70N/A -*- coding: utf-8 -*-
70N/AChanges with Apache 2.5.0
70N/A *) mod_ssl: Add RFC 5878 support. [Ben Laurie]
70N/A mod_negotiation: Escape filenames in variant list to prevent an
70N/A possible XSS for a site where untrusted users can upload files to
70N/A a location with MultiViews enabled. [Niels Heinen <heinenn
google.com>]
70N/A *) mod_authz_core: If an expression in "Require expr" returns denied and
70N/A references %{REMOTE_USER}, trigger authentication and retry. PR 52892.
70N/A *) mod_lua: Add new directive LuaAuthzProvider to allow implementing an
70N/A authorization provider in lua. [Stefan Fritsch]
70N/A *) mod_lua: Add a few missing request_rec fields. Rename remote_ip to
70N/A client_ip to match conn_rec. [Stefan Fritsch]
70N/A *) mod_lua: Change prototype of vm_construct, to work around gcc bug which
70N/A causes a segfault. PR 52779. [Dick Snippe <Dick Snippe tech omroep nl>]
70N/A *) mod_lua: Add the parsebody function for parsing POST data. PR 53064.
70N/A *) mod_ssl: If exiting during initialization because of a fatal error,
70N/A log a message to the main error log pointing to the appropriate
70N/A virtual host error log. [Stefan Fritsch]
439N/A *) mod_ldap: Treat the "server unavailable" condition as a transient
70N/A *) mod_ssl: Add support for TLS-SRP (Secure Remote Password key exchange
359N/A for TLS, RFC 5054). PR 51075. [Quinn Slack <sqs cs stanford edu>,
359N/A Christophe Renou, Peter Sylvester]
98N/A *) htdbm, htpasswd: Don't crash if crypt() fails (
e.g. with FIPS enabled).
213N/A *) mod_ssl: Add new directive SSLCompression to disable TLS-level
304N/A compression. PR 53219. [Björn Jacke <bjoern j3e de>, Stefan Fritsch]
425N/A *) core: Make ap_regcomp() return AP_REG_ESPACE if out of memory. Make
325N/A ap_pregcomp() abort if out of memory. This raises the minimum PCRE
320N/A requirement to version 6.0. PR 53284. [Stefan Fritsch]
346N/A *) mpm_event: Fix handling of MaxConnectionsPerChild. [Stefan Fritsch]
324N/A *) suexec: Add --enable-suexec-capabilites support on Linux, to use
290N/A *) suexec: Add support for logging to syslog as an alternative to logging
332N/A to a file; configure --without-suexec-logfile --with-suexec-syslog.
210N/A *) mod_proxy_ajp: Reduce memory usage in case of many keep-alive requests on
128N/A one connection. PR 52275. [Naohiro Ooiwa <naohiro ooiwa miraclelinux com>]
326N/A *) mod_proxy: Use the the same hostname for SNI as for the HTTP request when
335N/A forwarding to SSL backends. PR 53134.
70N/A *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
435N/A *) mod_so: If a filename without slashes is specified for LoadFile or
98N/A LoadModule and the file cannot be found in the server root directory,
434N/A try to use the standard dlopen() search path. [Stefan Fritsch]
433N/A *) various modules, rotatelogs: Replace use of apr_file_write() with
356N/A apr_file_write_full() to prevent incomplete writes. PR 53131.
289N/A [Nicolas Viennot <apache viennot biz>, Stefan Fritsch]
439N/A *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
290N/A be compiled by the build compiler instead of the host compiler.
424N/A Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
286N/A PR 51257. [Guenter Knauf]
295N/A *) mod_authz_core: Fix parsing of Require arguments in <AuthzProviderAlias>.
70N/A PR 53048. [Stefan Fritsch]
262N/A *) core: Fix error handling in ap_scan_script_header_err_brigade() if there
277N/A is no EOS bucket in the brigade. Fixes segfault with mod_proxy_fcgi.
332N/A PR 48272. [Stefan Fritsch]
70N/A *) mod_proxy_fcgi: If there is an error reading the headers from the
70N/A backend, send an error to the client. PR 52879. [Stefan Fritsch]
280N/A *) mod_rewrite: Fix RewriteCond integer checks to be parsed correctly.
418N/A *) Fix MPM DSO load failure on AIX. [Jeff Trawick]
70N/A *) core: Add the port number to the vhost's name in the scoreboard.
414N/A *) mpm_event: Don't do a blocking write when starting a lingering close
98N/A from the listener thread. PR 52229. [Stefan Fritsch]
156N/A *) core: In maintainer mode, replace apr_palloc with a version that
98N/A initializes the allocated memory with non-zero values, except if
70N/A AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
70N/A *) mod_authnz_ldap: Don't try a potentially expensive nested groups
70N/A search before exhausting all AuthLDAPGroupAttribute checks on the
70N/A current group. PR52464 [Eric Covener]
70N/A *) mod_policy: Add a new testing module to help server administrators
70N/A enforce a configurable level of protocol compliance on their
70N/A servers and application servers behind theirs. [Graham Leggett]
70N/A *) mod_firehose: Add a new debugging module able to record traffic
70N/A passing through the server in such a way that connections
and/or 70N/A requests be reconstructed and replayed. [Graham Leggett]
70N/A [Apache 2.5.0-dev includes those bug fixes and changes with the
70N/A Apache
2.4.xx tree as documented below, except as noted.]
Changes with Apache
2.4.x and later:
Changes with Apache
2.2.x and later:
Changes with Apache
2.0.x and later: