pkgsrc - [no description]

Age	Commit message (Collapse)	Author	Files	Lines
2018-09-24	apache24: updated to 2.4.35	adam	1	-3/+3
	Changes with Apache 2.4.35 ) http: Enforce consistently no response body with both 204 and 304 statuses. ) mod_status: Cumulate CPU time of exited child processes in the "cu" and "cs" values. Add CPU time of the parent process to the "c" and "s" values. ) mod_proxy: Improve the balancer member data shown in mod_status when "ProxyStatus" is "On": add "busy" count and show byte counts in auto mode always in units of kilobytes. ) mod_status: Add cumulated response duration time in milliseconds. ) mod_status: Complete the data shown for async MPMs in "auto" mode. Added number of processes, number of stopping processes and number of busy and idle workers. ) mod_ratelimit: Don't interfere with "chunked" encoding, fixing regression introduced in 2.4.34. ) mod_proxy: Remove load order and link dependency between mod_lbmethod_ modules and mod_proxy. ) Allow the argument to <IfFile>, <IfDefine>, <IfSection>, <IfDirective>, and <IfModule> to be quoted. This is primarily for the benefit of <IfFile>. ) mod_watchdog: Correct some log messages. ) mod_md: When the last domain name from an MD is moved to another one, that now empty MD gets moved to the store archive. ) mod_ssl: Fix merging of SSLOCSPOverrideResponder. *) mod_proxy_balancer: Restore compatibility with APR 1.4.
2018-07-19	apache24: updated to 2.4.34	adam	1	-9/+9
	Apache 2.4.34 ) SECURITY: CVE-2018-8011 (cve.mitre.org) mod_md: DoS via Coredumps on specially crafted requests ) SECURITY: CVE-2018-1333 (cve.mitre.org) mod_http2: DoS for HTTP/2 connections by specially crafted requests ) Introduce zh-cn and zh-tw (simplified and traditional Chinese) error document translations. ) event: avoid possible race conditions with modules on the child pool. ) mod_proxy: Fix a corner case where the ProxyPassReverseCookieDomain or ProxyPassReverseCookiePath directive could fail to update correctly 'domain=' or 'path=' in the 'Set-Cookie' header. ) mod_ratelimit: fix behavior when proxing content. ) core: Re-allow '_' (underscore) in hostnames. ) mod_authz_core: If several parameters are used in a AuthzProviderAlias directive, if these parameters are not enclosed in quotation mark, only the first one is handled. The other ones are silently ignored. Add a message to warn about such a spurious configuration. ) mod_md: improvements and bugfixes - MDNotifyCmd now takes additional parameter that are passed on to the called command. - ACME challenges have better checks for interference with other modules - ACME challenges are only handled for domains managed by the module, allowing other ACME clients to operate for other domains in the server. - better libressl integration ) mod_proxy_wstunnel: Add default schema ports for 'ws' and 'wss'. ) logging: Some early logging-related startup messages could be lost when using syslog for the global ErrorLog. ) mod_cache: Handle case of an invalid Expires header value RFC compliant like the case of an Expires time in the past: allow to overwrite the non-caching decision using CacheStoreExpired and respect Cache-Control "max-age" and "s-maxage". ) mod_xml2enc: Fix forwarding of error metadata/responses. ) mod_proxy_http: Fix response header thrown away after the previous one was considered too large and truncated. ) core: Add and handle AP_GETLINE_NOSPC_EOL flag for ap_getline() family of functions to consume the end of line when the buffer is exhausted. ) mod_proxy_http: Add new worker parameter 'responsefieldsize' to allow maximum HTTP response header size to be increased past 8192 bytes. ) mod_ssl: Extend SSLOCSPEnable with mode 'leaf' that only checks the leaf of a certificate chain. ) http: Fix small memory leak per request when handling persistent connections. ) mod_proxy_html: Fix variable interpolation and memory allocation failure in ProxyHTMLURLMap. ) mod_remoteip: Fix RemoteIP{Trusted,Internal}ProxyList loading broken by 2.4.30. ) mod_remoteip: When overriding the useragent address from X-Forwarded-For, zero out what had been initialized as the connection-level port. ) core: In ONE_PROCESS/debug mode, cleanup everything when exiting. ) mod_proxy_balancer: Add hot spare member type and corresponding flag (R). Hot spare members are used as drop-in replacements for unusable workers in the same load balancer set. This differs from hot standbys which are only used when all workers in a set are unusable. ) suexec: Add --enable-suexec-capabilites support on Linux, to use setuid/setgid capability bits rather than a setuid root binary. ) suexec: Add support for logging to syslog as an alternative to logging to a file; use --without-suexec-logfile --with-suexec-syslog. ) mod_ssl: Restore 2.4.29 behaviour in SSL vhost merging/enabling which broke some rare but previously-working configs. ) core, log: improve sanity checks for the ErrorLog's syslog config, and explicitly allow only lowercase 'syslog' settings. ) mod_http2: accurate reporting of h2 data input/output per request via mod_logio. Fixes an issue where output sizes where counted n-times on reused slave connections. ) mod_http2: Fix unnecessary timeout waits in case streams are aborted. ) mod_http2: restoring the v1.10.16 keepalive timeout behaviour of mod_http2. ) mod_proxy: Do not restrict the maximum pool size for backend connections any longer by the maximum number of threads per process and use a better default if mod_http2 is loaded. ) mod_slotmem_shm: Add generation number to shm filename to fix races with graceful restarts. ) core: Preserve the original HTTP request method in the '%<m' LogFormat when an path-based ErrorDocument is used. ) mod_remoteip: make proxy-protocol work on slave connections, e.g. in HTTP/2 requests. ) mod_ssl: Fix merging of proxy SSL context outside <Proxy> sections, regression introduced in 2.4.30. ) mod_md: Fix compilation with OpenSSL before version 1.0.2. ) mod_dumpio: do nothing below log level TRACE7. ) mod_remoteip: Restore compatibility with APR 1.4 (apr_sockaddr_is_wildcard). ) core: On ECBDIC platforms, some errors related to oversized headers may be misreported or be logged as ASCII escapes. ) mod_ssl: Fix cmake-based build. *) core: Add <IfFile>, <IfDirective> and <IfSection> conditional section containers.
2012-04-13	Import apache-2.4.1 as www/apache24.	ryoon	1	-0/+146
	The Apache HTTP Server Project is an effort to develop and maintain an open-source HTTP server for various modern desktop and server operating systems, such as UNIX and Windows NT. The goal of this project is to provide a secure, efficient and extensible server which provides HTTP services in sync with the current HTTP standards. This package tracks 2.4.x release.