CHANGES revision 789f46cb4d4c3e32f6550f17f74ea4a054095901
dd1eb43ba771d4d56b20b4c93ba3acc59475f642Lennart Poettering -*- coding: utf-8 -*-
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-SzmekChanges with Apache 2.3.15
dd1eb43ba771d4d56b20b4c93ba3acc59475f642Lennart Poettering *) SECURITY: CVE-2011-3348 (cve.mitre.org)
dd1eb43ba771d4d56b20b4c93ba3acc59475f642Lennart Poettering mod_proxy_ajp: Respond with HTTP_NOT_IMPLEMENTED when the method is not
dd1eb43ba771d4d56b20b4c93ba3acc59475f642Lennart Poettering recognized. [Jean-Frederic Clere]
dd1eb43ba771d4d56b20b4c93ba3acc59475f642Lennart Poettering *) SECURITY: CVE-2011-3192 (cve.mitre.org)
dd1eb43ba771d4d56b20b4c93ba3acc59475f642Lennart Poettering core: Fix handling of byte-range requests to use less memory, to avoid
5430f7f2bc7330f3088b894166bf3524a067e3d8Lennart Poettering denial of service. If the sum of all ranges in a request is larger than
5430f7f2bc7330f3088b894166bf3524a067e3d8Lennart Poettering the original file, ignore the ranges and send the complete file.
dd1eb43ba771d4d56b20b4c93ba3acc59475f642Lennart Poettering PR 51714. [Stefan Fritsch, Jim Jagielski, Ruediger Pluem, Eric Covener,
dd1eb43ba771d4d56b20b4c93ba3acc59475f642Lennart Poettering *) mod_lua: Prevent early Lua hooks (LuaHookTranslateName and
dd1eb43ba771d4d56b20b4c93ba3acc59475f642Lennart Poettering LuaHookQuickHandler) from being configured in <Directory>, <Files>,
5430f7f2bc7330f3088b894166bf3524a067e3d8Lennart Poettering and htaccess where the configuration would have been ignored.
dd1eb43ba771d4d56b20b4c93ba3acc59475f642Lennart Poettering [Eric Covener]
dd1eb43ba771d4d56b20b4c93ba3acc59475f642Lennart Poettering *) mod_lua: Resolve "attempt to index local 'r' (a userdata value)" errors
dd1eb43ba771d4d56b20b4c93ba3acc59475f642Lennart Poettering in LuaMapHandler scripts [Eric Covener]
dd1eb43ba771d4d56b20b4c93ba3acc59475f642Lennart Poettering *) mod_log_debug: Rename optional argument from if= to expr=, to be more
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek in line with other config directives. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_headers: Require an expression to be specified with expr=, to be more
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek in line with other config directives. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_substitute: To prevent overboarding memory usage, limit line length
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek to 1MB. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_lua: Make the query string (r.args) writable. [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_include: Add support for application/x-www-form-urlencoded encoding
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek and decoding. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) rotatelogs: Add -c option to force logfile creation in every rotation
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek interval, even if empty. [Jan Kaluža <jkaluza redhat.com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Limit ap_pregsub() to 64K, add ap_pregsub_ex() for longer strings.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_session_crypto: Refactor to support the new apr_crypto API.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) http: Add missing Location header if local URL-path is used as
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek ErrorDocument for 30x. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_buffer: Make sure we step down for subrequests, but not for internal
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek redirects triggered by mod_rewrite. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_lua: add r:construct_url as a wrapper for ap_construct_url.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_remote_ip: Fix configuration of internal proxies. PR 49272.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Jim Riggs <jim riggs me>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mpm_winnt: Handle AcceptFilter 'none' mode correctly; resolve specific
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek server IP endpoint and remote client IP upon connection. [William Rowe]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_setenvif: Remove OID match which is obsoleted by SetEnvIfExpr with
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PeerExtList(). [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mpm_prefork, mpm_worker, mpm_event: If a child is created just before
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek graceful restart and then exits because of a missing lock file, don't
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek shutdown the whole server. PR 39311. [Shawn Michael
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <smichael rightnow com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mpm_event: Check the return value from ap_run_create_connection.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR: 41194. [Davi Arnaut]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_mime_magic: Add signatures for PNG and SWF to the example config.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR: 48352. [Jeremy Wagner-Kaiser <jwagner-kaiser adknowledge com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core, unixd: Add -D DUMP_RUN_CFG option to dump some configuration items
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek from the parsed (or default) config. This is useful for init scripts that
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek need to setup temporary directories and permissions. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core, mod_actions, mod_asis: Downgrade error log messages which accompany
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek a 404 request status from loglevel error to info. PR: 35768. [Stefan
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Fix hook sorting with Perl modules. PR: 45076. [Torsten Foertsch
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <torsten foertsch gmx net>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Enforce LimitRequestFieldSize after multiple headers with the same
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek name have been merged. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: If MaxMemFree is set, ask OpenSSL >= 1.0.0 to reduce memory
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek usage. PR 51618. [Cristian Rodríguez <crrodriguez opensuse org>,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: At startup, when checking a server certificate whether it
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek matches the configured ServerName, also take dNSName entries in the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek subjectAltName extension into account. PR 32652, PR 47051. [Kaspar Brand]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_substitute: Reduce memory usage and copying of data. PR 50559.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl/proxy: enable the SNI extension for backend TLS connections
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Add wrappers for malloc, calloc, realloc that check for out of memory
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek situations and use them in many places. PR 51568, PR 51569, PR 51571.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Fix cross-compilation of mod_cgi/mod_cgid when APR_HAVE_STRUCT_RLIMIT is
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek false but RLIMIT_* are defined. PR51371. [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Correctly obey ServerName / ServerAlias if the Host header from the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek request matches the VirtualHost address.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 51709. [Micha Lenk <micha lenk.info>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_unique_id: Use random number generator to initialize counter.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 45110. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Add convenience API for apr_random. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Add MaxRangeOverlaps and MaxRangeReversals directives to control
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the number of overlapping and reversing ranges (respectively) permitted
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek before returning the entire resource, with a default limit of 20.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ldap: Optional function uldap_ssl_supported(r) always returned false
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek if called from a virtual host with mod_ldap directives in it. Did not
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek affect mod_authnz_ldap's usage of mod_ldap. [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_filter: Instead of dropping the Accept-Ranges header when a filter
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek registered with AP_FILTER_PROTO_NO_BYTERANGE is present,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek set the header value to "none". [Eric Covener, Ruediger Pluem]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Allow MaxRanges none|unlimited|default and set 'Accept-Ranges: none'
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek in the case Ranges are being ignored with MaxRanges none.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: revamp CRL-based revocation checking when validating
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek certificates of clients or proxied servers. Completely delegate
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek CRL processing to OpenSSL, and add a new [Proxy]CARevocationCheck
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek directive for controlling the revocation checking mode. [Kaspar Brand]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Add MaxRanges directive to control the number of ranges permitted
