CHANGES revision a9383516f09ba627694a14d533f55628426f5418
08cb74ca432a8c24e39f17dedce527e6a47b8001jerenkrantz -*- coding: utf-8 -*-
08cb74ca432a8c24e39f17dedce527e6a47b8001jerenkrantzChanges with Apache 2.5.0
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) mod_ldap: Treat the "server unavailable" condition as a transient
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes error with all LDAP SDKs. [Filip Valder <filip.valder vsb.cz>]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) mod_ssl: Add support for TLS-SRP (Secure Remote Password key exchange
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes for TLS, RFC 5054). PR 51075. [Quinn Slack <sqs cs stanford edu>,
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes Christophe Renou, Peter Sylvester]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) htdbm, htpasswd: Don't crash if crypt() fails (e.g. with FIPS enabled).
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes [Paul Wouters <pwouters redhat.com>, Joe Orton]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) mod_ssl: Add new directive SSLCompression to disable TLS-level
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes compression. PR 53219. [Björn Jacke <bjoern j3e de>, Stefan Fritsch]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) core: Make ap_regcomp() return AP_REG_ESPACE if out of memory. Make
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes ap_pregcomp() abort if out of memory. This raises the minimum PCRE
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes requirement to version 6.0. PR 53284. [Stefan Fritsch]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) apxs: Use LDFLAGS from config_vars.mk in addition to CFLAGS and CPPFLAGS.
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes [Stefan Fritsch]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) mpm_event: Fix handling of MaxConnectionsPerChild. [Stefan Fritsch]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) suexec: Add --enable-suexec-capabilites support on Linux, to use
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes setuid/setgid capability bits rather than a setuid root binary.
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) suexec: Add support for logging to syslog as an alternative to logging
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes to a file; configure --without-suexec-logfile --with-suexec-syslog.
5c0419d51818eb02045cf923a9fe456127a44c60wrowe *) mod_proxy_ajp: Reduce memory usage in case of many keep-alive requests on
5c0419d51818eb02045cf923a9fe456127a44c60wrowe one connection. PR 52275. [Naohiro Ooiwa <naohiro ooiwa miraclelinux com>]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) mod_proxy: Use the the same hostname for SNI as for the HTTP request when
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes forwarding to SSL backends. PR 53134.
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes [Michael Weiser <michael weiser.dinsnail.net>, Ruediger Pluem]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) mod_ssl: Add support for TLS Next Protocol Negotiation. PR 52210.
d266c3777146d36a4c23c17aad6f153aebea1bf4jorton [Matthew Steele <mdsteele google.com>]
d266c3777146d36a4c23c17aad6f153aebea1bf4jorton *) mod_so: If a filename without slashes is specified for LoadFile or
d266c3777146d36a4c23c17aad6f153aebea1bf4jorton LoadModule and the file cannot be found in the server root directory,
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes try to use the standard dlopen() search path. [Stefan Fritsch]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) various modules, rotatelogs: Replace use of apr_file_write() with
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes apr_file_write_full() to prevent incomplete writes. PR 53131.
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes [Nicolas Viennot <apache viennot biz>, Stefan Fritsch]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) core: Fix segfault in logging if r->useragent_addr or c->client_addr is
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes unset. [Stefan Fritsch]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes be compiled by the build compiler instead of the host compiler.
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes Also set CC_FOR_BUILD to 'cc' when cross-compilation is detected.
b6c405caec8a41b770da7466bf8c8737ef1472d7bnicholes PR 51257. [Guenter Knauf]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) mod_ssl: Send the error message for speaking http to an https port using
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes HTTP/1.0 instead of HTTP/0.9, and omit the link that may be wrong when
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes using SNI. PR 50823. [Stefan Fritsch]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) mod_authz_core: Fix parsing of Require arguments in <AuthzProviderAlias>.
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes PR 53048. [Stefan Fritsch]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) core: Fix error handling in ap_scan_script_header_err_brigade() if there
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes is no EOS bucket in the brigade. Fixes segfault with mod_proxy_fcgi.
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes PR 48272. [Stefan Fritsch]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) mod_proxy_fcgi: If there is an error reading the headers from the
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes backend, send an error to the client. PR 52879. [Stefan Fritsch]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) mod_rewrite: Fix RewriteCond integer checks to be parsed correctly.
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes PR 53023. [Axel Reinhold <apache freakout.de>, André Malo]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) mod_proxy: Add the forcerecovery balancer parameter that determines if
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes recovery for balancer workers is enforced. [Ruediger Pluem]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) mod_proxy: Correctly set up reverse proxy worker. PR 52935.
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes [Petter Berntsen <petterb gmail.com>]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) core: Add filesystem paths to access denied / access failed messages
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes AH00035 and AH00036. [Eric Covener]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) Fix MPM DSO load failure on AIX. [Jeff Trawick]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) core: Add the port number to the vhost's name in the scoreboard.
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes [Stefan Fritsch]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) mpm_event: Don't do a blocking write when starting a lingering close
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes from the listener thread. PR 52229. [Stefan Fritsch]
0568280364eb026393be492ebc732795c4934643jorton *) core: In maintainer mode, replace apr_palloc with a version that
0568280364eb026393be492ebc732795c4934643jorton initializes the allocated memory with non-zero values, except if
0568280364eb026393be492ebc732795c4934643jorton AP_DEBUG_NO_ALLOC_POISON is defined. [Stefan Fritsch]
0568280364eb026393be492ebc732795c4934643jorton *) mod_log_config: Check during config test that directories for access logs
0568280364eb026393be492ebc732795c4934643jorton exist. PR 29941. [Stefan Fritsch]
0568280364eb026393be492ebc732795c4934643jorton *) mod_authnz_ldap: Don't try a potentially expensive nested groups
0568280364eb026393be492ebc732795c4934643jorton search before exhausting all AuthLDAPGroupAttribute checks on the
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes current group. PR52464 [Eric Covener]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) mod_policy: Add a new testing module to help server administrators
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes enforce a configurable level of protocol compliance on their
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes servers and application servers behind theirs. [Graham Leggett]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) mod_firehose: Add a new debugging module able to record traffic
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes passing through the server in such a way that connections and/or
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes requests be reconstructed and replayed. [Graham Leggett]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) Event MPM: Reduce locking by using a lock free circular queue.
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) mod_noloris
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) Simple MPM
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes [Apache 2.5.0-dev includes those bug fixes and changes with the
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes Apache 2.4.xx tree as documented below, except as noted.]
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholesChanges with Apache 2.4.x and later:
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholes *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/CHANGES?view=markup
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholesChanges with Apache 2.2.x and later:
482f676c6c19b1c5bb5cca04dad11509c1da3a4cwrowe *) http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?view=markup
d5b12fe8ae917e654a33247fd4e59dc9e75170aebnicholesChanges with Apache 2.0.x and later: