unix/os-dso-aix.c file.
*) Fix two bugs in select() handling in http_main.c.
side-effect this reduces some subdir fiddling in configure+Makefile.tmpl.
"make root=/tmp/apache install" for rolling the package without bristling
*) Workaround braindead AWK's when generating ap_config.h: The split() and
*) Fix DEBUG_CGI situation in mod_cgi.c [David MacKenzie] PR#2114
*) Make sure that "make install" doesn't overwrite the `mime.types' and
*) PORT: Dynamic Shared Object (DSO) support for OpenBSD 2.x
variables) to avoid side-effects in "src/Configure" when the user
*) Provide backward compatibility from some old src/Configuration.tmpl
*) NeXT required strdup() in support/logresolve.c
[Francisco Tomei <fatomei sandburg.unm.edu>] PR#2082
*) PORT: Added HP-UX 11 patches [Jeff Earickson <jaearick colby.edu>]
ap_snprintf, and ap_psprintf). See include/ap.h for docs.
*) Because /usr/local/apache is the default prefix the ``configure
to `char *' under OSF1 and FreeBSD 2.x where it is defined this way
*) PORT: Make sure some AWK's don't fail in src/Configure with "string too
long" errors when generating the MODULES entry for src/Makefile
*) Make sure src/Configure doesn't complain about the old directory
/usr/local/etc/httpd/ when APACI is used. [Lars Eilebrecht]
*) Adding DSO support for the HP/UX platform by emulating the dlopen-style
interface via the similar but proprietary HP/UX shl_xxx-style system
APACI Makefile.tmpl "install" target more robust for sensible UnixWare
- Apache provided general functions (e.g., ap_cpystrn)
- Public API functions (e.g., palloc, bgets)
cross-object usage) but should be (e.g., new_connection)
For backward source compatibility a new header file named compat.h was
dummy.so file (containing dummy references to all global symbols) the
Placing the Apache core code itself into a DSO library named libhttpd.so.
where we perhaps exploit this libhttpd.so mechanism for providing nifty
inside the src subtree (i.e. for non-APACI users). Following GNU Makefile
[Todd Eigenschink <eigenstr mixi.net>] PR#2045
to the mak/dsp files. [Alexei Kosut]
*) Add documentation file and src/Configuration.tmpl entry for the
*) Now src/Configure uses a fallback strategy for the shared object support
and installation of the support tools from the src/support/ area.
dynamic shared object (DSO) mechanism [mod_so.c]. The trick here is that
Apache C header files (PREFIX/include) and the new APXS tool
(SBINDIR/apxs). The intend is to provide a handy tool for third-party
modules, from trivial ones (single mod_foo.c) to complex ones (like PHP3
*) Modify the log directives in httpd.conf-dist files to use CustomLog
script and a corresponding top-level "Makefile.tmpl" file. The goal is
the old src/Configure stuff in batch and additionally installs the
routines. Use this to replace http_bprintf.c. Add new routines
is necessary on at least Solaris where the /etc/rc?.d scripts
[Rein Tollevik <reint sys.sol.no>] PR#2009
[Rein Tollevik <reint sys.sol.no>] PR#2010
[J�rgen Keil <jk tools.de>] PR#2000
http://.../cgi-bin/...?http%3A%2F%2F... references) [Martin Kraemer]
[Tim Costello <tjcostel socs.uts.edu.au>] PR#1890
the mod_proxy.html and corrected the hyperlink to it in the
new_features_1.3.html document. [Ralf S. Engelschall] PR#1348
*) Fix a bug in the src/helpers/fp2rp script and make it a little bit
*) Add the new ApacheBench program "ab" to src/support/: This is derived
*) src/include/ap_config.h now wraps it's #define's with #ifndef/#endif's
*) [PORT] For A/UX change the OS-#define for -DAUX to -DAUX3.
the ugly export kludge, makes the one-liner file mod_mime.h obsolete, and
*) util.c cleanup and speedup. [Dean Gaudet]
[Dmitry Khrustalev <dima bog.msu.su>]
TZ variable. [Jay Soffian <jay cimedia.com>] PR#1888
[Siegmund Stirnweiss <siegst kat.ina.de>] PR#1900
[Tony Finch <fanf demon.net>] PR#1925
modules as shared objects. Especially Solaris 2.x, SunOS 4.1, IRIX and
*) The Configure script now generates src/include/ap_config.h which
[Joel Truher <truher wired.com>]
"http://host" url is treated as if a similar "Host:" header had been
supplied. This change was made to support future HTTP/1.x protocols
*) API: Cleanup of code in http_vhost.c, and remove vhost matching
[Chia-liang Kao <clkao cirx.org>] PR#1531
[Konstantin Morshnev <moko design.ru>] PR#1771
address. [Todd Eigenschink <eigenstr mixi.net>] PR#1885
*) API: A new source module main/util_uri.c; It contains a routine
user; /* user name, as in http://user:passwd@host:port/ */
password; /* password, as in http://user:passwd@host:port/ */
a username can contain when trying to expand it via /etc/passwd.
Jay Soffian <jay cimedia.com>] PR#1631
*) Hide Proxy-Authorization from CGI/SSI/etc just like Authorization is
<luomat peak.org>]
<ache nagual.pp.ru> and Jim] PR#1450
Alvaro Martinez Echevarria <alvaro lander.es>]
[Charles Fu <ccwf klab.caltech.edu>] PR#1847
directive. [Enrik Berkhan <enrik inka.de>] PR#1816
[Lauri Jesmin <jesmin ut.ee>] PR#1701
*) Source file dependencies in Makefile.tmpl files throughout the
htdocs/manual/known_client_problems.html are in the default
(like mod_dld for Win32). This replaces mod_dld.c. Use SharedModule
[Michael Douglass <mikedoug texas.net>, Dean Gaudet]
header files are in the src/include directory. The -Imain -Iap
and mod_rewrite) have not been moved to src/include; nor have
calls that use too small an initial guess, see alloc.c.
[Mark Andrew Heinrich <heinrich tinderbox.Stanford.EDU>]
because the key/value is a constant, or the value has been built
Note that it is easy to get code subtly wrong if you pass a key/value
safe thing to do is to pass key/values which are in the pool of
i.e. if the table is part of a subrequest, a value from the main
usage, enabled by defining POOL_DEBUG. See alloc.c for more details.
[Dmitry Khrustalev <dima bog.msu.su>, Dean Gaudet]
[Martin Kraemer, with code from Peter Wemm <peter zeus.dialix.oz.au>
*) API: "typedef array_header table" removed from alloc.h, folks should
HAVE_MMAP/SHMGET #defines strictly are informational that the
Unixware 1.x appears to have the same SIGHUP bug as solaris does with
[Tom Hughes <thh cyberscience.com>] PR#1082, PR#1282, PR#1499, PR#1553
*) PORT: A/UX can handle single-listen accepts without mutex
[Paul Eggert <eggert twinsun.com>] PR#1343
*) suexec errors now include the errno/description. [Marc Slemko] PR#1543
[Keith Severson <keith sssd.navy.mil>] PR#1613
[Keith Severson <keith sssd.navy.mil>] PR#1614
*) Some const declarations in mod_imap.c that were added for debugging
*) The src/main/*.h header files have had #ifndef wrappers added to
multiple paths (e.g., in .c files as well as other .h files).
src/ap/ap.h, to ease their use in non-httpd applications. [Ken Coar]
but before the header file contents. [John Van Essen <jve gamers.org>]
set with SetEnv/BrowserMatch and similar directives.
was found. Noticed by <robinton amtrash.comlink.de> (Soeren Ziehe)
[Soeren Ziehe <robinton amtrash.comlink.de>, Martin Kraemer]
(the Siemens BS2000/OSD family) in the POSIX subsystem
Located in libap.a. [Jim Jagielski]
[Stephen Scheck <sscheck infonex.net>, Ben Laurie] PR#1604
alloc.c (affects win32 only). [Ben Hyde]
[Ben Reser <breser regnow.com>] PR#1366
[Gregory A Lundberg <lundberg vr.net>]
server itself (like the src/support tools). [Ken Coar]
[Igor Tatarinov <tatarino prairie.NoDak.edu>]
It also wouldn't handle "AddIconByType (TXT,/icons/text.gif text/*"
htdocs/manual/misc/known_client_problems.html#257th-byte) can happen
[<malcolm mgdev.demon.co.uk>] PR#1378
set errno. [Igor Tatarinov <tatarino prairie.NoDak.edu>]
*) WIN32: Cure file leak in CGIs. [Peter Tillemans <pti net4all.be>] PR#1523
[Frank Faubert <frank sane.com>]
can be used by items in src/support among other things.
(e.g., <Directory>) where they're invalid. [Martin Kraemer]
for fgetc() and fgets() on SunOS 4.x. [Martin Kraemer, Ben Hyde]
read the file. [Ben Hyde <bhyde gensym.com>]
the display. [Ken Coar, suggested by Brian Tiemann <btman pacific.net>]
*) PORT: Update the LynxOS port. [Marius Groeger <mag sysgo.de>]
[David Chambers <davidc flosun.salk.edu>] PR#1294
[M.D.Parker] PR#1352
*) Inherit a bugfix to fnmatch.c from FreeBSD sources.
["[KOI8-R] ������ ������" <ache nagual.pp.ru>] PR#1311
sources as Unix now. [Brian Havard <brianh kheldar.apana.org.au>]
[Paul Eggert <eggert twinsun.com>] PR#1342
*) A mild SIGTERM/SIGALRM race condition was eliminated.
*) Warn user that default path has changed if /usr/local/etc/httpd
*) PORT: On AIX 1.x files can't be named '@', fix the proxy cache
[David Schuler <schuld btv.ibm.com>] PR#1317
Document this a bit more in src/PORTING. [Dean Gaudet] PR#467
*) WIN32: Make index.html and friends work under Win95. [Ben Laurie]
[John Line <jml4 cam.ac.uk>] PR#1321
*) Default pathname has been changed everywhere to /usr/local/apache
[Sameer <sameer c2.net>]
[David Bronder <David-Bronder uiowa.edu>] PR#849
[David Schuler <schuld btv.ibm.com>] PR#1267
[Philippe Vanhaesendonck <pvanhaes be.oracle.com>,
Omar Del Rio <al112263 academ01.lag.itesm.mx>] PR#482, 1246
[Chris Craft <ccraft cncc.cc.co.us>] PR#977
*) PORT: UnixWare 2.x requires -lgen for syslog.
[Hans Snijder <hs meganet.nl>] PR#1249
["Pavel Yakovlev (Paul McHacker)" <hac tomcat.olly.ru>]
*) New support tool: src/support/split-logfile, a sample Perl script which
*) Makefile.tmpl was not using $CFLAGS in the link phase.
*) Add debugging code to alloc.c. Defining ALLOC_DEBUG provides a
Purify. See main/alloc.c for more details. [Dean Gaudet]
be used for whatever reason is appropriate (i.e. format() warnings
gcc >= 2.7.x (so that we have fewer support issues with older
Also removed the auto-generated link to www.apache.org that was the
*) suexec.c wouldn't build without -DLOG_EXEC. [Jason A. Dour]
this is a bug. ["Paul B. Henson" <henson intranet.csupomona.edu>]
[Rick Franchuk <rickf transpect.net>] PR#1107, 987, 588
*) Fixed error in proxy_util.c when looping through multiple host IP
buffered writes -- that is, it will buffer up to PIPE_BUF (i.e. 4k)
*) API: New register_other_child() API (see http_main.h) which allows
*) API: New piped_log API (see http_log.h) which implements piped logs,
Some things (like RewriteMaps) were checked/performed even if they
*) Removal of mod_auth_msql.c from the distribution. There are many
http://modules.apache.org/ It would be nice to offer a generic
Makefile on the fly based on Makefile.tmpl and Configuration.
Encore's UMAX V: Arieh Markel <amarkel encore.com>
Acorn RISCiX: Stephen Borrill <sborrill xemplar.co.uk>
*) support/httpd_monitor is no longer distributed because the
the headers/contents of the request. It does not run during subrequests
USE_xxx_SERIALIZED_ACCEPT in conf.h. xxx is FCNTL for fcntl(),
- Linux 2.x uses flock instead of fcntl
- Solaris 2.x uses pthreads
*) PORT: The semantics of accept/select make it very desirable to use
Modules can be dropped into modules/extra, or in their own
modules/standard. All other source code is in main. OS-specific
match "/home/a/andrew/public_html", now it only matches things
[Dean Gaudet, Dave Hankins <dhankins sugarat.net>]
/dev/tty, etc.)
[Jason Venner <jason idiom.com>] PR#667
and cidr syntax (i.e. 10.1.0.0/16). PR#762
Apache would omit the chunk header/footer on the next block. Cleaned
e.g. when max_requests_per_child is reached, etc.
[Alexander L Jones <alex systems-options.co.uk>] PR#732
*) PORT: QNX mmap() support for faster/more reliable scoreboard handling.
[Igor N Kovalenko <infoh mail.wplus.net>] PR#683
setting. The define MAX_SPAWN_RATE can be used to raise/lower
in a language that by default does buffering (e.g. perl) this
*) PORT: Allow for use of n32bit libraries under IRIX 6.x
[derived from patch from Jeff Hayes <jhayes aw.sgi.com>]
*) PORT: Linux: Attempt to detect glibc based systems and include crypt.h
*) PORT: QNX doesn't have initgroups() which support/suexec.c uses.
[Igor N Kovalenko <infoh mail.wplus.net>]
[Kenichi Hori <ken d2.bs1.fc.nec.co.jp>] PR#815
rect /url.hrm 10 20 30 40
["Chris O'Byrne" <obyrne iol.ie>] PR#807
["Darren O'Shaughnessy" <darren aaii.oz.au>] PR#846
the output of mod_info. ["Lou D. Langholtz" <ldl usi.utah.edu>]
braindead SunOS 4.1.x, allow env variables to be set even on rules with
i.e. now mod_rewrite no longer has a shared copyright. Instead is is
See http_config.h for more details. [Dean Gaudet]
LoadModule/LoadFile directives. Note that module DLLs must be
Module autoindex_module mod_autoindex.o
*) popendir/pclosedir created to properly protect directory scanning.
["Lou D. Langholtz" <ldl usi.utah.edu>]
command. [Ian Kluft <ikluft cisco.com>]
*) Makefile.nt added - to build all the bits from the command line:
nmake -f Makefile.nt
httpd.h. [Dean Gaudet]
the SFIO library calls sfread/sfwrite if B_SFIO is defined at
work however.) [Alexander Spohr <aspohr netmatic.com>] PR#444
*) Turn off chunked encoding after sending terminating chunk/footer
[Stanley Gambarin <gambarin OpenMarket.com>]
[Ben Laurie and Ambarish Malpani <ambarish valicert.com>]
*) SECURITY: When a client connects to a particular port/addr, and
*) Support virtual hosts with wildcard port and/or multiple ports
properly. [Ed Korthof <ed organic.com>]
and mod_include.c. [Dean Gaudet]
[Mark Andrew Heinrich <heinrich tinderbox.Stanford.EDU>]
<sscheck infonex.net>, Ben Laurie] PR#1604
cases. [Ben Reser <breser regnow.com>] PR#1366
Also removed the auto-generated link to www.apache.org that was the
htdocs/manual/misc/known_client_problems.html#257th-byte) can happen
*) #ifdef wrap a few #defines in httpd.h to make life easier on
*) Fix MPE compilation error in mod_usertrack.c. [Mark Bixby]
should consider comparing against src/modules/standard/mod_include.c
Michal Zalewski <lcamtuf boss.staszic.waw.pl> for reporting
[Brian Slesinsky <bslesins wired.com>] PR#1139
[Jay Bloodworth <jay pathways.sde.state.sc.us>]
*) suexec.c wouldn't build without -DLOG_EXEC. [Jason A. Dour]
this is a bug. ["Paul B. Henson" <henson intranet.csupomona.edu>]
[Rick Franchuk <rickf transpect.net>] PR#1107
minus WIN32/NT stuff, but plus copyright removement.
[Kenichi Hori <ken d2.bs1.fc.nec.co.jp>] PR#815
an HTTP/0.9 server. [Kenichi Hori <ken d2.bs1.fc.nec.co.jp>] PR#813,814
[Skip Montanaro <skip calendar.com>, Marc Slemko] PR#797
under Solaris 2.x (up through 2.5.1). It has been fixed.
lockfile in any location. It previously defaulted to /usr/tmp/htlock.
*) Add a placeholder in modules/Makefile to avoid errors with certain
*) USE_FLOCK_SERIALIZED_ACCEPT is now default for FreeBSD, A/UX, and
redirect flag, e.g. R=permanent, the permanent status was lost.