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek before returning the entire resource, with a default limit of 200.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: Ensure that CacheDisable can correctly appear within
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek a LocationMatch. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: Fix the moving of the CACHE filter, which erroneously
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek stood down if the original filter was not added by configuration.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: improve certificate error logging. PR 47408. [Kaspar Brand]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_authz_groupfile: Increase length limit of lines in the group file to
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek 16MB. PR 43084. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Increase length limit of lines in the configuration file to 16MB.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 45888. PR 50824. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Add API for resizable buffers. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ldap: Enable LDAPConnectionTimeout for LDAP toolkits that have
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek LDAP_OPT_CONNECT_TIMEOUT instead of LDAP_OPT_NETWORK_TIMEOUT, such
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek as Tivoli Directory Server 6.3 and later. [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ldap: Change default number of retries from 10 to 3, and add
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek an LDAPRetries and LDAPRetryDelay directives. [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_authnz_ldap: Don't retry during authentication, because this just
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek multiplies the ample retries already being done by mod_ldap. [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) configure: Allow to explicitly disable modules even with module selection
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek 'reallyall'. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_rewrite: Check validity of each internal (int:) RewriteMap even if the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek RewriteEngine is disabled in server context, avoiding a crash while
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek referencing the invalid int: map at runtime. PR 50994.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Ben Noordhuis <info noordhuis nl>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl, configure: require OpenSSL 0.9.7 or later. [Kaspar Brand]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: remove ssl_toolkit_compat layer. [Kaspar Brand]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl, configure, ab: drop support for RSA BSAFE SSL-C toolkit.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_usertrack: Run mod_usertrack earlier in the fixups hook to ensure the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek cookie is set when modules such as mod_rewrite trigger a redirect. Also
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek use r->err_headers_out for the cookie, for the same reason. PR29755.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Sami J. Mäkinen <sjm almamedia fi>, Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy_http, mod_proxy_connect: Add 'proxy-status' and
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek 'proxy-source-port' request notes for logging. PR 30195. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) configure: Enable ldap modules in 'all' and 'most' selections if ldap
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek is compiled into apr-util. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Add ap_check_cmd_context()-check if a command is executed in
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek .htaccess file. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_deflate: Fix endless loop if first bucket is metadata. PR 51590.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Torsten Foertsch <torsten foertsch gmx net>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_authn_socache: Fix to work in .htaccess if not configured anywhere
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek in httpd.conf, and introduce an AuthnCacheEnable directive.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 51991 [Nick Kew]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_xml2enc: new (formerly third-party) module supporting
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek internationalisation for filters via smart charset sniffing
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek and conversion. [Nick Kew]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy_html: new (formerly third-party) module to fix up
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek HTML links in a reverse proxy situation, where a backend
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek generates URLs that are not resolvable by Clients. [Nick Kew]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-SzmekChanges with Apache 2.3.14
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy_ajp: Improve trace logging. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy_ajp: Respect "reuse" flag in END_REPONSE packets.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy: enable absolute URLs to be rewritten with ProxyPassReverse,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek e.g. to reverse proxy "Location: https://other-internal-server/login"
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) prefork, worker, event: Make sure crashes are logged to the error log if
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek httpd has already detached from the console. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) prefork, worker, event: Reduce period during startup/restart where a
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek successive signal may be lost. PR 43696. [Arun Bhalla <arun shme net>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_allowmethods: Correct Merging of "reset" and do not allow an
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek empty parameter list for the AllowMethods directive. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) configure: Update selection of modules for 'all' and 'most'. 'all' will
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek now enable all modules except for example and test modules. Make the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek selection for 'most' more useful (including ssl and proxy). Both 'all'
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek and 'most' will now disable modules if dependencies are missing instead
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek of aborting. If a specific module is requested with --enable-XXX=yes,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek missing dependencies will still cause configure to exit with an error.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ldap: Revert the integration of apr-ldap as ap_ldap which was done
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek in 2.3.13. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: For '*' or '_default_' vhosts, use a wildcard address of any
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek address family, rather than IPv4 only. [Joe Orton]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core, mod_rewrite, mod_ssl, mod_nw_ssl: Make the SERVER_NAME variable
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek include [ ] for literal IPv6 addresses, as mandated by RFC 3875.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 26005. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_negotiation: Fix parsing of Content-Length in type maps. PR 42203.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Nagae Hidetake <nagae eagan jp>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Add more logging to ap_scan_script_header_err* functions. Add
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek ap_scan_script_header_err*_ex functions that take a module index for
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mod_cgi, mod_cgid, mod_proxy_fcgi, mod_proxy_scgi, mod_isapi: Use the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek new functions in order to make logging configurable per-module.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_dir: Add DirectoryIndexRedirect to send an external redirect to
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the proper index. [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_deflate: Don't try to compress requests with a zero sized body.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 51350. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Fix startup on IP6-only systems. PR 50592. [Joe Orton,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <root linkage white-void net>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) suexec: Add environment variables CONTEXT_DOCUMENT_ROOT, CONTEXT_PREFIX,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek REDIRECT_ERROR_NOTES, REDIRECT_SCRIPT_FILENAME, REQUEST_SCHEME to the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek whitelist in suexec. PR 51499. [Graham Laverty <graham reg ca>,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_rewrite: Fix regexp RewriteCond with NoCase. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_log_debug: New module that allows to log custom messages at various
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek phases in the request processing. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: Add some debug logging when loading server certificates.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 37912. [Nick Burch <nick burch alfresco com>]
f407824d751a9cb31abfdf0343fe179e0efef259David Herrmann *) configure: Support reallyall option also for --enable-mods-static.
f407824d751a9cb31abfdf0343fe179e0efef259David Herrmann [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_socache_dc: add --with-distcache to configure for choosing
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the distcache installation directory. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_socache_dc: use correct build variable MOD_SOCACHE_DC_LDADD
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek instead of MOD_SOCACHE_LDADD in build macro. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_lua, mod_deflate: respect platform specific runpath linker
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek flag. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) configure: Only link the httpd binary against PCRE. No other support
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek binary needs PCRE. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) configure: tolerate dependency checking failures for modules if
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek they have been enabled implicitely. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) configure: Allow to specify module specific custom linker flags via
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the MOD_XXX_LDADD variables. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-SzmekChanges with Apache 2.3.13
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) ab: Support specifying the local address to use. PR 48930.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Peter Schuller <scode spotify com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Add support to ErrorLogFormat for logging the system unique
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek thread id under Linux. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) event: New AsyncRequestWorkerFactor directive to influence how many
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek connections will be accepted per process. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) prefork, worker, event: Rename MaxClients to MaxRequestWorkers which
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek describes more accurately what it does. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) rotatelogs: Add -p argument to specify custom program to invoke
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek after a log rotation. PR 51285. [Sven Ulland <sveniu ifi.uio.no>,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: Don't do OCSP checks for valid self-issued certs. [Kaspar Brand]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: Avoid unnecessary renegotiations with SSLVerifyDepth 0.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 48215. [Kaspar Brand]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_status: Display information about asynchronous connections in the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek server-status. PR 44377. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mpm_event: If the number of connections of a process is very high, or if
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek all workers are busy, don't accept new connections in that process.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mpm_event: Process lingering close asynchronously instead of tying up
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek worker threads. [Jeff Trawick, Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mpm_event: If MaxMemFree is set, limit the number of pools that is kept
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek around. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mpm_event: Fix graceful restart aborting connections. PR 43359.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Takashi Sato <takashi lans-tv com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: Disable AECDH ciphers in example config. PR 51363.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Rob Stradling <rob comodo com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Introduce new function ap_get_conn_socket() to access the socket of
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek a connection. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_data: Introduce a filter to support RFC2397 data URLs. [Graham
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_userdir/mod_alias/mod_vhost_alias: Correctly set DOCUMENT_ROOT,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek CONTEXT_DOCUMENT_ROOT, CONTEXT_PREFIX. PR 26052. PR 46198.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Allow to override document_root on a per-request basis. Introduce
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek new context_document_root and context_prefix which provide information
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek about non-global URI-to-directory mappings (from e.g. mod_userdir or
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mod_alias) to scripts. PR 49705. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Add <ElseIf> and <Else> to complement <If> sections.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ext_filter: Remove DebugLevel option in favor of per-module loglevel.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_include: Make the "#if expr" element use the new "ap_expr" expression
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek parser. The old parser can still be used by setting the new directive
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek SSILegacyExprParser. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Add some features to ap_expr for use by mod_include: a restricted
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mode that does not allow to bypass request access restrictions; new
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek variables DOCUMENT_URI (alias for REQUEST_URI), LAST_MODIFIED; -A as an
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek alias for -U; an additional data entry in ap_expr_eval_ctx_t for use by
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the consumer; an extensible ap_expr_exec_ctx() API that allows to use that
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek data entry. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_include: Merge directory configs instead of one SSI* config directive
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek causing all other per-directory SSI* config directives to be reset.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_charset_lite: Remove DebugLevel option in favour of per-module
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek loglevel. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Add ap_regexec_len() function that works with non-null-terminated
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek strings. PR 51231. [Yehezkel Horowitz <horowity checkpoint com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_authnz_ldap: If the LDAP server returns constraint violation,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek don't treat this as an error but as "auth denied". [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy_fcgi|scgi: Add support for "best guess" of PATH_INFO
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek for SCGI/FCGI. PR 50880, 50851. [Mark Montague <mark catseye.org>,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: When content is served stale, and there is no means to
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek revalidate the content using ETag or Last-Modified, and we have
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mandated no stale-on-error behaviour, stand down and don't cache.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Saves a cache write that will never be read.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_reqtimeout: Fix a timed out connection going into the keep-alive
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek state after a timeout when discarding a request body. PR 51103.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Add various file existance test operators to ap_expr.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy_express: New mass reverse-proxy switch extension for
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mod_proxy. [Jim Jagielski]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) configure: Fix script error when configuring module set "reallyall".
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-SzmekChanges with Apache 2.3.12
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) configure, core: Provide easier support for APR's hook probe
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek capability. [Jim Jagielski, Jeff Trawick]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Silence autoconf 2.68 warnings. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_authnz_ldap: Resolve crash when LDAP is used for authorization only
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Scott Hill <shill genscape.com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) support: Make sure check_forensic works with mod_unique_id loaded
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Add child_status hook for tracking creation/termination of MPM child
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek processes. Add end_generation hook for notification when the last
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek MPM child of a generation exits. [Jeff Trawick]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ldap: Make LDAPSharedCacheSize 0 create a non-shared-memory cache per
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek process as opposed to disabling caching completely. This allows to use
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the non-shared-memory cache as a workaround for the shared memory cache
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek not being available during graceful restarts. PR 48958. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Add new ap_reserve_module_slots/ap_reserve_module_slots_directive API,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek necessary if a module (like mod_perl) registers additional modules late
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek in the startup phase. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Prevent segfault if DYNAMIC_MODULE_LIMIT is reached. PR 51072.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Torsten Förtsch <torsten foertsch gmx net>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) WinNT MPM: Improve robustness under heavy load. [Jeff Trawick]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) MinGW build improvements. PR 49535. [John Vandenberg
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <jayvdb gmail.com>, Jeff Trawick]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Support module names with colons in loglevel configuration.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Torsten Förtsch <torsten foertsch gmx net>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl, ab: Support OpenSSL compiled without SSLv2 support.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Abort if the MPM is changed across restart. [Jeff Trawick]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy_ajp: Add support for 'ProxyErrorOverride on'. PR 50945.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Peter Pramberger <peter pramberger.at>, Jim Jagielski]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy_fcgi: Add support for 'ProxyErrorOverride on'. PR 50913.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Mark Montague <mark catseye.org>, Jim Jagielski]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Change the APIs of ap_cfg_getline() and ap_cfg_getc() to return an
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek error code. Abort with a nice error message if a config line is too long.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Partial fix for PR 50824. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_info: Dump config to stdout during startup if -DDUMP_CONFIG is
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek specified. PR 31956. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Restore visibility of DEFAULT_PIDLOG to core and modules. MPM
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek helper function ap_remove_pid() added. [Jeff Trawick]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Enable DEFAULT_REL_RUNTIMEDIR on Windows and NetWare. [various]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Correct C++ incompatibility with http_log.h. [Stefan Fritsch, Jeff
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_log_config: Prevent segfault. PR 50861. [Torsten Förtsch
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: AllowEncodedSlashes new option NoDecode to allow encoded slashes
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek in request URL path info but not decode them. Change behavior of option
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek "On" to decode the encoded slashes as 2.0 and 2.2 do. PR 35256,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 46830. [Dan Poirier]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: Check SNI hostname against Host header case-insensitively.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 49491. [Mayank Agrawal <magrawal.08 gmail.com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ldap: Add LDAPConnectionPoolTTL to give control over lifetime
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek of bound backend LDAP connections. PR47634 [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: Make CacheEnable and CacheDisable configurable per
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek directory in addition to per server, making them work from within
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek a LocationMatch. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) worker, event, prefork: Correct several issues when built as
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek DSOs; most notably, the scoreboard was reinitialized during graceful
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek restart, such that processes of the previous generation were not
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek observable. [Jeff Trawick]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-SzmekChanges with Apache 2.3.11
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_win32: Added shebang check for '! so that .vbs scripts work as CGI.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Win32's cscript interpreter can only use a single quote as comment char.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy: balancer-manager now uses POST instead of GET.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: new util function: ap_parse_form_data(). Previously,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek this capability was tucked away in mod_request. [Jim Jagielski]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: new hook: ap_run_pre_read_request. [Jim Jagielski]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: When a request other than GET or HEAD arrives, we must
