Skip to content

New 2.4.65 - #1

Open
cisbiceanu wants to merge 122 commits into
old_2.4.63from
new_2.4.65
Open

New 2.4.65#1
cisbiceanu wants to merge 122 commits into
old_2.4.63from
new_2.4.65

Conversation

@cisbiceanu

Copy link
Copy Markdown
Owner

No description provided.

Christophe Jaillet and others added 30 commits January 20, 2025 20:33
(thanks for fixing my Cut'n'Paste mistake with the trunk commit to backport)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1923287 13f79535-47bb-0310-9956-ffa450edef68
CI: Try to cope with CentOS Stream containers being out-of-sync with
the yum repos when building the slapd container. 



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1923480 13f79535-47bb-0310-9956-ffa450edef68
    do changes and miss proposing them for backport.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1923593 13f79535-47bb-0310-9956-ffa450edef68
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1923697 13f79535-47bb-0310-9956-ffa450edef68
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1923699 13f79535-47bb-0310-9956-ffa450edef68
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1923803 13f79535-47bb-0310-9956-ffa450edef68
* server/core.c (set_override): Catch errors returned by
  set_allow_opts() for a parsing fail in an Options= argument.

Submitted by: Zhou Qingyang <zhou1615 umn.edu>
Github: closes apache#310

Add a Changes entry related to r1917017

While at it, fix a small style issue (tab vs spaces)

Submitted by: jorton, jailletc36
Reviewed by: rjung (reduce code drift), jorton, jailletc36


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1923804 13f79535-47bb-0310-9956-ffa450edef68
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1924637 13f79535-47bb-0310-9956-ffa450edef68
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1924652 13f79535-47bb-0310-9956-ffa450edef68
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1924654 13f79535-47bb-0310-9956-ffa450edef68
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1924655 13f79535-47bb-0310-9956-ffa450edef68
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1924759 13f79535-47bb-0310-9956-ffa450edef68
CI: Use the git commit hash to determine the revision of APR/APR-util
from the github repos, and build exactly that, rather than relying on SVN:
 - works if apr/apr-util moves to a r/w git in the future
 - removes a race for branches where the git revision tested
 could be different to the SVN revision retrieved before



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1924962 13f79535-47bb-0310-9956-ffa450edef68
CI: Flush the CPAN cache if /usr/bin/perl has been updated since
the cache was built. Possible fix for 2.4.x failure seen here:

https://github.com/apache/httpd/actions/runs/11322484507/job/31483266212

SSLeay.c: loadable library and perl binaries are mismatched (got first handshake key 0xeb00080, needed 0xf380080)

perldiag(1) describes this as a mismatch between libraries and binaries,
likely solved by reinstalling XS modules:

https://github.com/Perl/perl5/blob/77b78882c76e7461ccc4dcf2eb3afb9644836a72/pod/perldiag.pod#L3617

CI: Second attempt to fix stale XS cache issue.

Cache the "perl -V" output and flush the cache if it changes.

CI: Fix borked test for perl -V in r1921308.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1924964 13f79535-47bb-0310-9956-ffa450edef68
CI: Add 64-bit ARM job to Linux workflow. See:
https://github.blog/changelog/2025-01-16-linux-arm64-hosted-runners-now-available-for-free-in-public-repositories-public-preview/

Disable the arm64 job, it appears there are not enough runners. 

CI: Retry arm64 workflow with the correct label this time.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1924965 13f79535-47bb-0310-9956-ffa450edef68
Update mod_ssl docs to reference current & working openssl.org
URIs throughout.

PR: 69682


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1925513 13f79535-47bb-0310-9956-ffa450edef68
notroj and others added 30 commits July 7, 2025 09:15
* modules/ssl/ssl_private.h: For OpenSSL >= 3.5.0 drop $SSLKEYLOGFILE
  handling inside mod_ssl where OpenSSL is built to handle that
  internally in libssl.

* modules/ssl/ssl_private.h: Fix logic in r1926720 HAVE_OPENSSL_KEYLOG macro,
  thanks to rpluem.

Reviewed by: rpluem
Submitted by: jorton
Reviewed by: jorton, rpluem, ylavic
Github: closes apache#538


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927023 13f79535-47bb-0310-9956-ffa450edef68
Correctly check return value of getline

In case of an error (e.g. file not found or readable) getline returns -1 which
causes an endless loop. Leave the loop in such cases.


* Correctly handle filenames that contain spaces

Reviewed by: rpluem, ylavic, jorton


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927027 13f79535-47bb-0310-9956-ffa450edef68
   *) mod_proxy_ajp: Use iobuffersize set on worker level for the IO buffer
      size.

Submitted By: Jari Ahonen <jah@progress.com>
Reviewed By: rpluem, ylavic, covener



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927029 13f79535-47bb-0310-9956-ffa450edef68
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927030 13f79535-47bb-0310-9956-ffa450edef68
Reviewed By: rpluem, jorton, ylavic



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927039 13f79535-47bb-0310-9956-ffa450edef68
  header only

Reviewed By: rpluem, jorton, ylavic



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927040 13f79535-47bb-0310-9956-ffa450edef68
  expand UNC checking

Reviewed By: covener, jfclere, rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927041 13f79535-47bb-0310-9956-ffa450edef68
  escape ssl vars

Reviewed By: rpluem, jorton, covener, ylavic



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927042 13f79535-47bb-0310-9956-ffa450edef68
  update SNI validation

Reviewed By: rpluem, jorton, covener, ylavic



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927043 13f79535-47bb-0310-9956-ffa450edef68
  tolerate missing host header in h2 proxy

Reviewed By: jorton, icing, rpluem



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927044 13f79535-47bb-0310-9956-ffa450edef68
  remove antiquated 'SSLEngine optional' TLS upgrade

Reviewed By: rpluem, jorton, covener



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927045 13f79535-47bb-0310-9956-ffa450edef68
  improve h2 header error handling

Rewviewed By: icing, covener, rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927046 13f79535-47bb-0310-9956-ffa450edef68
avoid compile error with curl < 7.44.0

Reviewed By: covener, ylavic, gbechis




git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927055 13f79535-47bb-0310-9956-ffa450edef68
    
According to python 3.11.0 changelog, "datetime.UTC"
was added as an alias for "datetime.timezone.utc".


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927318 13f79535-47bb-0310-9956-ffa450edef68
mentioned dropped 'sslengine optional'



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927321 13f79535-47bb-0310-9956-ffa450edef68
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927323 13f79535-47bb-0310-9956-ffa450edef68
  *) SECURITY: CVE-2025-54090: Apache HTTP Server: 'RewriteCond expr'
     always evaluates to true in 2.4.64 (cve.mitre.org)
     A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond
     expr ..." tests evaluating as "true".
     Users are recommended to upgrade to version 2.4.65, which fixes
     the issue.


Reviewed By: covener, ylavic, gbechis, jorton



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927361 13f79535-47bb-0310-9956-ffa450edef68
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

10 participants