Patch |
File delta |
Description |
fhs_compliance.patch | (download) |
configure |
6 3 + 3 - 0 !
configure.in |
6 3 + 3 - 0 !
include/ap_config_layout.h.in |
1 1 + 0 - 0 !
include/httpd.h |
2 1 + 1 - 0 !
4 files changed, 8 insertions(+), 7 deletions(-) |
fix up fhs file locations for apache2 droppings.
|
no_LD_LIBRARY_PATH.patch | (download) |
support/envvars-std.in |
7 0 + 7 - 0 !
1 file changed, 7 deletions(-) |
remove ld_library_path from envvars-std
|
suexec CVE 2007 1742.patch | (download) |
support/suexec.c |
17 14 + 3 - 0 !
1 file changed, 14 insertions(+), 3 deletions(-) |
fix race condition with chdir
Fix /var/www* being accepted as docroot instead of /var/www/*
(the same for public_html* instead of public_html/* )
|
customize_apxs.patch | (download) |
support/apxs.in |
137 33 + 104 - 0 !
1 file changed, 33 insertions(+), 104 deletions(-) |
adapt apxs to debian specific changes
- Make apxs2 use a2enmod and /etc/apache2/mods-available
- Make libtool happier
- Use LDFLAGS from config_vars.mk, allow to override them
|
build_suexec custom.patch | (download) |
Makefile.in |
10 6 + 4 - 0 !
support/Makefile.in |
12 8 + 4 - 0 !
2 files changed, 14 insertions(+), 8 deletions(-) |
add suexec-custom to the build system
|
pull_upstream_2.4.x_branch.patch | (download) |
CHANGES |
82 73 + 9 - 0 !
CMakeLists.txt |
6 3 + 3 - 0 !
README.platforms |
29 4 + 25 - 0 !
build/NWGNUtail.inc |
3 2 + 1 - 0 !
docs/man/rotatelogs.8 |
20 10 + 10 - 0 !
docs/man/tr/rotatelogs.8 |
20 10 + 10 - 0 !
docs/manual/convenience.map |
8 7 + 1 - 0 !
docs/manual/developer/modguide.html.en |
2 1 + 1 - 0 !
docs/manual/expr.html.en |
6 3 + 3 - 0 !
docs/manual/expr.html.fr |
12 9 + 3 - 0 !
docs/manual/logs.html.en |
2 1 + 1 - 0 !
docs/manual/logs.html.fr |
2 1 + 1 - 0 !
docs/manual/logs.html.tr.utf8 |
2 1 + 1 - 0 !
docs/manual/mod/core.html.de |
14 14 + 0 - 0 !
docs/manual/mod/core.html.en |
23 21 + 2 - 0 !
docs/manual/mod/core.html.es |
14 14 + 0 - 0 !
docs/manual/mod/core.html.fr |
31 27 + 4 - 0 !
docs/manual/mod/core.html.ja.utf8 |
14 14 + 0 - 0 !
docs/manual/mod/core.html.tr.utf8 |
21 21 + 0 - 0 !
docs/manual/mod/directives.html.de |
3 2 + 1 - 0 !
docs/manual/mod/directives.html.en |
3 2 + 1 - 0 !
docs/manual/mod/directives.html.es |
3 2 + 1 - 0 !
docs/manual/mod/directives.html.fr |
3 2 + 1 - 0 !
docs/manual/mod/directives.html.ja.utf8 |
3 2 + 1 - 0 !
docs/manual/mod/directives.html.ko.euc-kr |
3 2 + 1 - 0 !
docs/manual/mod/directives.html.tr.utf8 |
3 2 + 1 - 0 !
docs/manual/mod/directives.html.zh-cn.utf8 |
3 2 + 1 - 0 !
docs/manual/mod/index.html.de |
2 1 + 1 - 0 !
docs/manual/mod/index.html.en |
2 1 + 1 - 0 !
docs/manual/mod/index.html.es |
2 1 + 1 - 0 !
docs/manual/mod/index.html.fr |
2 1 + 1 - 0 !
docs/manual/mod/index.html.ja.utf8 |
2 1 + 1 - 0 !
docs/manual/mod/index.html.ko.euc-kr |
2 1 + 1 - 0 !
docs/manual/mod/index.html.tr.utf8 |
2 1 + 1 - 0 !
docs/manual/mod/index.html.zh-cn.utf8 |
2 1 + 1 - 0 !
docs/manual/mod/mod_authn_core.html.en |
2 2 + 0 - 0 !
docs/manual/mod/mod_authn_core.html.fr |
4 4 + 0 - 0 !
docs/manual/mod/mod_authnz_fcgi.html.en |
5 3 + 2 - 0 !
docs/manual/mod/mod_cgid.html.fr |
25 15 + 10 - 0 !
docs/manual/mod/mod_dav.html.en |
2 1 + 1 - 0 !
docs/manual/mod/mod_dav.html.fr |
2 1 + 1 - 0 !
docs/manual/mod/mod_dav.html.ja.utf8 |
2 1 + 1 - 0 !
docs/manual/mod/mod_deflate.html.fr |
56 37 + 19 - 0 !
docs/manual/mod/mod_example.html |
13 0 + 13 - 0 !
docs/manual/mod/mod_example.html.en |
180 0 + 180 - 0 !
docs/manual/mod/mod_example.html.fr |
192 0 + 192 - 0 !
docs/manual/mod/mod_example.html.ko.euc-kr |
181 0 + 181 - 0 !
docs/manual/mod/mod_example_hooks.html |
13 13 + 0 - 0 !
docs/manual/mod/mod_example_hooks.html.en |
180 180 + 0 - 0 !
docs/manual/mod/mod_example_hooks.html.fr |
192 192 + 0 - 0 !
docs/manual/mod/mod_example_hooks.html.ko.euc-kr |
181 181 + 0 - 0 !
docs/manual/mod/mod_ldap.html.fr |
20 12 + 8 - 0 !
docs/manual/mod/mod_log_config.html.en |
6 6 + 0 - 0 !
docs/manual/mod/mod_log_config.html.fr |
6 6 + 0 - 0 !
docs/manual/mod/mod_log_config.html.tr.utf8 |
6 6 + 0 - 0 !
docs/manual/mod/mod_rewrite.html.fr |
135 63 + 72 - 0 !
docs/manual/mod/mod_ssl.html.en |
11 8 + 3 - 0 !
docs/manual/mod/mod_ssl.html.fr |
11 8 + 3 - 0 !
docs/manual/mod/quickreference.html.de |
605 303 + 302 - 0 !
docs/manual/mod/quickreference.html.en |
603 302 + 301 - 0 !
docs/manual/mod/quickreference.html.es |
603 302 + 301 - 0 !
docs/manual/mod/quickreference.html.fr |
627 314 + 313 - 0 !
docs/manual/mod/quickreference.html.ja.utf8 |
591 296 + 295 - 0 !
docs/manual/mod/quickreference.html.ko.euc-kr |
599 300 + 299 - 0 !
docs/manual/mod/quickreference.html.tr.utf8 |
613 307 + 306 - 0 !
docs/manual/mod/quickreference.html.zh-cn.utf8 |
603 302 + 301 - 0 !
docs/manual/programs/rotatelogs.html.en |
18 9 + 9 - 0 !
docs/manual/programs/rotatelogs.html.fr |
18 9 + 9 - 0 !
docs/manual/programs/rotatelogs.html.tr.utf8 |
18 9 + 9 - 0 !
docs/manual/rewrite/advanced.html.en |
157 2 + 155 - 0 !
docs/manual/rewrite/advanced.html.fr |
159 1 + 158 - 0 !
docs/manual/rewrite/rewritemap.html.fr |
2 1 + 1 - 0 !
docs/manual/sitemap.html.de |
2 1 + 1 - 0 !
docs/manual/sitemap.html.en |
2 1 + 1 - 0 !
docs/manual/sitemap.html.es |
2 1 + 1 - 0 !
docs/manual/sitemap.html.fr |
2 1 + 1 - 0 !
docs/manual/sitemap.html.ja.utf8 |
2 1 + 1 - 0 !
docs/manual/sitemap.html.ko.euc-kr |
2 1 + 1 - 0 !
docs/manual/sitemap.html.tr.utf8 |
2 1 + 1 - 0 !
docs/manual/sitemap.html.zh-cn.utf8 |
2 1 + 1 - 0 !
docs/manual/style/version.ent |
2 1 + 1 - 0 !
docs/manual/vhosts/name-based.html.en |
2 1 + 1 - 0 !
docs/manual/vhosts/name-based.html.fr |
2 1 + 1 - 0 !
include/ap_mmn.h |
3 2 + 1 - 0 !
include/http_connection.h |
6 1 + 5 - 0 !
include/http_core.h |
4 4 + 0 - 0 !
include/httpd.h |
5 5 + 0 - 0 !
include/util_md5.h |
30 13 + 17 - 0 !
include/util_varbuf.h |
132 71 + 61 - 0 !
include/util_xml.h |
7 3 + 4 - 0 !
modules/aaa/mod_auth_basic.c |
4 2 + 2 - 0 !
modules/aaa/mod_auth_form.c |
8 4 + 4 - 0 !
modules/aaa/mod_authnz_fcgi.c |
2 1 + 1 - 0 !
modules/aaa/mod_authz_core.c |
9 8 + 1 - 0 !
modules/arch/netware/mod_nw_ssl.c |
2 1 + 1 - 0 !
modules/arch/win32/mod_isapi.c |
24 12 + 12 - 0 !
modules/cache/cache_util.c |
10 6 + 4 - 0 !
modules/cache/mod_cache.c |
2 2 + 0 - 0 !
modules/core/mod_macro.c |
42 21 + 21 - 0 !
modules/core/mod_so.c |
4 2 + 2 - 0 !
modules/core/mod_watchdog.h |
6 3 + 3 - 0 !
modules/database/mod_dbd.c |
7 4 + 3 - 0 !
modules/examples/mod_example_hooks.c |
10 5 + 5 - 0 !
modules/filters/mod_include.c |
14 7 + 7 - 0 !
modules/filters/mod_ratelimit.c |
4 2 + 2 - 0 !
modules/filters/mod_xml2enc.c |
9 3 + 6 - 0 !
modules/generators/mod_autoindex.c |
2 1 + 1 - 0 !
modules/http/byterange_filter.c |
6 2 + 4 - 0 !
modules/http/http_filters.c |
65 51 + 14 - 0 !
modules/http/http_protocol.c |
6 3 + 3 - 0 !
modules/http/http_request.c |
4 4 + 0 - 0 !
modules/ldap/util_ldap.c |
2 1 + 1 - 0 !
modules/loggers/mod_log_config.c |
29 26 + 3 - 0 !
modules/lua/lua_apr.c |
4 2 + 2 - 0 !
modules/lua/lua_request.c |
10 5 + 5 - 0 !
modules/lua/mod_lua.c |
10 5 + 5 - 0 !
modules/mappers/mod_negotiation.c |
2 1 + 1 - 0 !
modules/proxy/mod_proxy.c |
6 3 + 3 - 0 !
modules/proxy/mod_proxy_fcgi.c |
6 3 + 3 - 0 !
modules/proxy/mod_proxy_ftp.c |
8 3 + 5 - 0 !
modules/proxy/mod_proxy_http.c |
31 30 + 1 - 0 !
modules/proxy/mod_proxy_wstunnel.c |
27 2 + 25 - 0 !
modules/slotmem/mod_slotmem_shm.c |
6 3 + 3 - 0 !
modules/ssl/ssl_engine_init.c |
2 1 + 1 - 0 !
modules/ssl/ssl_engine_vars.c |
2 1 + 1 - 0 !
os/bs2000/os.c |
4 2 + 2 - 0 !
os/unix/unixd.c |
4 2 + 2 - 0 !
server/config.c |
4 0 + 4 - 0 !
server/core.c |
17 16 + 1 - 0 !
server/core_filters.c |
18 6 + 12 - 0 !
server/mpm/netware/mpm_netware.c |
2 1 + 1 - 0 !
server/mpm_unix.c |
2 1 + 1 - 0 !
server/protocol.c |
14 10 + 4 - 0 !
server/scoreboard.c |
10 8 + 2 - 0 !
server/util.c |
14 7 + 7 - 0 !
server/util_ebcdic.c |
4 3 + 1 - 0 !
server/util_expr_eval.c |
6 2 + 4 - 0 !
server/util_fcgi.c |
4 2 + 2 - 0 !
server/util_script.c |
6 3 + 3 - 0 !
support/htdigest.c |
2 1 + 1 - 0 !
140 files changed, 3860 insertions(+), 3837 deletions(-) |
pull changes from upstream svn 2.4 branch up to r1632831
|
CVE 2014 3583_mod_proxy_fcgi.diff | (download) |
modules/aaa/mod_authnz_fcgi.c |
10 5 + 5 - 0 !
modules/proxy/mod_proxy_fcgi.c |
10 5 + 5 - 0 !
2 files changed, 10 insertions(+), 10 deletions(-) |
---
|
mpm_event_use_after_free.diff | (download) |
server/mpm/event/event.c |
10 0 + 10 - 0 !
server/mpm/event/fdqueue.c |
1 1 + 0 - 0 !
2 files changed, 1 insertion(+), 10 deletions(-) |
---
|
mod_ssl_memleak.diff | (download) |
modules/ssl/mod_ssl.c |
7 5 + 2 - 0 !
1 file changed, 5 insertions(+), 2 deletions(-) |
---
|
mod_ssl oscp_stapling_crash.diff | (download) |
modules/ssl/ssl_engine_init.c |
7 4 + 3 - 0 !
modules/ssl/ssl_private.h |
14 11 + 3 - 0 !
modules/ssl/ssl_util_stapling.c |
134 78 + 56 - 0 !
3 files changed, 93 insertions(+), 62 deletions(-) |
---
|
CVE 2014 8109_mod_lua.diff | (download) |
CHANGES |
5 5 + 0 - 0 !
modules/lua/mod_lua.c |
27 17 + 10 - 0 !
2 files changed, 22 insertions(+), 10 deletions(-) |
---
|
CVE 2015 0228_mod_lua.diff | (download) |
modules/lua/lua_request.c |
6 5 + 1 - 0 !
1 file changed, 5 insertions(+), 1 deletion(-) |
---
|
CVE 2015 3183 chunk header parsing.diff | (download) |
modules/http/http_filters.c |
668 313 + 355 - 0 !
1 file changed, 313 insertions(+), 355 deletions(-) |
---
|
CVE 2015 3185 ap_some_auth_required.diff | (download) |
include/ap_mmn.h |
2 2 + 0 - 0 !
include/http_request.h |
23 23 + 0 - 0 !
server/request.c |
74 56 + 18 - 0 !
3 files changed, 81 insertions(+), 18 deletions(-) |
---
|
define_restarts.diff | (download) |
server/core.c |
1 1 + 0 - 0 !
1 file changed, 1 insertion(+) |
---
|
mpm_event_graceful_restart_deadlock.diff | (download) |
server/mpm/event/event.c |
4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-) |
---
|
mpm_event_crash.diff | (download) |
server/mpm/event/event.c |
50 28 + 22 - 0 !
1 file changed, 28 insertions(+), 22 deletions(-) |
---
|
split_logfile strict.patch | (download) |
support/split-logfile.in |
9 4 + 5 - 0 !
1 file changed, 4 insertions(+), 5 deletions(-) |
---
|
CVE 2016 5387.patch | (download) |
server/util_script.c |
8 8 + 0 - 0 !
1 file changed, 8 insertions(+) |
---
|
mod_socache_memcache_idle_timeout.patch | (download) |
modules/cache/mod_socache_memcache.c |
2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-) |
---
|
mod_proxy_fcgi_304_body.patch | (download) |
modules/proxy/mod_proxy_fcgi.c |
19 13 + 6 - 0 !
1 file changed, 13 insertions(+), 6 deletions(-) |
---
|
CVE 2016 2161 mod_auth_digest_segfault.diff | (download) |
modules/aaa/mod_auth_digest.c |
52 43 + 9 - 0 !
1 file changed, 43 insertions(+), 9 deletions(-) |
---
|
CVE 2016 0736 mod_session_crypto padding oracle.diff | (download) |
modules/session/mod_session_crypto.c |
228 192 + 36 - 0 !
1 file changed, 192 insertions(+), 36 deletions(-) |
---
|
CVE 2016 8743 enforce_http.diff | (download) |
include/http_core.h |
18 18 + 0 - 0 !
include/http_protocol.h |
17 12 + 5 - 0 !
include/httpd.h |
22 22 + 0 - 0 !
modules/http/http_filters.c |
175 149 + 26 - 0 !
server/core.c |
66 66 + 0 - 0 !
server/gen_test_char.c |
45 36 + 9 - 0 !
server/protocol.c |
699 492 + 207 - 0 !
server/util.c |
33 32 + 1 - 0 !
server/vhost.c |
292 237 + 55 - 0 !
9 files changed, 1064 insertions(+), 303 deletions(-) |
---
|
hostnames_with_underscores.diff | (download) |
server/vhost.c |
2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-) |
---
|
CVE 2017 3167.diff | (download) |
include/ap_mmn.h |
2 2 + 0 - 0 !
include/http_protocol.h |
25 24 + 1 - 0 !
server/protocol.c |
48 48 + 0 - 0 !
server/request.c |
17 14 + 3 - 0 !
4 files changed, 88 insertions(+), 4 deletions(-) |
---
|
CVE 2017 3169.diff | (download) |
modules/ssl/ssl_engine_io.c |
15 8 + 7 - 0 !
1 file changed, 8 insertions(+), 7 deletions(-) |
---
|
CVE 2017 7668.diff | (download) |
server/util.c |
6 2 + 4 - 0 !
1 file changed, 2 insertions(+), 4 deletions(-) |
---
|
CVE 2017 7679.diff | (download) |
modules/http/mod_mime.c |
4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-) |
---
|
CVE 2017 9788 mod_auth_digest.diff | (download) |
modules/aaa/mod_auth_digest.c |
4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-) |
---
|
core Disallow Methods registration at run time .htac.patch | (download) |
server/core.c |
6 6 + 0 - 0 !
1 file changed, 6 insertions(+) |
core: disallow methods' registration at run time (.htaccess), they
may be used only if registered at init time (httpd.conf).
|
CVE 2017 15710 mod_authnz_ldap.diff | (download) |
modules/aaa/mod_authnz_ldap.c |
10 7 + 3 - 0 !
1 file changed, 7 insertions(+), 3 deletions(-) |
---
|
CVE 2017 15715 regex line endings.diff | (download) |
include/ap_mmn.h |
3 3 + 0 - 0 !
include/ap_regex.h |
22 22 + 0 - 0 !
server/core.c |
58 58 + 0 - 0 !
server/util_pcre.c |
35 35 + 0 - 0 !
4 files changed, 118 insertions(+) |
---
|
CVE 2018 1283 mod_session.diff | (download) |
modules/session/mod_session.c |
13 8 + 5 - 0 !
1 file changed, 8 insertions(+), 5 deletions(-) |
---
|
CVE 2018 1301 HTTP request read out of bounds.diff | (download) |
server/protocol.c |
76 42 + 34 - 0 !
1 file changed, 42 insertions(+), 34 deletions(-) |
---
|
CVE 2018 1303 mod_cache_socache oob.diff | (download) |
modules/cache/mod_cache_socache.c |
3 2 + 1 - 0 !
1 file changed, 2 insertions(+), 1 deletion(-) |
---
|
CVE 2018 1312 mod_auth_digest nonce.diff | (download) |
modules/aaa/mod_auth_digest.c |
241 51 + 190 - 0 !
1 file changed, 51 insertions(+), 190 deletions(-) |
---
|