headers
mjc | 3 Jul 2006 12:36
Picon
Favicon

svn commit: r418737 - in /httpd/site/trunk: docs/security/vulnerabilities_22.html xdocs/security/vulnerabilities-httpd.xml xdocs/security/vulnerabilities_22.xml

Author: mjc
Date: Mon Jul  3 03:36:30 2006
New Revision: 418737

URL: http://svn.apache.org/viewvc?rev=418737&view=rev
Log:
Noticed this one was missing from the db earlier whilst updating FC5 audit

Modified:
    httpd/site/trunk/docs/security/vulnerabilities_22.html
    httpd/site/trunk/xdocs/security/vulnerabilities-httpd.xml
    httpd/site/trunk/xdocs/security/vulnerabilities_22.xml

Modified: httpd/site/trunk/docs/security/vulnerabilities_22.html
URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/security/vulnerabilities_22.html?rev=418737&r1=418736&r2=418737&view=diff
==============================================================================
--- httpd/site/trunk/docs/security/vulnerabilities_22.html (original)
+++ httpd/site/trunk/docs/security/vulnerabilities_22.html Mon Jul  3 03:36:30 2006
 <at>  <at>  -87,6 +87,27  <at>  <at> 
   <blockquote>
 <dl>
 <dd>
+<b>low: </b>
+<b>
+<name name="CVE-2005-3357">mod_ssl access control DoS</name>
+</b>
+<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3357">CVE-2005-3357</a>
+<p>
+A NULL pointer dereference flaw in mod_ssl was discovered affecting server
+configurations where an SSL virtual host is configured with access control
(Continue reading)

Permalink | Reply | 0 comments |
headers
rpluem | 4 Jul 2006 00:40
Picon
Favicon

svn commit: r418866 - /httpd/site/trunk/docs/doap.rdf

Author: rpluem
Date: Mon Jul  3 15:40:03 2006
New Revision: 418866

URL: http://svn.apache.org/viewvc?rev=418866&view=rev
Log:
* Reflect the latest versions of 1.3.x and 2.0.x

Modified:
    httpd/site/trunk/docs/doap.rdf

Modified: httpd/site/trunk/docs/doap.rdf
URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/doap.rdf?rev=418866&r1=418865&r2=418866&view=diff
==============================================================================
--- httpd/site/trunk/docs/doap.rdf (original)
+++ httpd/site/trunk/docs/doap.rdf Mon Jul  3 15:40:03 2006
 <at>  <at>  -38,15 +38,15  <at>  <at> 
     <release>
       <Version>
         <name>Latest 1.3 Version</name>
-        <created>2005-10-18</created>
-        <revision>1.3.34</revision>
+        <created>2006-05-17</created>
+        <revision>1.3.36</revision>
       </Version>
     </release>
     <release>
       <Version>
         <name>Latest 2.0 Version</name>
-        <created>2005-10-09</created>
(Continue reading)

Permalink | Reply | 0 comments |
headers
wrowe | 5 Jul 2006 12:19
Picon
Favicon

svn commit: r419202 [3/3] - in /httpd/httpd/branches/2.0.x: ./ modules/aaa/ modules/arch/win32/ modules/cache/ modules/dav/fs/ modules/dav/main/ modules/echo/ modules/experimental/ modules/filters/ modules/generators/ modules/http/ modules/loggers/ mod...

Modified: httpd/httpd/branches/2.0.x/support/htdbm.dsp
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/support/htdbm.dsp?rev=419202&r1=419201&r2=419202&view=diff
==============================================================================
--- httpd/httpd/branches/2.0.x/support/htdbm.dsp (original)
+++ httpd/httpd/branches/2.0.x/support/htdbm.dsp Wed Jul  5 03:18:58 2006
 <at>  <at>  -49,8 +49,8  <at>  <at> 
 # ADD BASE BSC32 /nologo
 # ADD BSC32 /nologo
 LINK32=link.exe
-# ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib /nologo /subsystem:console /machine:I386
-# ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib /nologo /subsystem:console /debug
/machine:I386 /opt:ref
+# ADD BASE LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib /nologo /subsystem:console
+# ADD LINK32 kernel32.lib advapi32.lib wsock32.lib ws2_32.lib /nologo /subsystem:console /debug /opt:ref

 !ELSEIF  "$(CFG)" == "htdbm - Win32 Debug"