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek invalidate existing cache entities as per RFC2616 13.10. PR 15868.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) modules: Fix many modules that were not correctly initializing if they
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek were not active during server startup but got enabled later during a
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek graceful restart. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Create new ap_state_query function that allows modules to determine
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek if the current configuration run is the initial one at server startup,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek and if the server is started for testing/config dumping only.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy: Runtime configuration of many parameters for existing
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek balancers via the balancer-manager. [Jim Jagielski]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy: Runtime addition of new workers (BalancerMember) for existing
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek balancers via the balancer-manager. [Jim Jagielski]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: When a bad Expires date is present, we need to behave as if
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the Expires is in the past, not as if the Expires is missing. PR 16521.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Co-Advisor <coad@measurement-factory.com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: We must ignore quoted-string values that appear in a
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Cache-Control header. PR 50199. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_dav: Revert change to send 501 error if unknown Content-* header is
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek received for a PUT request. PR 42978. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: Respect s-maxage as described by RFC2616 14.9.3, which must
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek take precedence if present. PR 35247. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: Fix a possible startup failure if multiple SSL vhosts
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek are configured with the same ServerName and private key file.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Masahiro Matsuya <mmatsuya redhat.com>, Joe Orton]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_socache_dc: Make module compile by fixing some typos.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 50735 [Mark Montague <mark catseye.org>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) prefork: Update MPM state in children during a graceful stop or
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek restart. PR 41743. [Andrew Punch <andrew.punch 247realmedia.com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_mime: Ignore leading dots when looking for mime extensions.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 50434 [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Add support to set variables with the 'Define' directive. The
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek variables that can then be used in the config using the ${VAR} syntax
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek known from envvar interpolation. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy_http: make adding of X-Forwarded-* headers configurable.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek ProxyAddHeaders defaults to On. [Vincent Deffontaines]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_slotmem_shm: Increase memory alignment for slotmem data.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: Add config options for OCSP: SSLOCSPResponderTimeout,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek SSLOCSPResponseMaxAge, SSLOCSPResponseTimeSkew.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Kaspar Brand <httpd-dev.2011 velox.ch>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: Revamp output buffering to reduce network overhead for
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek output fragmented into many buckets, such as chunked HTTP responses.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Apply <If> sections to all requests, not only to file base requests.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Allow to use <If> inside <Directory>, <Location>, and <Files> sections.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek The merging of <If> sections now happens after the merging of <Location>
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek sections, even if an <If> section is embedded inside a <Directory> or
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <Files> section. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy: Refactor usage of shared data by dropping the scoreboard
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek and using slotmem. Create foundation for dynamic growth/changes of
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek members within a balancer. Remove BalancerNonce in favor of a
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek per-balancer 'nonce' parameter. [Jim Jagielski]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_status: Don't show slots which are disabled by MaxClients as open.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR: 47022 [Jordi Prats <jordi prats gmail com>, Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mpm_prefork: Fix ap_mpm_query results for AP_MPMQ_MAX_DAEMONS and
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek AP_MPMQ_MAX_THREADS.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_authz_core: Fix bug in merging logic if user-based and non-user-based
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek authorization directives were mixed. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_authn_socache: change directive name from AuthnCacheProvider
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek to AuthnCacheProvideFor. The term "provider" is overloaded in
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek this module, and we should avoid confusion between the provider
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek of a backend (AuthnCacheSOCache) and the authn provider(s) for
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek which this module provides cacheing (AuthnCacheProvideFor).
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy_http: Allocate the fake backend request from a child pool
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek of the backend connection, instead of misusing the pool of the frontend
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek request. Fixes a thread safety issue where buckets set aside in the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek backend connection leak into other threads, and then disappear when
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the frontend request is cleaned up, in turn causing corrupted buckets
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek to make other threads spin. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: Change the format of the SSL_{CLIENT,SERVER}_{I,S}_DN variables
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek to be RFC 2253 compatible, convert non-ASCII characters to UTF8, and
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek escape other special characters with backslashes. The old format can
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek still be used with the LegacyDNStringFormat argument to SSLOptions.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core, mod_rewrite: Make the REQUEST_SCHEME variable available to
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek scripts and mod_rewrite. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_rewrite: Allow to use arbitrary boolean expressions (ap_expr) in
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek RewriteCond. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_rewrite: Allow to unset environment variables using E=!VAR.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 49512. [Mark Drayton <mark markdrayton info>, Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_headers: Restore the 2.3.8 and earlier default for the first
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek argument of the Header directive ("onsuccess"). [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Disallow the mixing of relative and absolute Options PR 33708.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Sönke Tesch <st kino-fahrplan.de>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: When exporting request headers to HTTP_* environment variables,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek drop variables whose names contain invalid characters. Describe in the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek docs how to restore the old behaviour. [Malte S. Stretz <mss apache org>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: When selecting an IP-based virtual host, favor an exact match for
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the port over a wildcard (or omitted) port instead of favoring the one
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek that came first in the configuration file. [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Overlapping virtual host address/port combinations now implicitly
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek enable name-based virtual hosting for that address. The NameVirtualHost
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek directive has no effect, and _default_ is interpreted the same as "*".
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: In the absence of any Options directives, the default is now
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek "FollowSymlinks" instead of "All". [Igor Galić]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) rotatelogs: Add -e option to write logs through to stdout for optional
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek further processing. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: Correctly read full lines in input filter when the line is
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek incomplete during first read. PR 50481. [Ruediger Pluem]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_authz_core: Add AuthzSendForbiddenOnFailure directive to allow
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek sending '403 FORBIDDEN' instead of '401 UNAUTHORIZED' if authorization
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek fails for an authenticated user. PR 40721. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-SzmekChanges with Apache 2.3.10
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_rewrite: Don't implicitly URL-escape the original query string
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek when no substitution has changed it. PR 50447. [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Honor 'AcceptPathInfo OFF' during internal redirects,
3ba3a79df4ae094d1008c04a9af8d1ff970124c4Zbigniew Jędrzejewski-Szmek such as per-directory mod_rewrite substitutions. PR 50349.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_rewrite: Add 'RewriteOptions InheritBefore' to put the base
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek rules/conditions before the overridden rules/conditions. PR 39313.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Jérôme Grandjanny <jerome.grandjanny cea.fr>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_autoindex: add IndexIgnoreReset to reset the list of IndexIgnored
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek filenames in higher precedence configuration sections. PR 24243.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cgid: RLimit* directive support for mod_cgid. PR 42135
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Fail startup when the argument to ServerName looks like a glob
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek or a regular expression instead of a hostname (*?[]). PR 39863
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Rahul Nair <rahul.g.nair gmail.com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_userdir: Add merging of enable, disable, and filename arguments
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek to UserDir directive, leaving enable/disable of userlists unmerged.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 44076 [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) httpd: When no -k option is provided on the httpd command line, the server
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek was starting without checking for an existing pidfile. PR 50350
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy: Put the worker in error state if the SSL handshake with the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek backend fails. PR 50332.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Daniel Ruggeri <DRuggeri primary.net>, Ruediger Pluem]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache_disk: Fix Windows build which was broken after renaming
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the module. [Gregg L. Smith]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-SzmekChanges with Apache 2.3.9
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) SECURITY: CVE-2010-1623 (cve.mitre.org)
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Fix a denial of service attack against mod_reqtimeout.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_headers: Change default first argument of Header directive
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek from "onsuccess" to "always". [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_include: Add the onerror attribute to the include element,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek allowing an URL to be specified to include on error. [Graham
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache_disk: mod_disk_cache renamed to mod_cache_disk, to be
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek consistent with the naming of other modules. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_setenvif: Add SetEnvIfExpr directive to set env var depending on
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek expression. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy: Fix ProxyPassInterpolateEnv directive. PR 50292.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) suEXEC: Add Suexec directive to disable suEXEC without renaming the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek binary (Suexec Off), or force startup failure if suEXEC is required
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek but not supported (Suexec On). Change SuexecUserGroup to fail
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek startup instead of just printing a warning if suEXEC is disabled.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Add Error directive for aborting startup or htaccess processing
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek with a specified error message. [Jeff Trawick]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_rewrite: Fix the RewriteEngine directive to work within a
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek location. Previously, once RewriteEngine was switched on globally,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek it was impossible to switch off. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core, mod_include, mod_ssl: Move the expression parser derived from
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mod_include back into mod_include. Replace ap_expr with a parser
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek derived from mod_ssl's parser. Make mod_ssl use the new parser. Rework
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek ap_expr's public interface and provide hooks for modules to add variables
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek and functions. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Do the hook sorting earlier so that the hooks are properly sorted
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek for the pre_config hook and during parsing the config. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: In the absence of any AllowOverride directives, the default is now
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek "None" instead of "All". PR49823 [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy: Don't allow ProxyPass or ProxyPassReverse in
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <Directory> or <Files>. PR47765 [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) prefork/worker/event MPMS: default value (when no directive is present)
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek of MaxConnectionsPerChild/MaxRequestsPerChild is changed to 0 from 10000
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek to match default configuration and manual. PR47782 [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) proxy_connect: Don't give up in the middle of a CONNECT tunnel
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek when the child process is starting to exit. PR50220. [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_autoindex: Fix inheritance of mod_autoindex directives into
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek contexts that don't have any mod_autoindex directives. PR47766.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_rewrite: Add END flag for RewriteRule to prevent further rounds
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek of rewrite processing when a per-directory substitution occurs.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: Make sure to always log an error if loading of CA certificates
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek fails. PR 40312. [Paul Tiemann <issues apache org ourdetour com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_dav: Send 501 error if unknown Content-* header is received for a PUT
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek request (RFC 2616 9.6). PR 42978. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_dav: Send 400 error if malformed Content-Range header is received for
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek a put request (RFC 2616 14.16). PR 49825. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy: Release the backend connection as soon as EOS is detected,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek so the backend isn't forced to wait for the client to eventually
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek acknowledge the data. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy: Optimise ProxyPass within a Location so that it is stored
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek per-directory, and chosen during the location walk. Make ProxyPass
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek work correctly from within a LocationMatch. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Fix segfault if per-module LogLevel is on virtual host
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek scope. PR 50117. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy: Move the ProxyErrorOverride directive to have per
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek directory scope. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_allowmethods: New module to deny certain HTTP methods without
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek interfering with authentication/authorization. [Paul Querna,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Igor Galić, Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: Log certificate information and improve error message if client
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek cert verification fails. PR 50093, PR 50094. [Lassi Tuura <lat cern ch>,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) htcacheclean: Teach htcacheclean to limit cache size by number of
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek inodes in addition to size of files. Prevents a cache disk from
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek running out of space when many small files are cached.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Rename MaxRequestsPerChild to MaxConnectionsPerChild, which
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek describes more accurately what the directive does. The old name
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek still works but logs a warning. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: Optionally serve stale data when a revalidation returns a
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek 5xx response, controlled by the CacheStaleOnError directive.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) htcacheclean: Allow the listing of valid URLs within the cache, with
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the option to list entry metadata such as sizes and times. [Graham
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: correctly parse quoted strings in cache headers.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 50199 [Nick Kew]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: Allow control over the base URL of reverse proxied requests
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek using the CacheKeyBaseURL directive, so that the cache key can be
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek calculated from the endpoint URL instead of the server URL. [Graham
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: CacheLastModifiedFactor, CacheStoreNoStore, CacheStorePrivate,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek CacheStoreExpired, CacheIgnoreNoLastMod, CacheDefaultExpire,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek CacheMinExpire and CacheMaxExpire can be set per directory/location.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_disk_cache: CacheMaxFileSize, CacheMinFileSize, CacheReadSize and
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek CacheReadTime can be set per directory/location. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Speed up config parsing if using a very large number of config
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek files. PR 50002 [andrew cloudaccess net]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: Support the caching of HEAD requests. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) htcacheclean: Allow the option to round up file sizes to a given
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek block size, improving the accuracy of disk usage. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: Add authz providers for use with mod_authz_core and its
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek RequireAny/RequireAll containers: 'ssl' (equivalent to SSLRequireSSL),
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek 'ssl-verify-client' (for use with 'SSLVerifyClient optional'), and
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek 'ssl-require' (expressions with same syntax as SSLRequire).
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: Make the ssl expression parser thread-safe. It now requires
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek bison instead of yacc. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_disk_cache: Change on-disk header file format to support the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek link of the device/inode of the data file to the matching header
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek file, and to support the option of not writing a data file when
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the data file is empty. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core/mod_unique_id: Add generate_log_id hook to allow to use
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the ID generated by mod_unique_id as error log ID for requests.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: Make sure that we never allow a 304 Not Modified response
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek that we asked for to leak to the client should the 304 response be
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek uncacheable. PR45341 [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: Add the cache_status hook to register the final cache
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek decision hit/miss/revalidate. Add optional support for an X-Cache
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek and/or an X-Cache-Detail header to add the cache status to the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek response. PR48241 [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_authz_host: Add 'local' provider that matches connections originating
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek on the local host. PR 19938. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Event MPM: Fix crash accessing pollset on worker thread when child
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek process is exiting. [Jeff Trawick]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: For process invocation (cgi, fcgid, piped loggers and so forth)
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek pass the system library path (LD_LIBRARY_PATH or platform-specific
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek variables) along with the system PATH, by default. Both should be
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek overridden together as desired using PassEnv etc; see mod_env.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: Introduce CacheStoreExpired, to allow administrators to
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek capture a stale backend response, perform If-Modified-Since requests
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek against the backend, and serving from the cache all 304 responses.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek This restores pre-2.2.4 cache behavior. [William Rowe]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_rewrite: Introduce <=, >= string comparison operators, and integer
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek comparators -lt, -le, -eq, -ge, and -gt. To help bash users and drop
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the ambiguity of the symlink test "-ltest", introduce -h or -L as
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek symlink test operators. [William Rowe]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: Give the cache provider the opportunity to choose to cache
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek or not cache based on the buckets present in the brigade, such as the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek presence of a FILE bucket.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_authz_core: Allow authz providers to check args while reading the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek config and allow to cache parsed args. Move 'all' and 'env' authz
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek providers from mod_authz_host to mod_authz_core. Add 'method' authz
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek provider depending on the HTTP method. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_include: Move the request_rec within mod_include to be
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek exposed within include_ctx_t. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_include: Reinstate support for UTF-8 character sets by allowing a
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek variable being echoed or set to be decoded and then encoded as separate
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek steps. PR47686 [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: Add a discrete commit_entity() provider function within the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mod_cache provider interface which is called to indicate to the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek provider that caching is complete, giving the provider the opportunity
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek to commit temporary files permanently to the cache in an atomic
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek fashion. Replace the inconsistent use of error cleanups with a formal
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek set of pool cleanups attached to a subpool, which is destroyed on error.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: Change the signature of the store_body() provider function
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek within the mod_cache provider interface to support an "in" brigade
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek and an "out" brigade instead of just a single input brigade. This
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek gives a cache provider the option to consume only part of the brigade
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek passed to it, rather than the whole brigade as was required before.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek This fixes an out of memory and a request timeout condition that would
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek occur when the original document was a large file. Introduce
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek CacheReadSize and CacheReadTime directives to mod_disk_cache to control
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the amount of data to attempt to cache at a time. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Add ErrorLogFormat to allow configuring error log format, including
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek additional information that is logged once per connection or request. Add
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek error log IDs for connections and request to allow correlating error log
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek lines and the corresponding access log entry. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Disable sendfile by default. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: Check the request to determine whether we are allowed
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek to return cached content at all, and respect a "Cache-Control:
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek no-cache" header from a client. Previously, "no-cache" would
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek behave like "max-age=0". [Graham Leggett]
3ba3a79df4ae094d1008c04a9af8d1ff970124c4Zbigniew Jędrzejewski-Szmek *) mod_cache: Use a proper filter context to hold filter data instead
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek of misusing the per-request configuration. Fixes a segfault on trunk
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek when the normal handler is used. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cgid: Log a warning if the ScriptSock path is truncated because
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek it is too long. PR 49388. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) vhosts: Do not allow _default_ in NameVirtualHost, or mixing *
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek and non-* ports on NameVirtualHost, or multiple NameVirtualHost
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek directives for the same address:port, or NameVirtualHost
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek directives with no matching VirtualHosts, or multiple ip-based
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek VirtualHost sections for the same address:port. These were
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek previously accepted with a warning, but the behavior was
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek undefined. [Dan Poirier]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_remoteip: Fix a segfault when using mod_remoteip in conjunction with
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Allow/Deny. PR 49838. [Andrew Skalski <voltara gmail.com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: DirectoryMatch can now match on the end of line character ($),
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek and sub-directories of matched directories are no longer implicitly
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek matched. PR49809 [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Regexps: introduce new higher-level regexp utility including parsing
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek and executing perl-style regexp ops (e.g s/foo/bar/i) and regexp memory
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Proxy: support setting source address. PR 29404
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Multiple contributors iterating through bugzilla,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Aron Ujvari <xanco nikhok.hu>, Aleksey Midenkov <asm uezku.kemsu.ru>,
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek <dan listening-station.net; trunk version Nick Kew]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) HTTP protocol: return 400 not 503 if we have to abort due to malformed
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek chunked encoding. [Nick Kew]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-SzmekChanges with Apache 2.3.8
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) suexec: Support large log files. PR 45856. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Abort with sensible error message if no or more than one MPM is
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek loaded. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy: Rename erroronstatus to failonstatus.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Daniel Ruggeri <DRuggeri primary.net>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_dav_fs: Fix broken "creationdate" property.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Regression in version 2.3.7. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-SzmekChanges with Apache 2.3.7
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) SECURITY: CVE-2010-1452 (cve.mitre.org)
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mod_dav, mod_cache, mod_session: Fix Handling of requests without a path
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek segment. PR: 49246 [Mark Drayton, Jeff Trawick]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ldap: Properly check the result returned by apr_ldap_init. PR 46076.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_rewrite: Log errors if rewrite map files cannot be opened. PR 49639.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy_http: Support the 'ping' property for backend HTTP/1.1 servers
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek via leveraging 100-Continue as the initial "request".
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core/mod_authz_core: Introduce new access_checker_ex hook that enables
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mod_authz_core to bypass authentication if access should be allowed by
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek IP address/env var/... [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Introduce note_auth_failure hook to allow modules to add support
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek for additional auth types. This makes ap_note_auth_failure() work with
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mod_auth_digest again. PR 48807. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) socache modules: return APR_NOTFOUND when a lookup is not found [Nick Kew]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_authn_socache: new module [Nick Kew]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) configure: Add reallyall option for --enable-mods-shared. [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Fix Windows build when using VC6. [Gregg L. Smith <lists glewis com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_rewrite: Allow to set environment variables without explicitly
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek giving a value. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_rewrite: Remove superfluous EOL from rewrite logging. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_include: recognise "text/html; parameters" as text/html
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 49616 [Andrey Chernov <ache nagual.pp.ru>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) CGI vars: allow PATH to be set by SetEnv, consistent with LD_LIBRARY_PATH
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 43906 [Nick Kew]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Core: Extra robustness: don't try authz and segfault if authn
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek fails to set r->user. Log bug and return 500 instead.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 42995 [Nick Kew]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) HTTP protocol filter: fix handling of longer chunk extensions
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Update SSL cipher suite and add example for SSLHonorCipherOrder.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Lars Eilebrecht, Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) move AddOutputFilterByType from core to mod_filter. This should
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek fix nasty side-effects that happen when content_type is set
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek more than once in processing a request, and make it fully
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek compatible with dynamic and proxied contents. [Nick Kew]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_log_config: Implement logging for sub second timestamps and
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek request end time. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-SzmekChanges with Apache 2.3.6
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) SECURITY: CVE-2009-3555 (cve.mitre.org)
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mod_ssl: Comprehensive fix of the TLS renegotiation prefix injection
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek attack when compiled against OpenSSL version 0.9.8m or later. Introduces
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the 'SSLInsecureRenegotiation' directive to reopen this vulnerability
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek and offer unsafe legacy renegotiation with clients which do not yet
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek support the new secure renegotiation protocol, RFC 5746.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Joe Orton, and with thanks to the OpenSSL Team]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) SECURITY: CVE-2009-3555 (cve.mitre.org)
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mod_ssl: A partial fix for the TLS renegotiation prefix injection attack
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek by rejecting any client-initiated renegotiations. Forcibly disable
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek keepalive for the connection if there is any buffered data readable. Any
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek configuration which requires renegotiation for per-directory/location
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek access control is still vulnerable, unless using OpenSSL >= 0.9.8l.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Joe Orton, Ruediger Pluem, Hartmut Keil <Hartmut.Keil adnovum.ch>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) SECURITY: CVE-2010-0408 (cve.mitre.org)
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mod_proxy_ajp: Respond with HTTP_BAD_REQUEST when the body is not sent
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek when request headers indicate a request body is incoming; not a case of
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek HTTP_INTERNAL_SERVER_ERROR. [Niku Toivola <niku.toivola sulake.com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) SECURITY: CVE-2010-0425 (cve.mitre.org)
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mod_isapi: Do not unload an isapi .dll module until the request
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek processing is completed, avoiding orphaned callback pointers.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Brett Gervasoni <brettg senseofsecurity.com>, Jeff Trawick]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Filter init functions are now run strictly once per request
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek before handler invocation. The init functions are no longer run
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek for connection filters. PR 49328. [Joe Orton]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Adjust the output filter chain correctly in an internal
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek redirect from a subrequest, preserving filters from the main
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek request as necessary. PR 17629. [Joe Orton]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_cache: Explicitly allow cache implementations to cache a 206 Partial
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Response if they so choose to do so. Previously an attempt to cache a 206
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek was arbitrarily allowed if the response contained an Expires or
3ba3a79df4ae094d1008c04a9af8d1ff970124c4Zbigniew Jędrzejewski-Szmek Cache-Control header, and arbitrarily denied if both headers were missing.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Add microsecond timestamp fractions, process id and thread id
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek to the error log. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) configure: The "most" module set gets build by default. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) configure: Building dynamic modules (DSO) by default. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) configure: Fix broken VPATH build when using included APR.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_session_crypto: Fix configure problem when building
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek with APR 2 and for VPATH builds with included APR.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_session_crypto: API compatibility with APR 2 crypto and
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek APR Util 1.x crypto. [Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) ab: Fix memory leak with -v2 and SSL. PR 49383.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Pavel Kankovsky <peak argo troja mff cuni cz>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Add per-module and per-directory loglevel configuration.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Add some more trace logging.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mod_rewrite: Replace RewriteLog/RewriteLogLevel with trace log levels.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mod_ssl: Replace LogLevelDebugDump with trace log levels.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mod_ssl/mod_proxy*: Adjust loglevels to be less verbose at levels info
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek mod_dumpio: Replace DumpIOLogLevel with trace log levels.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ldap: LDAP caching was suppressed (and ldap-status handler returns
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek title page only) when any mod_ldap directives were used in VirtualHost
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek context. [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_disk_cache: Decline the opportunity to cache if the response is
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek a 206 Partial Content. This stops a reverse proxied partial response
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek from becoming cached, and then being served in subsequent responses.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_deflate: avoid the risk of forwarding data before headers are set.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 49369 [Matthew Steele <mdsteele google.com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_authnz_ldap: Ensure nested groups are checked when the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek top-level group doesn't have any direct non-group members
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek of attributes in AuthLDAPGroupAttribute. [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_authnz_ldap: Search or Comparison during authorization phase
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek can use the credentials from the authentication phase
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek (AuthLDAPSearchAsUSer,AuthLDAPCompareAsUser).