[Lawrence Rosenman <ler lerctr.org>] PR#511
*) PORT: NonStop-UX [Joachim Schmitz <schmitz_joachim tandem.com>] PR#327
[David DeSimone <fox convex.com>] PR#399
["P. Alejandro Lopez-Valencia" <alejolo ideam.gov.co>] PR#388
*) PORT: Support for Maxion/OS SVR4.2 Real Time Unix. [no name given] PR#383
*) PORT: fix problem compiling http_bprintf.c with gcc under SCO
*) Fixed open timestamp fd in proxy_cache.c [Chuck Murcko]
change submitted by Jozsef Hollosi <hollosi sbcm.com>.
directive and the DEFAULT_TYPE symbol in httpd.h. Changed the value
of DEFAULT_TYPE to match the documented default (text/plain).
*) In mod_proxy.c, check return values for proxy_host2addr() when reading
the connection (e.g., when user presses Stop). Apache will now stop
*) Rearrange Configuration.tmpl so that mod_rewrite has higher priority
htdocs/manual/stopping.html for details on stopping and
*) The default handler now logs invalid methods or URIs (i.e. PUT on an
buffer or write inside buff.c or fread'ing from a CGI's output,
*) Use /bin/sh5 on ULTRIX. [P. Alejandro Lopez-Valencia] PR#369
*) Add UnixWare compile/install instructions. [Chuck Murcko]
*) Add macro for memmove to conf.h for SUNOS4. [Marc Slemko]
*) More signed/unsigned port fixes. [Dean Gaudet]
*) suexec.c doesn't close the log file, allowing CGIs to continue writing
*) Improved generation of modules/Makefile to be more generic for
*) Fixed overlaying of request/sub-request notes and headers in
when nalloc==0. [Kai Risku <krisku tf.hut.fi> and Roy Fielding]
*) changed status check mask in proxy_http.c from "HTTP/#.# ### *" to
- Changed send_dir() to remove user/passwd from displayed URL.
[Marc Slemko, reported by Onno Witvliet <onno tc.hsa.nl>]
select/accept and keep-alive requests, fixed several bugs regarding
[Ben Laurie, reported by <geddis tesserae.com>]
*) Tweak byteserving code (e.g. serving PDF files) to work around
Emit Content-Length header when sending multipart/byteranges.
*) Port to HI-UX/WE2. [Nick Maclaren]
[Mark Bixby <markb cccd.edu>]
regex/regcomp.c since that file also used a NEXT define.
*) Portability Fix: NeXT lacks unistd.h so we wrap it's inclusion
*) Remove mod_fastcgi.c from the distribution. This module appears
continue to be easily available at http://www.fastcgi.com/
*) Fixed bug in modules/Makefile that wouldn't allow building in more
- execution restricted to UID/GID > 100
*) Replace references to make in Makefile.tmpl with $(MAKE).
*) Add ProxyBlock directive w/IP address caching. Add IP address
[<mgyger itr.ch>, Adrian Filipi-Martin]
[Roy Fielding, after useful PR from <adrian virginia.edu>]
*) Remove requirement for ResourceConfig/AccessConfig if not using
2. initgroups() on Linux 2.0.x clobbers gr->grid.
*) Reset timeout while reading via get_client_block() in mod_cgi.c
*) Add the ability to pass different Makefile.tmpl files to Configure
*) proxy_http.c bugfixes: [Chuck Murcko]
1) fixes possible NULL pointer reference w/NoCache
*) mod_include.c bugfixes:
3) Patch to fix compiler warnings [<perrot lal.in2p3.fr>]
[Ben Yoshino <ben wiliki.eng.hawaii.edu>]
*) Added definitions for S_IWGRP and S_IWOTH to conf.h [Ben Laurie]
http_protocol.c [Roy Fielding]
*) Replaced use of index() in mod_expires.c with more appropriate
*) In helpers/CutRule, replaced "cut" invocation with "awk" invocation
*) Updated helpers/GuessOS for ...
SCO UnixWare 2.1.1 (requires a separate set of #defines in conf.h)
and fixed something in helpers/PrintPath [Ben Laurie]
*) Not listed. See <http://www.apache.org/docs/new_features_1_2.html>
*) mod_env now turned on by default in Configuration.tmpl.
c) Leading colons were stripped from passwords [<osm interguide.com>]
d) Another fix to multi-method Limit problem [<jk tools.de>]
b) truncated hostnames/ip address in the logs
*) Not listed. See <http://www.apache.org/docs/new_features_1_1.html>
*) Internal redirects which occur in mod_dir.c now preserve the
*) Fix for POSIX compliance in waiting for processes in alloc.c.
which works similar to PidFile (in httpd.conf) [Rob Hartill]
*) Include sys/resource.h in the correct place for SunOS4 [Sameer Parekh]
*) the pstrcat call in mod_cookies.c didn't have an ending NULL,
*) Add strerror function to util.c for SunOS4 [Randy Terbush]
*) patch to get Apache compiled on UnixWare 2.x, recommended as
a temporary measure, pending rewrite of rfc931.c. [Chuck Murcko]
*) past changes to http_config.c to only use the
*) Remove uses of MAX_STRING_LEN/HUGE_STRING_LEN from several routines.
and the server provider uses relative links; as file.html
*) Not listed. See <http://www.apache.org/docs/new_features_1_0.html>
*) Fixed potential FILE* leak in http_main.c [Ben Laurie]
*) Eliminated some bogus Linux-only #defines in conf.h [Aram Mirzadeh]
*) Nuked bogus #define in httpd.h [David Robinson]
*) gcc -Wall no longer complains about an unused variable when util.c
*) Rationalize handling of BSD in conf.h and elsewhere [Randy Terbush,
*) Suppress -Wall warning by casting const away in util.c [Aram Mirzadeh]
subprocesses, including the SIGTERM/pause/SIGKILL routine, until
causing certain extremely marginal cases (e.g., ScriptAlias of a
*particular* index.html file) to fail. [David Robinson]
*) Cleaned up compiler warning from mod_access.c [Robert Thau]
*) Cleaned up comments in mod_cgi.c [Robert Thau]
"/path/to/some/link/" follows the link. [Thau, Fielding]
*) Doesn't reset DirectoryIndex to 'index.html' when
*) Clarified init code and nuked bogus warning in mod_access.c
*) Corrected several directives in sample srm.conf
*) Fixed ScriptAlias/Alias interaction by moving ScriptAlias handling to
mod_alias.c, merging it almost completely with handling of Alias, and
using a special file created for the purpose in /usr/tmp, and
which try to print out the last-modified date). [Eric Hagberg/Robert
*) <!--exec cgi="/some/uri/here"--> always treats the item named by the
*) POST to CGI works on A/UX [Jim Jagielski]
it seems to work well enough without it (even in a 10 hits/sec
workout), and the overhead for the locking under A/UX is
*) Fixed portability problems with mod_cookies.c [Cliff Skolnick]
*) Further de-Berklize mod_cookies.c; change the bogus #include. [Brian
Behlendorf/Eric Hagberg]
*) More improvements to default Configuration for A/UX [Jim Jagielski]
*) SunOS lib-function prototypes in conf.h conditionalized on __GNUC__,
*) Scoreboard file (/tmp/htstatus.*) no longer publically writable.
properly. (One-line fix to http_protocol.c).
*) Corrected cgi-src/Makefile entry for new imagemap script. [Alexei Kosut]
*) Nuked Shambhala name from src/README; had already cleaned it out
*) Set config file locations properly if not set in httpd.conf
*) Fixed mod_imap.c --- relative paths with base_uri referer don't
be nice if mod_dir.c was robust enough to handle that, but for now,
/tmp/htstatus.*, on which each process has an independent file
*) Moved FCNTL_SERIALIZED_ACCEPT defines into conf.h (that's what
*) Incidental code cleanups in http_main.c --- stop dragging
*) Fixed auth_name-related typos in http_core.c [Brian Behlendorf]
Also, fixed auth typo in http_protocol.c unmasked by this fix.
*) Reordered modules in modules.c so that Redirect takes priority
the same SIGTERM/pause/SIGKILL routine used to ding an errant CGI
*) Fixed silly typo in http_main.c which was suddenly fatal in HP-UX.
*) mod_core.c --- default_type returns DEFAULT_TYPE (the compile-time
memory area every time). Fix is in mod_dir.c. [Paul Sutton]
*) Changes to http_main.c --- root server no longer plays silly
*) mod_dir.c bug fixes: ReadmeName and HeaderName
*) http_request.c now calls unescape_url() more places where it
*) Generalized cleanup interface in alloc.c --- any function can be
registered with alloc.c as a cleanup for a resource pool;
*) More changes in alloc.c --- new cleanup_for_exec() function,
registered with the alloc.c machinery before the server exec()s a
*) Fixed basic thinkos in mod_dbm_auth.c [rst, reported by Mark Cox]
in alloc.c [rst]