 <at>  <at>  -65,16 +65,16  <at>  <at> 
 # PROP Intermediate_Dir "Debug"
 # PROP Ignore_Export_Lib 0
 # PROP Target_Dir ""
-# ADD BASE CPP /nologo /MDd /W3 /GX /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /D
"APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c
-# ADD CPP /nologo /MDd /W3 /GX /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D
"_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC"
/Fd"Debug/htdbm_src" /FD /c
+# ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /D
"APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC" /FD /c
+# ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../srclib/apr/include" /I "../srclib/apr-util/include" /D
"_DEBUG" /D "WIN32" /D "_CONSOLE" /D "APR_DECLARE_STATIC" /D "APU_DECLARE_STATIC"
(Continue reading)

Permalink | Reply | 0 comments |
headers
wrowe | 5 Jul 2006 05:04
Picon
Favicon

svn commit: r419142 - /httpd/httpd/branches/2.2.x/STATUS

Author: wrowe
Date: Tue Jul  4 20:04:55 2006
New Revision: 419142

URL: http://svn.apache.org/viewvc?rev=419142&view=rev
Log:

  Some feedback/votes

Modified:
    httpd/httpd/branches/2.2.x/STATUS

Modified: httpd/httpd/branches/2.2.x/STATUS
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/STATUS?rev=419142&r1=419141&r2=419142&view=diff
==============================================================================
--- httpd/httpd/branches/2.2.x/STATUS (original)
+++ httpd/httpd/branches/2.2.x/STATUS Tue Jul  4 20:04:55 2006
 <at>  <at>  -104,8 +104,6  <at>  <at> 
           Trunk version works
       +1: rpluem, jim, pquerna

-PATCHES PROPOSED TO BACKPORT FROM TRUNK:
-
     * Add optional 'scheme://' part to ServerName directive for cases
       where httpd runs behind an external SSL processor and has to
       learn from its configuration how to generate correct
 <at>  <at>  -114,7 +112,9  <at>  <at> 
       http://people.apache.org/~sctemme/servername_22x.patch
       Documentation:
       http://svn.apache.org/viewcvs.cgi?diff_format=h&view=rev&rev=406697
(Continue reading)

Permalink | Reply | 0 comments |
headers
wrowe | 5 Jul 2006 04:37
Picon
Favicon

svn commit: r419140 - /httpd/httpd/branches/2.2.x/STATUS

Author: wrowe
Date: Tue Jul  4 19:37:44 2006
New Revision: 419140

URL: http://svn.apache.org/viewvc?rev=419140&view=rev
Log:

  Remove an invalid backport proposal.  You must cite source code
  (in the form of a file or patch) which actually compiles and runs
  as submitted.

Modified:
    httpd/httpd/branches/2.2.x/STATUS

Modified: httpd/httpd/branches/2.2.x/STATUS
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/STATUS?rev=419140&r1=419139&r2=419140&view=diff
==============================================================================
--- httpd/httpd/branches/2.2.x/STATUS (original)
+++ httpd/httpd/branches/2.2.x/STATUS Tue Jul  4 19:37:44 2006
 <at>  <at>  -116,12 +116,6  <at>  <at> 
       http://svn.apache.org/viewcvs.cgi?diff_format=h&view=rev&rev=406697
       +1 sctemme, rpluem

-    * Backport mod_authz_dbd (it's had some testing now)
-      http://svn.apache.org/viewcvs.cgi/httpd/httpd/trunk/modules/aaa/mod_authz_dbd.c
-      +1 niq
-      -1 bnicholes - The authorization refactoring that was done is for 2.3 and above.
-                     This can not be backported to 2.2.
-
     * Fix dbd merge_config function to support prepared statements
(Continue reading)

Permalink | Reply | 0 comments |
headers
wrowe | 5 Jul 2006 12:19
Picon
Favicon

svn commit: r419202 [1/3] - in /httpd/httpd/branches/2.0.x: ./ modules/aaa/ modules/arch/win32/ modules/cache/ modules/dav/fs/ modules/dav/main/ modules/echo/ modules/experimental/ modules/filters/ modules/generators/ modules/http/ modules/loggers/ mod...

Author: wrowe
Date: Wed Jul  5 03:18:58 2006
New Revision: 419202

URL: http://svn.apache.org/viewvc?rev=419202&view=rev
Log:

  Replace /GX compile flag which was always an alias of /EHsc
  (/GX is deprecated).  Drop /machine link flag which was always
  implicit, and MS has moved from different /machine flags twords
  using alternate linker binaries.  (And of course, link is a bit
  late to choose machine architecture anyways, if the user hadn't
  used the correct compile flags.)

Backports: 395419, 397407

Modified:
    httpd/httpd/branches/2.0.x/Apache.dsp
    httpd/httpd/branches/2.0.x/libhttpd.dsp
    httpd/httpd/branches/2.0.x/modules/aaa/mod_access.dsp
    httpd/httpd/branches/2.0.x/modules/aaa/mod_auth.dsp
    httpd/httpd/branches/2.0.x/modules/aaa/mod_auth_anon.dsp
    httpd/httpd/branches/2.0.x/modules/aaa/mod_auth_dbm.dsp
    httpd/httpd/branches/2.0.x/modules/aaa/mod_auth_digest.dsp
    httpd/httpd/branches/2.0.x/modules/arch/win32/mod_isapi.dsp
    httpd/httpd/branches/2.0.x/modules/cache/mod_file_cache.dsp
    httpd/httpd/branches/2.0.x/modules/dav/fs/mod_dav_fs.dsp
    httpd/httpd/branches/2.0.x/modules/dav/main/mod_dav.dsp
    httpd/httpd/branches/2.0.x/modules/echo/mod_echo.dsp
    httpd/httpd/branches/2.0.x/modules/experimental/mod_auth_ldap.dsp
(Continue reading)

Permalink | Reply | 0 comments |
headers
wrowe | 5 Jul 2006 12:19
Picon
Favicon

svn commit: r419202 [2/3] - in /httpd/httpd/branches/2.0.x: ./ modules/aaa/ modules/arch/win32/ modules/cache/ modules/dav/fs/ modules/dav/main/ modules/echo/ modules/experimental/ modules/filters/ modules/generators/ modules/http/ modules/loggers/ mod...

Modified: httpd/httpd/branches/2.0.x/modules/loggers/mod_logio.dsp
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/modules/loggers/mod_logio.dsp?rev=419202&r1=419201&r2=419202&view=diff
==============================================================================
--- httpd/httpd/branches/2.0.x/modules/loggers/mod_logio.dsp (original)
+++ httpd/httpd/branches/2.0.x/modules/loggers/mod_logio.dsp Wed Jul  5 03:18:58 2006
 <at>  <at>  -52,8 +52,8  <at>  <at> 
 # ADD BASE BSC32 /nologo
 # ADD BSC32 /nologo
 LINK32=link.exe
-# ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /machine:I386 /out:"Release/mod_logio.so" /base: <at> ..\..\os\win32\BaseAddr.ref,mod_logio.so
-# ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /machine:I386 /out:"Release/mod_logio.so" /base: <at> ..\..\os\win32\BaseAddr.ref,mod_logio.so /opt:ref
+# ADD BASE LINK32 kernel32.lib /nologo /subsystem:windows /dll /out:"Release/mod_logio.so" /base: <at> ..\..\os\win32\BaseAddr.ref,mod_logio.so
+# ADD LINK32 kernel32.lib /nologo /subsystem:windows /dll /incremental:no /debug /out:"Release/mod_logio.so" /base: <at> ..\..\os\win32\BaseAddr.ref,mod_logio.so /opt:ref
 
 !ELSEIF  "$(CFG)" == "mod_logio - Win32 Debug"
 
 <at>  <at>  -68,8 +68,8  <at>  <at> 
 # PROP Intermediate_Dir "Debug"
 # PROP Ignore_Export_Lib 0
 # PROP Target_Dir ""
-# ADD BASE CPP /nologo /MDd /W3 /GX /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c
-# ADD CPP /nologo /MDd /W3 /GX /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_logio_src" /FD /c
+# ADD BASE CPP /nologo /MDd /W3 /EHsc /Zi /Od /D "WIN32" /D "_DEBUG" /D "_WINDOWS" /FD /c
+# ADD CPP /nologo /MDd /W3 /EHsc /Zi /Od /I "../../include" /I "../../srclib/apr/include" /I "../../srclib/apr-util/include" /D "_DEBUG" /D "WIN32" /D "_WINDOWS" /Fd"Debug\mod_logio_src" /FD /c
 # ADD BASE MTL /nologo /D "_DEBUG" /win32
 # ADD MTL /nologo /D "_DEBUG" /mktyplib203 /win32
 # ADD BASE RSC /l 0x409 /d "_DEBUG"
 <at>  <at>  -78,8 +78,8  <at>  <at> 
 # ADD BASE BSC32 /nologo
 # ADD BSC32 /nologo
(Continue reading)

Permalink | Reply | 0 comments |
headers
wrowe | 5 Jul 2006 05:15
Picon
Favicon

svn commit: r419144 - /httpd/httpd/branches/2.2.x/STATUS

Author: wrowe
Date: Tue Jul  4 20:15:42 2006
New Revision: 419144

URL: http://svn.apache.org/viewvc?rev=419144&view=rev
Log:

  Matt's proposed this be backported, choose the straight-line approach.

Modified:
    httpd/httpd/branches/2.2.x/STATUS

Modified: httpd/httpd/branches/2.2.x/STATUS
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/STATUS?rev=419144&r1=419143&r2=419144&view=diff
==============================================================================
--- httpd/httpd/branches/2.2.x/STATUS (original)
+++ httpd/httpd/branches/2.2.x/STATUS Tue Jul  4 20:15:42 2006
 <at>  <at>  -116,6 +116,13  <at>  <at> 

 PATCHES PROPOSED TO BACKPORT FROM TRUNK:

+    * mod_isapi: Simply backport the host of fixes for compilation on unix,
+      PR#'s 15993 29098 30022 16637 30033 28089
+      by pushing to trunk/ rev 416293 of modules/arch/win32/mod_isapi.[ch]
+      which compiles without changes.  Source + Binary posted at
+        http://people.apache.org/~wrowe/mod_isapi-416293.zip
+      +1 wrowe 
+
     * Fix dbd merge_config function to support prepared statements
       PR#39386
(Continue reading)

Permalink | Reply | 0 comments |
headers
wrowe | 5 Jul 2006 05:15
Picon
Favicon

svn commit: r419145 - /httpd/httpd/branches/2.0.x/STATUS

Author: wrowe
Date: Tue Jul  4 20:15:55 2006
New Revision: 419145

URL: http://svn.apache.org/viewvc?rev=419145&view=rev
Log:

  Matt's proposed this be backported, choose the straight-line approach.

Modified:
    httpd/httpd/branches/2.0.x/STATUS

Modified: httpd/httpd/branches/2.0.x/STATUS
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/STATUS?rev=419145&r1=419144&r2=419145&view=diff
==============================================================================
--- httpd/httpd/branches/2.0.x/STATUS (original)
+++ httpd/httpd/branches/2.0.x/STATUS Tue Jul  4 20:15:55 2006
 <at>  <at>  -122,12 +122,12  <at>  <at> 
         Patch is at
         http://people.apache.org/~colm/httpd-2.0-reverse-proxy-cookie.patch
         and is in production with Clients.
-       +1: niq
-       +1: wrowe; looks good, no way to apply this without a minor bump
+       +1: niq, wrowe
+         wrowe adds; looks good, no way to apply this without a minor bump

-    *) Backport 102870; PR 17217; stop linking OpenSSL to support/*
-       binaries (especially when compiled --with-static-support (!))
-       and fix mod_ssl.so when compiled against .a openssl archives.
+    *) Backport 102870; PR 17217; stop linking OpenSSL .so's to support/*
(Continue reading)

Permalink | Reply | 0 comments |
headers
rpluem | 5 Jul 2006 21:56
Picon
Favicon

svn commit: r419322 - /httpd/httpd/branches/2.2.x/STATUS

Author: rpluem
Date: Wed Jul  5 12:56:16 2006
New Revision: 419322

URL: http://svn.apache.org/viewvc?rev=419322&view=rev
Log:
* Add comment

Modified:
    httpd/httpd/branches/2.2.x/STATUS

Modified: httpd/httpd/branches/2.2.x/STATUS
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/STATUS?rev=419322&r1=419321&r2=419322&view=diff
==============================================================================
--- httpd/httpd/branches/2.2.x/STATUS (original)
+++ httpd/httpd/branches/2.2.x/STATUS Wed Jul  5 12:56:16 2006
 <at>  <at>  -158,3 +158,8  <at>  <at> 
           inquired of the proper mechanism or composed the appropriate
           patch to finish an incomplete packet and resume encoding or
           this entirely impossible in the current scheme of things?
+      rpluem: I discussed this with Justin at the ApacheCon and we discussed
+              ways how to fix this and take care about the flush buckets.
+              I am willing to propose patches, but due to personal time
+              constraints they will not show up before the second half of July.
+
Permalink | Reply | 0 comments |

Gmane