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 48340 [Domenico Rotiroti, Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_authnz_ldap: Allow the initial DN search during authentication
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek to use the HTTP username/pass instead of an anonymous or hard-coded
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek LDAP id (AuthLDAPInitialBindAsUser, AuthLDAPInitialBindPattern).
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_authnz_ldap: Publish requested LDAP data with an AUTHORIZE_ prefix
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek when this module is used for authorization. See AuthLDAPAuthorizePrefix.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 45584 [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) apxs -q: Stop filtering out ':' characters from the reported values.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 45343. [Bill Cole]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) prefork MPM: Work around possible crashes on child exit in APR reslist
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek cleanup code. PR 43857. [Tom Donovan]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) ab: fix number of requests sent by ab when keepalive is enabled. PR 48497.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Bryn Dole <dole blekko.com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Log an error for failures to read a chunk-size, and return 408 instead of
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek 413 when this is due to a read timeout. This change also fixes some cases
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek of two error documents being sent in the response for the same scenario.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Eric Covener] PR49167
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy_balancer: Add new directive BalancerNonce to allow admin
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek to control/set the nonce used in the balancer-manager application.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy_connect: Support port ranges in AllowConnect. PR 23673.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Proxy balancer: support setting error status according to HTTP response
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek code from a backend. PR 48939. [Daniel Ruggeri <DRuggeri primary.net>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) htcacheclean: Introduce the ability to clean specific URLs from the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek cache, if provided as an optional parameter on the command line.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Graham Leggett]
3ba3a79df4ae094d1008c04a9af8d1ff970124c4Zbigniew Jędrzejewski-Szmek *) core: Introduce the IncludeStrict directive, which explicitly fails
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek server startup if no files or directories match a wildcard path.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) htcacheclean: Report additional statistics about entries deleted.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 48944. [Mark Drayton mark markdrayton.info]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Introduce SSLFIPS directive to support OpenSSL FIPS_mode; permits all
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek builds of mod_ssl to use 'SSLFIPS off' for portability, but the proper
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek build of openssl is required for 'SSLFIPS on'. PR 46270.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Dr Stephen Henson <steve openssl.org>, William Rowe]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy_http: Log the port of the remote server in various messages.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 48812. [Igor Galić <i galic brainsware org>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_reqtimeout: Do not wrongly enforce timeouts for mod_proxy's backend
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek connections and other protocol handlers (like mod_ftp). [Stefan Fritsch]
3ba3a79df4ae094d1008c04a9af8d1ff970124c4Zbigniew Jędrzejewski-Szmek *) mod_proxy_ajp: Really regard the operation a success, when the client
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek aborted the connection. In addition adjust the log message if the client
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek aborted the connection. [Ruediger Pluem]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: Add the 'SSLInsecureRenegotiation' directive, which
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek allows insecure renegotiation with clients which do not yet
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek support the secure renegotiation protocol. [Joe Orton]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ssl: Fix a potential I/O hang if a long list of trusted CAs
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek is configured for client cert auth. PR 46952. [Joe Orton]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) core: Only log a 408 if it is no keepalive timeout. PR 39785
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Ruediger Pluem, Mark Montague <markmont umich.edu>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) support/rotatelogs: Add -L option to create a link to the current
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek log file. PR 48761 [<lyndon orthanc.ca>, Dan Poirier]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ldap: Update LDAPTrustedClientCert to consistently be a per-directory
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek setting only, matching most of the documentation and examples.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 46541 [Paul Reder, Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ldap: LDAPTrustedClientCert now accepts CA_DER/CA_BASE64 argument
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek types previously allowed only in LDAPTrustedGlobalCert. [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_negotiation: Preserve query string over multiviews negotiation.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek This buglet was fixed for type maps in 2.2.6, but the same issue
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek affected multiviews and was overlooked.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 33112 [Joergen Thomsen <apache jth.net>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_ldap: Eliminate a potential crash with multiple LDAPTrustedClientCert
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek when some are not password-protected. [Eric Covener]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Fix startup segfault when the Mutex directive is used but no loaded
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek modules use httpd mutexes. PR 48787. [Jeff Trawick]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Proxy: get the headers right in a HEAD request with
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek ProxyErrorOverride, by checking for an overridden error
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek before not after going into a catch-all code path.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 41646. [Nick Kew, Stuart Children]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) support/rotatelogs: Support the simplest log rotation case, log
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek truncation. Useful when the log is being processed in real time
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek using a command like tail. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) support/htcacheclean: Teach it how to write a pid file (modelled on
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek httpd's writing of a pid file) so that it becomes possible to run
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek more than one instance of htcacheclean on the same machine.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Log command line on startup, so there's a record of command line
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek arguments like -f. PR 48752. [Dan Poirier]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Introduce mod_reflector, a handler capable of reflecting POSTed
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek request bodies back within the response through the output filter
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek stack. Can be used to turn an output filter into a web service.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy_http: Make sure that when an ErrorDocument is served
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek from a reverse proxied URL, that the subrequest respects the status
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek of the original request. This brings the behaviour of proxy_handler
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek in line with default_handler. PR 47106. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Support wildcards in both the directory and file components of
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek the path specified by the Include directive. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_proxy, mod_proxy_http: Support remote https proxies
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek by using HTTP CONNECT. PR 19188.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Philippe Dutrueux <lilas evidian.com>, Rainer Jung]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) apxs: Fix -A and -a options to ignore whitespace in httpd.conf
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Philip M. Gollucci]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) worker: Don't report server has reached MaxClients until it has.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek Add message when server gets within MinSpareThreads of MaxClients.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek PR 46996. [Dan Poirier]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_session: Session expiry was being initialised, but not updated
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek on each session save, resulting in timed out sessions when there
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek should not have been. Fixed. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_log_config: Add the R option to log the handler used within the
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek request. [Christian Folini <christian.folini netnea com>]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) mod_include: Allow fine control over the removal of Last-Modified and
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek ETag headers within the INCLUDES filter, making it possible to cache
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek responses if desired. Fix the default value of the SSIAccessEnable
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek directive. [Graham Leggett]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Add new UnDefine directive to undefine a variable. PR 35350.
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek [Stefan Fritsch]
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek *) Make ap_pregsub(), used by AliasMatch and friends, use the same syntax
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek for regex backreferences as mod_rewrite and mod_include: Remove the use
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek of '&' as an alias for '$0' and allow to escape any character with a
798d3a524ea57aaf40cb53858aaa45ec702f012dZbigniew Jędrzejewski-Szmek backslash. PR 48351. [Stefan Fritsch]
dd1eb43ba771d4d56b20b4c93ba3acc59475f642Lennart Poettering *) mod_authnz_ldap: If AuthLDAPCharsetConfig is set, also convert the
[Johannes Müller <joh_m gmx.de>, Stefan Fritsch]
*) SECURITY: CVE-2010-0434 (cve.mitre.org)
[Dodou Wang <wangdong.08 gmail.com>, Ruediger Pluem]
PR 41887 [Jan van den Berg <janvdberg gmail.com>]
PR 48416 [Dmitry Bakshaev <dab18 izhnet.ru>, Nick Kew]
(See util_mutex.h.) Build-time setting DEFAULT_LOCKFILE is no longer
*) SECURITY: CVE-2009-3095 (cve.mitre.org)
[Stefan Fritsch <sf fritsch.de>, Joe Orton]
*) SECURITY: CVE-2009-3094 (cve.mitre.org)
[Stefan Fritsch <sf fritsch.de>, Joe Orton]
instead of substrings. PR 28037. [Dan Franklin <dan dan-franklin.com>,
[Dr Stephen Henson <shenson oss-institute.org>]
PR 47178. [Philipp Hagemeister <oss phihag.de>]
Brian France <brian brianfrance.com>]
modules to avoid segmentation fault. PR 47951. [hirose31 gmail.com]
*) mod_logio/core: Report more accurate byte counts in mod_status if
for the default values of 1024 for LdapCacheEntries/LdapOpCacheEntries.
the request is a CONNECT request. [Bill Zajac <billz consultla.com>]
[Peter Grandi <pg_asf asf.for.sabi.co.uk>, Graham Leggett]
Log 408 errors in access log as was done in Apache 1.3.x.
PR 39785 [Nobutaka Mantani <nobutaka nobutaka.org>,
Stefan Fritsch <sf fritsch.de>, Dan Poirier]
Brian France <brian brianfrance.com>]
Brian France <brian brianfrance.com>]
[Stefan Fritsch <sf sfritsch.de>]
*) mod_session.c: Prevent a segfault when session is added but not
definition. [Stefan Fritsch sf sfritsch.de]
*) Add support for HTTP PUT to ab. [Jeff Barnes <jbarnesweb yahoo.com>]
PR 46971 [evanc nortel.com]
[Stefan Fritsch <sf sfritsch.de>]
for a file is missing. PR 47682 [Peter Poeml <poeml suse.de>]
*) SECURITY: CVE-2009-1890 (cve.mitre.org)
*) SECURITY: CVE-2009-1191 (cve.mitre.org)
by the client. PR 33098 [ Stefan Fritsch <sf sfritsch.de>]
PR 42175 [Jim Radford <radford blackbean.org>]
type. PR 45107. [Michael Ströder <michael stroeder.com>,
PR 44020 [Håkon Stordahl <hakon stordahl.org>]
CGI process. PR 47335 [Kornél Pál <kornelpal gmail.com>]
PR 46942 [Dan Poirier <poirier pobox.com>]
PR 44729 [Sönke Tesch <st kino-fahrplan.de>, Jim Jagielski]
PR 47177 [Carlos Garcia Braschi <cgbraschi gmail.com>]
PR 45082 [Vitaly Polonetsky <m_vitaly topixoft.com>]
[Marko Kevac <mkevac gmail.com>]
as A/UX, Next, and Tandem. [Jeff Trawick]
directory listing. PR 46789 [Dan Poirier <poirier pobox.com>]
of module state across unload/load. [Jeff Trawick]
[Dan Poirier <poirier pobox.com>]
[Geoff Keating <geoffk apple.com>]
with kqueue (BSD/OS X) and excessive CPU with event ports (Solaris).
a media type has not been configured via mime.types, AddType,
[Ryan Phillips <ryan-apache trolocsis.com>]
[<tlhackque yahoo.com>]
*) prefork: Fix child process hang during graceful restart/stop in
*) core/utils: Enhance ap_escape_html API to support escaping non-ASCII chars
PR 45529 [Bob Ionescu <bobsiegen googlemail.com>]
times out before returning status line/headers.
PR 39332 [Masaoki Kobayashi <masaoki techfirm.co.jp>]
[Theo Schlossnagle <jesus omniti.com>, Paul Querna]
modules/proxy/balancers [Jim Jagielski]
privileges and Unix user/group IDs [Nick Kew]
logic replicate 2.2.x authz logic, and replace <Satisfy*>, Reject,
*) unixd: turn existing code into a module, and turn the set user/group
Suggested By André Warnier <aw ice-sa.com> [Eric Covener]
*) mod_ssl: Send Content-Type application/ocsp-request for POST requests to
OSCP responders. PR 46014 [Dr Stephen Henson <steve openssl.org>]
*) New module mod_sed: filter Request/Response bodies through sed
null value. [David Shane Holden <dpejesh apache.org>]
both inside and outside the location/directory sections, as
form request with the type of application/x-www-form-urlencoded.
*) mod_authz_dbd: When redirecting after successful login/logout per
PR 44560 [Anders Kaseorg <anders kaseorg.com>]
mod_cache et.al. to trap the results of the redirect.
*) ApacheMonitor.exe: Introduce --kill argument for use by the
*) mod_ldap, mod_authnz_ldap: Add support for nested groups (i.e. the ability
[David M. Lee <dmlee crossroads.com>]
[Niklas Edmundsson <nikke acc.umu.se>]
[Niklas Edmundsson <nikke acc.umu.se>]
[Markus Schiegl <ms schiegl.com>]
*) Remove incorrect comments from scoreboard.h regarding conditional
[Chris Darroch <chrisd pearsoncmg.com>]
in ap_init_scoreboard(). [Chris Darroch <chrisd pearsoncmg.com>]
[Chris Darroch <chrisd pearsoncmg.com>]
and 'Reject' to mod_authz_core. The new directives introduce 'AND/OR'
*) mod_authz_dbd: SQL authz with Login/Session support [Nick Kew]
Apache 2.2.xx tree as documented, and except as noted, below.]
Changes with Apache 2.2.x and later:
Changes with Apache 2.0.x and later: