36910
|
Ant
|
Optional
|
notifications
|
RESO
|
WONT
|
self not defined for task scripts / scriptdef
|
2008-02-22
|
59636
|
Apache h
|
mod_user
|
bugs
|
NEW
|
---
|
UserDir is not accepting more than one directory location
|
2018-07-09
|
44155
|
Apache h
|
mod_ldap
|
bugs
|
NEW
|
---
|
smarter retry for LDAP_UNAVAILABLE, LDAP_BUSY, etc.
|
2012-03-12
|
50796
|
Apache h
|
Core
|
bugs
|
NEW
|
---
|
record time between keepalives in access log
|
2011-08-07
|
53539
|
Apache h
|
mod_cach
|
bugs
|
NEW
|
---
|
content type and character set are changing when the content served from disk_cache becomes 'stale'
|
2014-03-03
|
53915
|
Apache h
|
mod_cach
|
bugs
|
NEW
|
---
|
Colon lost when :port is used in CacheKeyBaseURL
|
2019-01-12
|
54222
|
Apache h
|
Core
|
bugs
|
NEW
|
---
|
ServerTokens checking is not complete
|
2012-11-29
|
54223
|
Apache h
|
Runtime
|
bugs
|
NEW
|
---
|
AH00554 error when runtime configuration Includes a directory
|
2012-11-29
|
55069
|
Apache h
|
Core
|
bugs
|
NEW
|
---
|
notice message in error_log even when LogLevel error
|
2018-01-16
|
55670
|
Apache h
|
Core
|
bugs
|
NEW
|
---
|
Startup may fail silently at post_config
|
2013-10-19
|
56040
|
Apache h
|
mod_sess
|
bugs
|
NEW
|
---
|
should be able to remove Max-Age cookie parameter to enable "session" cookies
|
2020-03-02
|
56052
|
Apache h
|
mod_sess
|
bugs
|
NEW
|
---
|
ap_session_load called multiple times for expired session creates new session each time
|
2020-03-01
|
56264
|
Apache h
|
mod_rewr
|
bugs
|
NEW
|
---
|
Confusing error with .htaccess rewrite to proxy when mod_proxy not active.
|
2019-01-06
|
56333
|
Apache h
|
mpm_even
|
bugs
|
NEW
|
---
|
API to resume a SUSPENDED connection
|
2014-05-11
|
56528
|
Apache h
|
mod_rewr
|
bugs
|
NEW
|
---
|
"bad flags delimiter" - improve helpfulness
|
2015-01-16
|
58121
|
Apache h
|
mod_prox
|
bugs
|
NEW
|
---
|
ProxyHTMLMeta seems to ignore all <meta http-equiv="Content-***
|
2017-12-16
|
58171
|
Apache h
|
mod_sess
|
bugs
|
NEW
|
---
|
ap_session_save saves the wrong session after a decode error
|
2020-03-01
|
59938
|
Apache h
|
Core
|
bugs
|
NEW
|
---
|
Expose remote host port as an expression
|
2017-03-02
|
60182
|
Apache h
|
mod_ssl
|
bugs
|
NEW
|
---
|
SSLStaplingFakeTryLater Deviates From Documented Behavior of Only Being Effective When SSLStaplingReturnResponderErrors is On
|
2021-11-09
|
61860
|
Apache h
|
Core
|
bugs
|
NEW
|
---
|
Headers duplication when 416 status code occurs
|
2020-11-10
|
61980
|
Apache h
|
mod_cgi
|
bugs
|
NEW
|
---
|
Improve mod_cgi message for CGI stderr output
|
2018-01-10
|
61983
|
Apache h
|
mod_head
|
bugs
|
NEW
|
---
|
Allow Content-Type to be unset via Header unset
|
2018-01-10
|
62025
|
Apache h
|
mod_head
|
bugs
|
NEW
|
---
|
mod_headers doesn't edit WWW-Authentication from mod_auth_basic
|
2018-10-22
|
63288
|
Apache h
|
mod_cach
|
bugs
|
NEW
|
---
|
mod_cache (util_cache.c) fails to read quoted Cache-Control parameters like max-age
|
2019-12-01
|
63305
|
Apache h
|
mod_ldap
|
bugs
|
NEW
|
---
|
Segmentation fault in mod_ldap on gracefull reload
|
2022-03-17
|
64785
|
Apache h
|
mod_allo
|
bugs
|
NEW
|
---
|
allowmethods should be able to disable individual methods
|
2020-11-08
|
65819
|
Apache h
|
mod_unix
|
bugs
|
NEW
|
---
|
CoreDumpDirectory making the process traceable if configured on FreeBSD
|
2022-01-20
|
65835
|
Apache h
|
Core
|
bugs
|
NEW
|
---
|
core: log_tid support on FreeBSD
|
2022-06-16
|
65922
|
Apache h
|
mod_ssl
|
bugs
|
NEW
|
---
|
modules/ssl/ssl_util_ssl.c: Add check for BIO_read
|
2023-06-06
|
66033
|
Apache h
|
Core
|
bugs
|
NEW
|
---
|
Latent read beyond bounds in ap_is_matchexp() [zhbug_httpd_46.2]
|
2022-04-27
|
66034
|
Apache h
|
mod_subs
|
bugs
|
NEW
|
---
|
Read beyond bounds via mod_substitute.c [zhbug_httpd_22.1]
|
2022-04-27
|
66672
|
Apache h
|
mod_rewr
|
bugs
|
NEW
|
---
|
RewriteRule with QSA flag and substitution ending with ? broken
|
2023-07-14
|
63638
|
Apache h
|
Document
|
docs
|
NEW
|
---
|
htcacheclean inodes and storage usage is unclear
|
2019-08-09
|
40453
|
Apache h
|
mod_rewr
|
bugs
|
NEW
|
---
|
lexicographic compare in RewriteCond isn't lexicographic
|
2018-08-25
|
53690
|
Apache h
|
Core
|
bugs
|
NEW
|
---
|
Calls to semctl() trigger "uninitialized memory" warning from valgrind
|
2013-02-04
|
35652
|
Apache h
|
Runtime
|
bugs
|
REOP
|
---
|
Improve error message: "pcfg_openfile: unable to check htaccess file, ensure it is readable"
|
2011-08-06
|
35768
|
Apache h
|
Core
|
bugs
|
REOP
|
---
|
Missing file logs at far too high of log level
|
2021-07-16
|
57198
|
Apache h
|
mod_prox
|
bugs
|
REOP
|
---
|
mod_proxy_fcgi (more) wrong behavior with 304
|
2019-11-22
|
59007
|
Apache h
|
All
|
bugs
|
REOP
|
---
|
mod_proxy disables balancer worker after a timeout from ajp even if the failontimeout set to off
|
2017-09-09
|
60458
|
Apache h
|
mod_prox
|
bugs
|
REOP
|
---
|
ProxyPass in a Location block loops on local ErrorDocument
|
2017-04-05
|
60910
|
Apache h
|
mod_sess
|
bugs
|
REOP
|
---
|
Do not send Set-Cookie twice
|
2019-11-19
|
61488
|
Apache h
|
mod_prox
|
bugs
|
REOP
|
---
|
mod_proxy_http treats POST response timeout as a 100 reply timeout
|
2020-01-14
|
63325
|
Apache h
|
mod_reqt
|
bugs
|
REOP
|
---
|
Default body_min_rate not enabled in mod_reqtimeout
|
2022-08-04
|
63891
|
Apache h
|
mod_prox
|
bugs
|
REOP
|
---
|
Balancer failover fails for POST with small request Body and CL set
|
2022-10-27
|
63893
|
Apache h
|
mod_remo
|
bugs
|
REOP
|
---
|
Bogus warning "unsupported command 20"
|
2022-05-15
|
29755
|
Apache h
|
mod_user
|
bugs
|
RESO
|
LATE
|
mod_usertrack should use err_headers_out
|
2016-12-31
|
46467
|
Apache h
|
mpm_pref
|
bugs
|
RESO
|
FIXE
|
Apache-childs segfault when number of childs reaches 130
|
2014-01-20
|
53555
|
Apache h
|
mpm_even
|
bugs
|
RESO
|
FIXE
|
Scoreboard full error with event/ssl
|
2017-01-31
|
54311
|
Apache h
|
mpm_even
|
bugs
|
RESO
|
FIXE
|
The return error is never checked for inappropriate ThreadStackSize
|
2013-05-12
|
63169
|
Apache h
|
mpm_even
|
bugs
|
RESO
|
FIXE
|
MPM event, stuck process after graceful: no (old gen)
|
2021-09-08
|
65666
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
2.4.47 breaks ability to unset Expect header for proxy compatibility, yielding 417 errors
|
2022-06-03
|
29744
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
CONNECT does not work over existing SSL connection
|
2016-09-28
|
32652
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
mod_ssl: match hostnames against subjectAltName DNS names too
|
2012-02-28
|
33098
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
request body with C-L but early EOF does not error
|
2009-10-20
|
33112
|
Apache h
|
mod_nego
|
bugs
|
RESO
|
FIXE
|
Query_string not preserved after content negotiation
|
2010-10-06
|
35217
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
extension cache-control directives MUST be ignored
|
2018-02-25
|
35999
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Port lost after call to "internal_internal_redirect" in "modules/http/http_request.c"
|
2010-01-09
|
36783
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
request.c not correctly checking link owner uid for SymlinksIfOwnerMatch
|
2011-09-17
|
37064
|
Apache h
|
mod_uniq
|
bugs
|
RESO
|
FIXE
|
wrong timestamp value in UNIQUE_ID on mod_unique_id in Apache2.0.54
|
2008-06-02
|
37912
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
[PATCH] Have ssl_engine_pphrase.c report what vhost it's working on, so it's easier to track what's wrong
|
2012-02-26
|
37920
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
LATE
|
mod_proxy does not flush data on POST requests from client
|
2018-11-07
|
38148
|
Apache h
|
mod_dav
|
bugs
|
RESO
|
FIXE
|
One Failed Request Can Possibly Overwrite Another Active Request's PUT
|
2012-02-26
|
38330
|
Apache h
|
mod_mime
|
bugs
|
RESO
|
FIXE
|
Cannot RemoveType which comes from mime.types
|
2010-04-12
|
38827
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
LATE
|
mod_disk_cache trying to rename locked tempfile on 304 response
|
2016-12-31
|
38861
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
ApacheBench: write_request returns after EAGAIN
|
2008-05-27
|
38864
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
LATE
|
ProxyPassReverse fails in <Location>
|
2018-11-07
|
39045
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
mod_python makes Apache crash when used with mod_auth_ldap
|
2012-02-26
|
39299
|
Apache h
|
mod_dav
|
bugs
|
RESO
|
LATE
|
Internal Server Error (500) on COPY
|
2018-11-07
|
39311
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Apache Crashes On several Graceful Restart requests coinciding in time with lot's of HTTP-requests
|
2012-02-26
|
39313
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
RewriteOption Inherit adds global rules AFTER local rules. You may want the other odrer.
|
2012-02-26
|
39332
|
Apache h
|
mod_cgid
|
bugs
|
RESO
|
FIXE
|
mod_cgid does not work with worker MPM on Solaris
|
2018-02-25
|
39351
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
Continue early if bucket length is zero
|
2013-02-02
|
39519
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Change some "apr_palloc / memcpy" to apr_pstrmemdup
|
2008-12-16
|
39670
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
ab -n 1 -c 2 does too many requests
|
2012-02-26
|
39679
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
ab truncates post data if data is specified in a file
|
2008-05-27
|
39713
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
Seconds / microseconds confusion for warning header
|
2008-11-24
|
39785
|
Apache h
|
Core
|
bugs
|
RESO
|
LATE
|
Status code 408 (Request Timeout) is not logged
|
2018-11-07
|
39815
|
Apache h
|
mod_dav
|
bugs
|
RESO
|
FIXE
|
Atomic Creation of uploaded files in mod_dav
|
2012-02-26
|
39944
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Wrong/Bad filename in ErrorLog when trying to access files in non existing directories
|
2013-02-06
|
40054
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
ab performance improvements
|
2008-05-27
|
40169
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
CacheEnable not caching Forward proxy
|
2009-10-03
|
40243
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
Patch for htpasswd to optionally read passwords from stdin, not cmdline
|
2014-08-20
|
40312
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
ssl_engine_init.c, ssl_init_ctx_verify contains a never-true if condition.
|
2018-06-13
|
40721
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
401 vs 403 in httpd
|
2012-02-26
|
40827
|
Apache h
|
All
|
bugs
|
RESO
|
FIXE
|
Typos in polish error messages
|
2018-08-03
|
41120
|
Apache h
|
mod_ext_
|
bugs
|
RESO
|
FIXE
|
Filters corrupt the data sent to the browser if they dont exist
|
2009-01-07
|
41194
|
Apache h
|
mpm_even
|
bugs
|
RESO
|
FIXE
|
Check the return value from ap_run_create_connection
|
2012-02-26
|
41218
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
mod_disk_cache ignores EnableSendfile configuration directive
|
2009-02-21
|
41408
|
Apache h
|
All
|
bugs
|
RESO
|
FIXE
|
AddCharset rule on .html disables SSI enabled via XBitHack
|
2012-02-26
|
41857
|
Apache h
|
mod_sete
|
bugs
|
RESO
|
FIXE
|
[PATCH]mod_setenvif patch
|
2012-02-26
|
41887
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
-T option unavailable for Apache 2.0.x/2.3.0 -> available
|
2010-09-25
|
41960
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Apache is not using custom content-types when accessing content-negotiated resources
|
2008-11-15
|
42080
|
Apache h
|
Build
|
bugs
|
RESO
|
FIXE
|
ab.c:1145: warning: passing arg 2 of `BIO_set_callback_arg' from incompatible pointer type
|
2008-05-12
|
42135
|
Apache h
|
mod_cgid
|
bugs
|
RESO
|
FIXE
|
RLimit... directives do not work with mod_cgid
|
2012-02-26
|
42175
|
Apache h
|
mod_suex
|
bugs
|
RESO
|
FIXE
|
suexec_enabled set incorrectly when httpd is run by a non-root user
|
2012-02-26
|
42203
|
Apache h
|
mod_nego
|
bugs
|
RESO
|
FIXE
|
Content-Length in type maps doesn't work
|
2012-02-26
|
42896
|
Apache h
|
mod_dav
|
bugs
|
RESO
|
FIXE
|
dav_method_put deletes entire file when PUT with content-range fails
|
2012-02-26
|
43039
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
NUL character is valid in header lines
|
2012-02-26
|
43084
|
Apache h
|
Other Mo
|
bugs
|
RESO
|
FIXE
|
Group line in AuthGroupFile cannot contain more than 8192 characters (including EOL)
|
2012-02-26
|
43250
|
Apache h
|
mod_nego
|
bugs
|
RESO
|
FIXE
|
mod_negotiation can't match file when filename has an uppercase chars
|
2012-02-26
|
43415
|
Apache h
|
mod_log_
|
bugs
|
RESO
|
FIXE
|
Logging remote port
|
2011-03-12
|
43465
|
Apache h
|
mod_dav
|
bugs
|
RESO
|
FIXE
|
LOCK with missing intermediate collection returns 500 rather than 409
|
2012-02-26
|
43494
|
Apache h
|
mod_cgid
|
bugs
|
RESO
|
LATE
|
mod_cgid does not kill never ending scripts
|
2018-11-07
|
43596
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Chroot patch
|
2008-10-15
|
43696
|
Apache h
|
mpm_pref
|
bugs
|
RESO
|
FIXE
|
race condition when trying to shutdown httpd immediately after starting it
|
2012-02-26
|
43711
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
100-continue response when 401 expected
|
2008-05-27
|
44020
|
Apache h
|
mod_alia
|
bugs
|
RESO
|
FIXE
|
Absolute paths in the target of Redirect directives in server config context are mishandled
|
2011-09-17
|
44076
|
Apache h
|
mod_user
|
bugs
|
RESO
|
FIXE
|
UserDir breaks in vhosts
|
2011-09-05
|
44123
|
Apache h
|
mod_cgi
|
bugs
|
RESO
|
FIXE
|
Apache slowly consumes all system memory while running streaming CGI script.
|
2012-02-26
|
44262
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
AllowOverride Options= grants the permission of the 'All' option.
|
2009-08-23
|
44402
|
Apache h
|
mpm_work
|
bugs
|
RESO
|
FIXE
|
Worker mpm crashes (SEGV) under stress with static workload
|
2010-10-06
|
44478
|
Apache h
|
mod_sete
|
bugs
|
RESO
|
FIXE
|
Add SetEnvIfIP to set env vars depneding on ip subnet matches
|
2012-02-26
|
44579
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
mod_cache doesn't handle If-Range correctly
|
2009-10-03
|
44641
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
mod_rewrite ap_register_rewrite_mapfunc can use uninitialized memory
|
2008-05-27
|
44734
|
Apache h
|
mod_dav
|
bugs
|
RESO
|
FIXE
|
webdav move on top level directory crashes httpd
|
2008-05-27
|
44803
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Path info is decoded too soon
|
2008-06-05
|
44995
|
Apache h
|
Other Mo
|
bugs
|
RESO
|
LATE
|
Custom HTTP-Error codes get remapped to 500er codes
|
2014-02-17
|
45024
|
Apache h
|
Build
|
bugs
|
RESO
|
FIXE
|
ab.c will not compile on VC6
|
2008-06-05
|
45076
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
pre_config hooks not called in order
|
2012-02-04
|
45160
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Directory Wildcards for Include Directive
|
2018-02-25
|
45318
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
mod_authnz_ldap does not convert passwords to UTF-8
|
2010-10-07
|
45341
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
Apache reverse-proxy returns 304 on non-conditional GET request
|
2011-02-08
|
45343
|
Apache h
|
Build
|
bugs
|
RESO
|
FIXE
|
apxs filters out ':' chars from environment variables
|
2010-05-14
|
45445
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Connection Timeout vs. Request Timeout in reverse balanced proxies
|
2018-02-25
|
45529
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
B flag in mod_rewrite RewriteRule doesn't escape & and other sim characters
|
2014-02-17
|
45584
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
No AUTHENTICATE_* environment variables from mod_authz_ldap
|
2012-02-26
|
45674
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
LATE
|
Allow to change error code returned by "Require ldap-filter"
|
2018-11-07
|
45708
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
CRL verification fails if CA have distinct AKID for CRL and client certificates
|
2012-02-26
|
45856
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
suexec hangs when suexec_log > 2147483647 bytes
|
2012-02-26
|
45923
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
htpasswd tries to open(file, O_RDONLY | O_APPEND)
|
2018-03-12
|
45959
|
Apache h
|
mod_incl
|
bugs
|
RESO
|
FIXE
|
SSI include ignores SymlinkIfOwnerMatch directive
|
2009-06-11
|
46014
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
OCSP Content-Type header missing
|
2010-02-19
|
46036
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Fix memory leak in ssl_read_pkcs7
|
2011-02-12
|
46076
|
Apache h
|
mod_ldap
|
bugs
|
RESO
|
FIXE
|
Return code of apr_ldap_init not checked causing sigabort
|
2012-02-26
|
46146
|
Apache h
|
mod_defl
|
bugs
|
RESO
|
FIXE
|
deflate_in_filter fails to inflate if CRC/length bytes are not in available stream
|
2014-08-18
|
46239
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
SHARED_CORE dead code
|
2012-02-26
|
46380
|
Apache h
|
mpm_work
|
bugs
|
RESO
|
FIXE
|
Apache 2.2.10 and suexec extra argv
|
2009-08-03
|
46393
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
ab segfaults in verbose mode on https sites
|
2012-02-26
|
46401
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
Cache not preserving content-encoding
|
2008-12-16
|
46421
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
module mod_authz_dbd - doesn't work when multiple groups are returned
|
2015-08-17
|
46594
|
Apache h
|
mod_head
|
bugs
|
RESO
|
FIXE
|
Global search-and-replace in RequestHeader edit
|
2011-09-17
|
46669
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
rotatelogs doesn't autocreate directories
|
2019-06-21
|
46749
|
Apache h
|
mod_ldap
|
bugs
|
RESO
|
FIXE
|
Ldap cache cleaning is broken when LDAPSharedCacheSize is too small
|
2010-04-11
|
46959
|
Apache h
|
mod_mime
|
bugs
|
RESO
|
FIXE
|
Apache server by default sends content-type for 7z as plain/text
|
2011-03-25
|
47022
|
Apache h
|
mod_stat
|
bugs
|
RESO
|
FIXE
|
mod_status: serverlimit vs maxclients
|
2012-02-26
|
47051
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
DUPL
|
"Subject Alternative Name" not used while checking certificate
|
2011-09-28
|
47087
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Incorrect request body handling with Expect: 100-continue if the client does not receive a transmitted 300 or 400 response prior to sending its body
|
2014-02-17
|
47177
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy rewrites incorrectly IPv6 literal addresses
|
2010-02-12
|
47178
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
ab segfaults when called with a large -n parameter
|
2012-02-26
|
47204
|
Apache h
|
mod_dav
|
bugs
|
RESO
|
FIXE
|
Unsuccesful MOVE can lead to data loss
|
2012-02-26
|
47335
|
Apache h
|
mod_cgi
|
bugs
|
RESO
|
FIXE
|
An extra stderr file descriptor is leaked to forked CGI processes
|
2012-02-26
|
47383
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Please check Transfer-Encoding is "chunked" with no-case sensitivity.
|
2009-12-27
|
47418
|
Apache h
|
Platform
|
bugs
|
RESO
|
FIXE
|
Server signature show win32 as platform and not win64
|
2012-02-26
|
47489
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
WONT
|
enhance mod_rewrite and RewriteLog directive to support Windows UNC path
|
2011-09-17
|
47650
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
httxt2dbm calculates value size incorrectly
|
2017-11-19
|
47682
|
Apache h
|
mod_auto
|
bugs
|
RESO
|
FIXE
|
small bug in mod_autoindex.c with IndexOptions HTMLTable
|
2011-09-17
|
47754
|
Apache h
|
mod_nego
|
bugs
|
RESO
|
FIXE
|
MultiViewsMatch does not apply in a <Location> section
|
2010-11-04
|
47766
|
Apache h
|
mod_auto
|
bugs
|
RESO
|
FIXE
|
mod_autoindex: incremental options not working as described
|
2011-09-17
|
47788
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
ab does not support PUT requests
|
2012-02-26
|
47812
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
error_log hook often does not have access to the request_rec
|
2012-02-26
|
47928
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
CONNECT requests get fully qualified and therefore do not work
|
2009-11-02
|
47945
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
SSLSessionCache directive mis-parses parens() in pathname
|
2014-10-23
|
47951
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
use libtool --mode=install install instead of cp command
|
2012-02-26
|
48024
|
Apache h
|
mod_sed
|
bugs
|
RESO
|
FIXE
|
mod_sed consumes too much memory when used inside reverse proxy and line sizes are very long e.g. 1-5M
|
2011-06-25
|
48210
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
TLS / SSL Man-In-The-Middle Renegotiation Vulnerability
|
2009-11-17
|
48215
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Renegotiation with SSLVerifyDepth 0 requires multiple client authentication
|
2012-02-26
|
48254
|
Apache h
|
All
|
bugs
|
RESO
|
FIXE
|
Bogus "DocumentRoot does not exist" warning when set to a file
|
2020-05-16
|
48281
|
Apache h
|
Runtime
|
bugs
|
RESO
|
FIXE
|
Compilation issue with shared modules on AIX 6.1
|
2014-01-19
|
48340
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
Binding with user-supplied credentials
|
2012-02-26
|
48351
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Ampersand taken to mean "what is matched by the previous regex" - unexpected given the "perl color" of regexes
|
2012-02-26
|
48352
|
Apache h
|
mod_mime
|
bugs
|
RESO
|
FIXE
|
mod_mime_magic does not detect certain important MIME types
|
2012-02-26
|
48359
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Buffer overflow related to setting RequestHeader
|
2010-03-06
|
48377
|
Apache h
|
mod_filt
|
bugs
|
RESO
|
FIXE
|
mod_filter should be able to process non-200 responses
|
2011-09-17
|
48388
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
WONT
|
mod proxy disabling workers after a single error
|
2015-02-10
|
48401
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
CacheIgnoreURLSessionIdentifiers recognizes the wrong key
|
2012-02-26
|
48422
|
Apache h
|
mod_head
|
bugs
|
RESO
|
LATE
|
Can't edit Content-Type Header
|
2010-07-05
|
48497
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
apachebench keepalive option sends an incorrect number of requests
|
2010-05-03
|
48505
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
Apache 2.2 not working with LDAP Fail Over Auth
|
2010-12-28
|
48594
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
Inaccurate requests per second in html output of apachebench
|
2012-02-26
|
48752
|
Apache h
|
All
|
bugs
|
RESO
|
FIXE
|
log command line options passed to httpd
|
2012-02-26
|
48761
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
rotatelogs support for hard link to static named file
|
2012-02-26
|
48807
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Design policy of "aaa module" is incomplete because of hard coded string.
|
2012-02-26
|
48812
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Adds port of remote server to error log
|
2010-12-03
|
48930
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
[patch] ab: support -B option to specify bind address
|
2012-02-26
|
48939
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Add ability to force workers into PROXY_WORKER_IN_ERROR when configured statuses are found
|
2010-11-24
|
49057
|
Apache h
|
mod_sete
|
bugs
|
RESO
|
FIXE
|
setenvif should have access to SSL environment variables
|
2012-05-18
|
49076
|
Apache h
|
Core
|
bugs
|
RESO
|
DUPL
|
Skip document root check during start up (-T option)
|
2010-07-20
|
49167
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
HTTP_IN filter confusing error with timeout on chunk-length
|
2010-04-26
|
49200
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
mod_cache stores responses to requests containing Cache-Control: no-store
|
2011-02-11
|
49251
|
Apache h
|
mod_log_
|
bugs
|
RESO
|
FIXE
|
Add %M microsecond time format (complements strftime(), not the same as %D)
|
2012-02-26
|
49276
|
Apache h
|
mod_cgi
|
bugs
|
RESO
|
FIXE
|
mod_cgi allocates unnecessary amounts of memory
|
2012-02-26
|
49369
|
Apache h
|
mod_defl
|
bugs
|
RESO
|
FIXE
|
mod_deflate output filters pass empty brigades down the filter chain
|
2012-02-26
|
49382
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
ab says "SSL read failed"
|
2014-12-02
|
49383
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
ab -v2 SSL memory leak
|
2012-02-26
|
49388
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
The ScriptSock can't be longer than 7 characters
|
2012-02-26
|
49417
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy crosses connections when apache times out
|
2010-06-11
|
49437
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
apache and mod_auth_basic segmentation fault
|
2013-06-02
|
49474
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
http-2 fails in processing chunked requests with long chunk-size / -extension line
|
2012-02-26
|
49491
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
SSL module does not do the case insensitive URI comparison
|
2013-08-19
|
49502
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Little syntax error in shell script httpd.init
|
2012-02-26
|
49512
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
PATCH unset environment var with RewriteRule
|
2012-02-26
|
49533
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
mod_cache: Cache-Control: no-cache and no-store must ignore cached entity
|
2010-09-27
|
49623
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
CVE-2003-1418 - all httpd versions seem to expose inode values in FileEtag
|
2015-04-14
|
49639
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
RewriteMap lookup fails silently on permission error
|
2012-02-26
|
49705
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Per request DocumentRoot
|
2012-02-26
|
49809
|
Apache h
|
Core
|
bugs
|
RESO
|
WONT
|
DirectoryMatch never matches EOL/$, applies to subdirectories
|
2012-07-23
|
49825
|
Apache h
|
mod_dav
|
bugs
|
RESO
|
FIXE
|
mod_dav PUT treats malformed Content-Range as if it were absent
|
2011-02-08
|
50002
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Restart with many vhosts taking forever [patch]
|
2020-04-09
|
50093
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Better error message for failed certificate validation
|
2012-02-26
|
50094
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Report information about certificate when validation fails
|
2012-02-26
|
50199
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
ap_cache_liststr fails to parse quoted strings
|
2011-02-12
|
50332
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy_http is not aware of SSL handshake failures
|
2011-02-11
|
50349
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
Slash after a file gets ignored and the file is served, should 404 instead.
|
2011-02-08
|
50350
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
unusual behavior of httpd with no -k
|
2010-12-04
|
50434
|
Apache h
|
mod_mime
|
bugs
|
RESO
|
FIXE
|
file name based matching should not consider files that are named just ".extension"
|
2012-02-26
|
50447
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
mod_rewrite re-escapes query string too liberally
|
2012-02-26
|
50559
|
Apache h
|
mod_subs
|
bugs
|
RESO
|
FIXE
|
Memory leak on long lines, leading to complete system freeze
|
2012-02-26
|
50592
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
httpd dumps core on an IPv6 only system
|
2018-03-12
|
50812
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
mod_ssl SSLProxyMachineCertificateFile can't use a 2+ depth certificate when server only returns root CA's on its Acceptable client certificate CA names
|
2013-05-10
|
50823
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Provide alternate failure modes for http on https
|
2013-08-07
|
50824
|
Apache h
|
Runtime
|
bugs
|
RESO
|
FIXE
|
limiting and unsafe use of fixed length buffer for reading configuration
|
2012-02-26
|
50919
|
Apache h
|
All
|
bugs
|
RESO
|
FIXE
|
potential performance waste caused by sprintf
|
2013-05-31
|
50946
|
Apache h
|
Other Mo
|
bugs
|
RESO
|
DUPL
|
mod_example using 100% cpu under load
|
2013-06-26
|
50994
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
NULL pointer dereference with "RewriteMap foo int:undefined"
|
2011-09-17
|
51075
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Add support for TLS-SRP (RFC 5054)
|
2013-03-03
|
51350
|
Apache h
|
mod_defl
|
bugs
|
RESO
|
FIXE
|
mod_deflate compresses zero length content into an invalid 20 byte body
|
2017-02-04
|
51363
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Disable Anonymous ECDH ciphersuites by default
|
2012-02-26
|
51371
|
Apache h
|
mod_cgi
|
bugs
|
RESO
|
FIXE
|
wrong guards around 'apr_procattr_limit_set' in mod_cgi.c
|
2012-02-26
|
51499
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
Suexec missing useful redirect environmental variables
|
2012-02-26
|
51570
|
Apache h
|
mod_dump
|
bugs
|
RESO
|
FIXE
|
NULL pointer in mod_dumpio.c
|
2011-09-19
|
51590
|
Apache h
|
mod_defl
|
bugs
|
RESO
|
FIXE
|
The DEFLATE output filter loops infinitely if the first brigade it gets contains only a flush bucket
|
2012-02-26
|
51608
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Ignoring flush before headers
|
2011-09-08
|
51618
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
[PATCH] Use SSL_MODE_RELEASE_BUFFERS to reduce memory usage
|
2012-02-26
|
51680
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Include ServerAliases when showing parsed config
|
2012-02-26
|
51709
|
Apache h
|
Core
|
bugs
|
RESO
|
LATE
|
ServerName/ServerAlias don't work if Host: header from HTTP request matches VirtualHost address
|
2017-06-25
|
51714
|
Apache h
|
All
|
bugs
|
RESO
|
FIXE
|
Byte Range Filter might consume huge amounts of memory combined with compressed streams
|
2022-01-10
|
51748
|
Apache h
|
All
|
bugs
|
RESO
|
FIXE
|
Apache 2.2.20 Range fix regression. Negative value handling
|
2014-02-17
|
51751
|
Apache h
|
mod_dav
|
bugs
|
RESO
|
FIXE
|
buildin WebDav with buildin ChrootDir ends in Segmentation fault
|
2011-09-17
|
51878
|
Apache h
|
All
|
bugs
|
RESO
|
FIXE
|
2.2.21 is not compliant for byterange 0- returning 200 instead of 206
|
2014-02-17
|
52162
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
ssl_engine_kernel.c "revoked client certificate" log needs debug level: hardly ok for production use
|
2013-03-03
|
52212
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
SSLProxyMachineCertificateFile key first causes segfault
|
2013-11-24
|
52229
|
Apache h
|
mpm_even
|
bugs
|
RESO
|
FIXE
|
ap_start_lingering_close may block and is called from listener thread
|
2012-08-21
|
52230
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
r->invoke_mtx not copied/recreated on internal redirect
|
2013-01-12
|
52256
|
Apache h
|
mod_log_
|
bugs
|
RESO
|
FIXE
|
CVE-2012-0021 Nameless, Valueless cookie causes Segmentation fault when logging Cookies
|
2014-02-17
|
52275
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
LATE
|
memory leak in proxy_ajp_handler
|
2017-06-25
|
52315
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
NULL pointer in log.c caused by ap_send_interim_response() in protocol.c
|
2012-02-04
|
52383
|
Apache h
|
Win32 MS
|
bugs
|
RESO
|
FIXE
|
Instllation log typo
|
2018-06-01
|
52464
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
mod_authnz_ldap does expensive sub-group processing prematurely
|
2012-08-21
|
52478
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
write out headings in balancer-manager
|
2013-03-03
|
52487
|
Apache h
|
Build
|
bugs
|
RESO
|
FIXE
|
Disable mods
|
2012-01-22
|
52553
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
LATE
|
missing support for DirectoryString
|
2012-02-05
|
52668
|
Apache h
|
Runtime
|
bugs
|
RESO
|
FIXE
|
More future safe patch for old MSIE ssl-unclean-shutdown
|
2018-08-04
|
52715
|
Apache h
|
Build
|
bugs
|
RESO
|
FIXE
|
Installed httpd.conf refers "bad" default logfile directory (httpd 2.4.1)
|
2012-05-06
|
52755
|
Apache h
|
mod_filt
|
bugs
|
RESO
|
FIXE
|
mod_filter segfaults
|
2012-05-06
|
52766
|
Apache h
|
mod_xml2
|
bugs
|
RESO
|
FIXE
|
mod_proxy_html connection dropped when back end redirects with headers only
|
2012-03-07
|
52774
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
RewriteRules within outgoing proxy no longer work
|
2012-11-01
|
52779
|
Apache h
|
mod_lua
|
bugs
|
RESO
|
FIXE
|
mod_lua segfaults
|
2012-08-21
|
52820
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
SSLProtocol/SSLProxyProtocol doesn't iterate properly over non +/- options
|
2015-06-27
|
52823
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Incorrect semantics of AllowOverrideList in Apache-2.4.1
|
2012-05-06
|
52831
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
mod_rewrite redirect broken with IPv6 literal address
|
2015-05-11
|
52879
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy_fcgi wrong behavior with 304
|
2014-12-04
|
52892
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
Require expr and %{REMOTE_USER}
|
2012-08-21
|
52900
|
Apache h
|
Build
|
bugs
|
RESO
|
FIXE
|
Apache 2.4.1 build fails for core.c on Solaris 10 with GCC 4.6.x
|
2013-04-26
|
52904
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Listen directive is broken when the MPM has per-directory config
|
2012-05-06
|
52914
|
Apache h
|
mod_dump
|
bugs
|
RESO
|
FIXE
|
On keep-alive on, after some time huge process load
|
2012-05-06
|
52935
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
ProxyPass SetEnvIf interpolation worked in 2.2
|
2012-05-06
|
52963
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
Typo in AuthLDAPURL RFC 2255 error message
|
2017-06-25
|
52964
|
Apache h
|
mod_rate
|
bugs
|
RESO
|
FIXE
|
system error because of negative rate-limit
|
2013-04-30
|
53006
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
SSLProxy to server with wildcard certificate requires 'SSLProxyCheckPeerCN off'
|
2013-03-03
|
53015
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
missing apr_socket_close
|
2021-01-17
|
53016
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
missing apr_brigade_destroy
|
2018-08-22
|
53040
|
Apache h
|
mod_soca
|
bugs
|
RESO
|
FIXE
|
Crash in mod_socache_shmcb due to data misalignment in shared memory
|
2012-08-21
|
53048
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
AuthzProviderAlias is broken with some authz providers
|
2012-08-21
|
53134
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
SNI with Host header preservation through reverse proxy
|
2012-10-21
|
53166
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
FIPS Mode temporary key generation error
|
2013-06-01
|
53219
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
mod_ssl should allow to disable ssl compression
|
2019-11-13
|
53284
|
Apache h
|
mod_sete
|
bugs
|
RESO
|
LATE
|
crash
|
2018-11-07
|
53292
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
add support for HTTP status code 308
|
2018-08-02
|
53402
|
Apache h
|
mod_ldap
|
bugs
|
RESO
|
LATE
|
Incorrect error message for mod_ldap params
|
2018-11-07
|
53444
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Errors when overriding Options Indexes in .htaccess
|
2012-07-13
|
53452
|
Apache h
|
mod_sess
|
bugs
|
RESO
|
FIXE
|
[Patch] Segmentation fault in dbd_remove
|
2014-02-17
|
53663
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
Use of uninitialized memory in mod_rewrite, when RewriteMap is dbd or fastdbd
|
2012-08-21
|
53698
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
POST data lost when appending charset to header Content-Type application/x-www-form-urlencoded
|
2012-08-21
|
53727
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy_ajp: mixed up response after client connection abort
|
2012-08-21
|
53741
|
Apache h
|
All
|
bugs
|
RESO
|
FIXE
|
Code clean up (Concat string at compile time when possible)
|
2015-01-23
|
53824
|
Apache h
|
Build
|
bugs
|
RESO
|
FIXE
|
manual/bind binding description for v4-mapped on FreeBSD platform is only valid for FreeBSD-5x
|
2015-05-25
|
53882
|
Apache h
|
Build
|
bugs
|
RESO
|
FIXE
|
build with enable-mpms-shared=all and mpm entries in httpd.conf
|
2015-02-24
|
53910
|
Apache h
|
mod_dav
|
bugs
|
RESO
|
FIXE
|
If: check spuriously succeeds with %-encoded URL and ETag qualifier
|
2014-08-19
|
53929
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
RewriteRule of "^$" broke between 2.2.21 and 2.4.2
|
2014-04-20
|
53963
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
RewriteBase inherited now?
|
2013-03-03
|
54000
|
Apache h
|
mod_fcgi
|
bugs
|
RESO
|
FIXE
|
Typo in procmgr_send_spawn_cmd() resulting in longer wrapper startup (SVN rev. 1397462)
|
2015-02-16
|
54015
|
Apache h
|
mod_logi
|
bugs
|
RESO
|
FIXE
|
Combined (bytes received + bytes sent) logging directive
|
2013-10-02
|
54030
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Support subjectAltName when (reverse-)proxying
|
2016-03-16
|
54101
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Socket backend support for mod_proxy
|
2014-10-17
|
54133
|
Apache h
|
mod_cgi
|
bugs
|
RESO
|
FIXE
|
RLimitNPROC doesn't work :wrong #if RLIMIT_NPROC
|
2013-03-04
|
54140
|
Apache h
|
mod_ldap
|
bugs
|
RESO
|
FIXE
|
Possible LDAP authentication regression with 2.2.23 release
|
2014-02-17
|
54145
|
Apache h
|
mod_dav
|
bugs
|
RESO
|
FIXE
|
Poor error handling in dav_method_put()
|
2015-02-03
|
54179
|
Apache h
|
mod_dump
|
bugs
|
RESO
|
FIXE
|
Improper logging of large messages
|
2013-05-31
|
54252
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
acinclude.m4 requires -lz when linking with ssl static libraries
|
2018-03-27
|
54254
|
Apache h
|
mpm_even
|
bugs
|
RESO
|
FIXE
|
Check AsyncRequestWorkerFactor to make the checking style consistent
|
2015-02-03
|
54341
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
INVA
|
ProxyPass Can't find 'byrequests' lb method
|
2014-01-20
|
54346
|
Apache h
|
All
|
bugs
|
RESO
|
FIXE
|
change bzero()/bcopy() to memset()/memmove() in test_limit.c
|
2013-02-06
|
54357
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()
|
2014-10-30
|
54384
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Improve a confusing log message related to LimitRequestLine
|
2013-05-12
|
54416
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Missing support for MKCALENDAR method
|
2013-03-03
|
54435
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
LimitRequestBody ignores special value 0 - unlimited in mod_proxy_http
|
2013-02-06
|
54463
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
Case sensitive option in mod_auth
|
2013-05-31
|
54474
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy_connect keeps open connection to client
|
2013-03-03
|
54587
|
Apache h
|
mod_ldap
|
bugs
|
RESO
|
FIXE
|
LDAPConnectionPoolTimeout does not work in all cases
|
2015-09-04
|
54610
|
Apache h
|
mod_dav
|
bugs
|
RESO
|
FIXE
|
COPY doesn't respect If/If-Modified/etc
|
2013-10-03
|
54613
|
Apache h
|
Build
|
bugs
|
RESO
|
FIXE
|
httpd assumes apr with APR_HAS_THREADS true
|
2015-03-03
|
54651
|
Apache h
|
mod_remo
|
bugs
|
RESO
|
FIXE
|
mod_remoteip ends up trusting IPs that it doesn't check
|
2014-02-17
|
54735
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
htpasswd creates wrong passfile
|
2016-05-15
|
54828
|
Apache h
|
mod_log_
|
bugs
|
RESO
|
FIXE
|
Segfault in get_request_end_time() after a failed request
|
2013-04-30
|
54848
|
Apache h
|
mod_stat
|
bugs
|
RESO
|
FIXE
|
Client field too short for IPv6 addresses
|
2018-10-30
|
54881
|
Apache h
|
mod_sete
|
bugs
|
RESO
|
FIXE
|
segfault with SetEnvIfExpr and SetEnvIf
|
2013-04-26
|
54893
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
Buffer overrun in htdigest
|
2014-08-19
|
54948
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
[PATCH] httpd -S shows namevhosts twice
|
2013-05-11
|
54949
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
[PATCH] mod_cache: fix uninitialized tmppath variable (can lead to crash)
|
2018-03-27
|
55264
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
comment option broken in htdbm
|
2014-07-31
|
55293
|
Apache h
|
mod_mime
|
bugs
|
RESO
|
FIXE
|
Incorrect default MIME type for .woff fonts
|
2017-06-25
|
55306
|
Apache h
|
mod_dav
|
bugs
|
RESO
|
FIXE
|
Error when copying svn repository, which contains lock file, using mod_dav
|
2018-03-12
|
55320
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Plain-text request is sent to WSS URL (which should be over SSL) in mod_proxy_wstunnel
|
2014-08-18
|
55360
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
Potential buffer overflows in support/ab
|
2013-08-19
|
55397
|
Apache h
|
mod_dav
|
bugs
|
RESO
|
FIXE
|
mod_dav: dav_resource->uri is now being treated as an unparsed uri
|
2014-05-01
|
55445
|
Apache h
|
mod_soca
|
bugs
|
RESO
|
FIXE
|
mod_socache_memcache ignores expiry, creating eternal memcache entries
|
2017-11-01
|
55523
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
auth_groupfile error log on access even though successful
|
2017-05-25
|
55547
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
mod_cache strips the non-cacheable headers from a response 304 (Not That Stale)
|
2014-08-18
|
55622
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
AuthnProviderAlias does not work w/ authnz_ldap in 2.4.6
|
2014-10-13
|
55786
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
SSLVerifyClient and OptRenegotiate result in a 403 Forbidden error
|
2017-05-25
|
55787
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Chroot fails with "Cannot chroot when not started as root" error
|
2019-01-06
|
55833
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
mod_disk_cache reads from closed files
|
2014-08-18
|
55890
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy_wstunnel does not work with reused backend connections
|
2014-08-18
|
55897
|
Apache h
|
All
|
bugs
|
RESO
|
FIXE
|
[PATCH]patch with SO_REUSEPORT support
|
2015-09-28
|
55910
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Continuation lines are broken during buffer resize
|
2015-01-23
|
55962
|
Apache h
|
mod_remo
|
bugs
|
RESO
|
FIXE
|
mod_remoteip should not allow an external proxy to present an internal proxy
|
2016-02-19
|
55972
|
Apache h
|
mod_remo
|
bugs
|
RESO
|
FIXE
|
Proxy IP list is populated with incorrect IP addresses
|
2014-02-17
|
56062
|
Apache h
|
mod_defl
|
bugs
|
RESO
|
FIXE
|
mod_deflate does not decompress files larger than 4GB
|
2014-08-18
|
56074
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
MOVE
|
ProxyPassMatch-Rules break by upgrade from 2.4.4 to 2.4.6
|
2014-02-05
|
56094
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
mod_rewrite doesn't expose client_addr
|
2014-06-11
|
56105
|
Apache h
|
mod_lua
|
bugs
|
RESO
|
FIXE
|
mod_lua uses apr_table_set() for Set-Cookie - bug?
|
2014-02-11
|
56216
|
Apache h
|
mod_reqt
|
bugs
|
RESO
|
FIXE
|
multiple reqtimeout_con_cfg created for each request -> wrong timeout behavior
|
2014-08-18
|
56235
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
quotes should be optional around expr
|
2016-12-31
|
56241
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
SNI sends warning upon name not found, RFC 6066 discourages this
|
2015-06-09
|
56286
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy_html sometimes adds random characters to HTML pages smaller than 4 bytes
|
2018-01-13
|
56287
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy_html deletes wrong data from HTML when meta http-equiv tag specifies Content-Type behind other meta http-equiv tag
|
2020-03-10
|
56299
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy_ws_tunnel - AH02447: err/hup on backconn
|
2014-10-30
|
56306
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
SSLCertificateKeyFile path garbled if not explicitly given in each vhost
|
2014-08-18
|
56329
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
split-logfile doesn't work
|
2015-01-23
|
56353
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
SNI not working correctly when certificate is defined in global scope
|
2014-08-18
|
56410
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Apache 2.4.9 breaks existing installation after upgrading from 2.4.7 when using OpenSSL < 0.9.8h without specifying an SSLCertificateChainFile
|
2017-03-23
|
56457
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy_html.c: 2 * cut'n'paste errors
|
2017-12-22
|
56517
|
Apache h
|
mod_log_
|
bugs
|
RESO
|
FIXE
|
Virtualhosts cannot inherit parent CustomLog
|
2016-12-31
|
56532
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Improper Neutralization of Input in mod_proxy_balancer.c (XSS)
|
2014-06-17
|
56541
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
LATE
|
Proxy 502's on large file post requests
|
2018-11-07
|
56569
|
Apache h
|
mod_defl
|
bugs
|
RESO
|
FIXE
|
Null CRC in gzip footer with mod_cgid and ErrorDocument
|
2018-03-27
|
56603
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Inappropiate ProxyPassReverse match when interpolated URL is empty string
|
2015-01-23
|
56604
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
ApacheBench custom http methods support
|
2014-07-22
|
56622
|
Apache h
|
mod_reqt
|
bugs
|
RESO
|
FIXE
|
mod_reqtimeout incorrectly applies timeouts to CONNECT requests
|
2018-08-03
|
56639
|
Apache h
|
mpm_even
|
bugs
|
RESO
|
FIXE
|
Race condition in Event MPM
|
2014-08-18
|
56687
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
ProxySourceAddress failed to bind socket to local address
|
2015-10-25
|
56729
|
Apache h
|
mod_reqt
|
bugs
|
RESO
|
FIXE
|
Can't use HTTP 1.1 Keep-Alive with mod_reqtimeout if POST request with POST-DATA respond during more than ->RequestReadTimeout body=[timeout]
|
2015-07-16
|
56823
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
returning 200 status when ap_get_brigade failed
|
2015-06-27
|
56832
|
Apache h
|
mod_rate
|
bugs
|
RESO
|
FIXE
|
mod_ratelimit error brigade pass failed
|
2015-01-23
|
56870
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
authzprovideralias-defined authz provider can't be used in virtualhost
|
2015-01-23
|
56872
|
Apache h
|
mod_defl
|
bugs
|
RESO
|
FIXE
|
Small request bodies bypass DeflateInflateLimitRequestBody
|
2015-06-25
|
56924
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
mod_cache segmentation fault when Content-Type has empty value
|
2015-01-23
|
56925
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
ProxyErrorOverride=On causes workers in error state after 500 errors
|
2015-06-23
|
56960
|
Apache h
|
mpm_even
|
bugs
|
RESO
|
FIXE
|
worker and listener thread dead-lock in graceful shutdown
|
2015-01-23
|
57009
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Fix documentation on LimitRequestLine
|
2014-10-13
|
57070
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
<If "%{SSL_CLIENT_S_DN_Email} != ''"> on non-HTTPS connection crashes in ssl_var_lookup_ssl
|
2015-01-09
|
57087
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy_fcgi doesn't send cgi CONTENT_LENGTH variable when the client request used Transfer-Encoding:chunked
|
2021-01-17
|
57092
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
EBCDIC problem with ProxyRemote to HTTPS
|
2015-01-23
|
57139
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy uses wrong Host header when using an HTTPS proxy
|
2015-04-24
|
57177
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
terminated by signal ILL in server/scoreboard.c line 369
|
2015-06-17
|
57204
|
Apache h
|
mod_lua
|
bugs
|
RESO
|
FIXE
|
LuaAuthzProvider mixes up parsed require arguments when used multiple times
|
2015-01-23
|
57207
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
[mod_ssl] Add a way to retrieve email in alternative names
|
2015-06-27
|
57259
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy_ajp + apache 2.4 on windows not using TCP connection pool
|
2015-01-09
|
57328
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Invalid memory access on ap_server_config_defines
|
2015-01-23
|
57358
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Incorrect If-Match handling
|
2015-06-27
|
57378
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
support connection reuse in proxy_fcgi
|
2015-01-23
|
57379
|
Apache h
|
Build
|
bugs
|
RESO
|
FIXE
|
[patch] Makefile.in with mpm-shared, cgi and cgid add <IfModule ...>
|
2016-07-31
|
57399
|
Apache h
|
mpm_even
|
bugs
|
RESO
|
FIXE
|
Many unnecessary CPU wakeups per second
|
2017-10-03
|
57424
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
mod_rewrite not using ap_context_document_root
|
2016-12-31
|
57435
|
Apache h
|
mpm_even
|
bugs
|
RESO
|
FIXE
|
connection->id isn't unique
|
2015-01-23
|
57525
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
mod_macro use-after-clear bug
|
2022-02-15
|
57531
|
Apache h
|
All
|
bugs
|
RESO
|
FIXE
|
2.4.12 segmentation fault when accessing host on Listen port that doesn't have defined virtual host block
|
2015-06-02
|
57614
|
Apache h
|
All
|
bugs
|
RESO
|
FIXE
|
AB csv export not contain 100%
|
2015-03-02
|
57641
|
Apache h
|
mod_subs
|
bugs
|
RESO
|
FIXE
|
mod_substitute: Invalid merge order
|
2016-07-07
|
57685
|
Apache h
|
mod_cgid
|
bugs
|
RESO
|
FIXE
|
Requests are denied while the mod_cgid daemon starts up
|
2017-05-25
|
57691
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
mod_proxy/proxy_util confuses UDS scheme with HTTP scheme when using RewriteRule
|
Sun 12:18
|
57694
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Crash using SSL certificate with pathlen constraint due to free()
|
2015-06-27
|
57771
|
Apache h
|
mod_cgid
|
bugs
|
RESO
|
FIXE
|
cleanup_script uses incorrect connection ID
|
2016-12-31
|
57868
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
SIGSEV when lacking correct DB access permissions
|
2015-10-25
|
57968
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
SetHandler converts proxy:unix:/path/TO/app to lower case
|
2015-06-25
|
58024
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
(Graceful) Restart does not work after adding a BalancerMember
|
2015-09-26
|
58049
|
Apache h
|
mod_char
|
bugs
|
RESO
|
FIXE
|
Line-based reads are passed through input filters
|
2015-06-18
|
58065
|
Apache h
|
All
|
bugs
|
RESO
|
INVA
|
Benitez
|
2015-06-21
|
58091
|
Apache h
|
mod_soca
|
bugs
|
RESO
|
FIXE
|
mod_socache_memcache does not reuse memcache connections
|
2015-10-25
|
58118
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy_fcgi logs 503 when user aborts connection
|
2016-07-13
|
58126
|
Apache h
|
Build
|
bugs
|
RESO
|
FIXE
|
[patch] acinclude.m4 fix "warning: underquoted definition of ..."
|
2015-10-06
|
58158
|
Apache h
|
mod_defl
|
bugs
|
RESO
|
FIXE
|
Not honoring HTTP spec with regard to Accept-Encoding
|
2021-09-26
|
58202
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
apxs -q += HTTPD_MAJOR , HTTPD_MMN variables
|
2015-10-25
|
58292
|
Apache h
|
mod_dir
|
bugs
|
RESO
|
FIXE
|
FallbackResource breaks chunked encoding sometimes
|
2016-12-31
|
58777
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
URLs containing a ? are assumed to be query strings
|
2016-03-16
|
58854
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
INVA
|
RewriteRule in .htaccess ignores 'Require all denied' when 403 ErrorDocument is missing
|
2016-03-16
|
58856
|
Apache h
|
mod_filt
|
bugs
|
RESO
|
FIXE
|
AddOutputFilterByType in Apache 2.4 inserts filters as AP_FTYPE_RESOURCE
|
2017-02-02
|
59039
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Digest AuthName not working as expected.
|
2016-02-22
|
59111
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Apache Bench does not parse lowercase field names
|
2016-11-14
|
59333
|
Apache h
|
mod_stat
|
bugs
|
RESO
|
FIXE
|
Version 2.4.20 server-status does not show page being retrieved
|
2016-08-29
|
59376
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Provide an option to dump included configuration paths
|
2016-07-11
|
59611
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
Copy-and-paste error in ldapsearch_check_authorization log
|
2016-12-31
|
59618
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
SCRIPT_FILENAME is prefixed with bogus "proxy:fcgi"
|
2017-04-20
|
59798
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Apache crashes with child process exited with status 3221226356
|
2021-05-12
|
59809
|
Apache h
|
Build
|
bugs
|
RESO
|
FIXE
|
--with-nghttp2=dir looks in .../lib instead of .../lib64
|
2020-01-04
|
59815
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
different behaviour between 2.4.20 and 2.4.23 using php as cgi with mod_rewrite and parameters sent as get
|
2016-12-31
|
59844
|
Apache h
|
mod_incl
|
bugs
|
RESO
|
FIXE
|
Stack address is returned from function parse_ap_expr
|
2017-02-03
|
59864
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
segfault when using route-redirect pairs and both servers are disabled/in error mode
|
2016-11-14
|
59869
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy failonstatus option is broken since 2.4.17 on Solaris 10
|
2016-11-14
|
59931
|
Apache h
|
mod_remo
|
bugs
|
RESO
|
FIXE
|
Misleading port after overriding client address
|
2020-04-16
|
60009
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
A local path reduced from an absolute URL that matched a virtual host is not prefixed with the DocumentRoot
|
2017-06-25
|
60038
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
params hcuri and hcexpr are ignored
|
2016-11-14
|
60223
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Non-blocking SSL reads fail when OpenSSL errors are already queued
|
2016-12-31
|
60249
|
Apache h
|
mod_env
|
bugs
|
RESO
|
FIXE
|
SetEnv, PassEnv, etc accept '=' in variable names
|
2017-06-25
|
60261
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Apache fails to start if previously crashed then restarted with same PID
|
2016-11-04
|
60275
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
[patch] segfault on ap_fcgi_encoded_env_len if an environment variable value is null
|
2017-01-09
|
60313
|
Apache h
|
Core
|
bugs
|
RESO
|
WORK
|
body timeout will not cause 408 error
|
2016-12-11
|
60330
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
reverse proxy of 100-continue aware backend, sends 100 continue even when backend does not
|
2023-09-14
|
60478
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
[Patch] mod_rewrite local DOS using path info
|
2017-02-10
|
60487
|
Apache h
|
mpm_even
|
bugs
|
RESO
|
FIXE
|
Core dumps in mpm_event during graceful restart
|
2018-05-07
|
60577
|
Apache h
|
mod_cach
|
bugs
|
RESO
|
FIXE
|
Mod cache not working, with apache set as forward http proxy
|
2017-06-25
|
60624
|
Apache h
|
mod_incl
|
bugs
|
RESO
|
FIXE
|
mod_include DOCUMENT_URI in "if" expression has different value than when echoed
|
2018-03-12
|
60636
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
aaa modules do not always fully initialise value of authn provider
|
2018-01-05
|
60647
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
"access this connection" wrong with event MPM
|
2019-05-27
|
60757
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
mod_proxy_hcheck Doesn't perform checks
|
2020-04-14
|
60956
|
Apache h
|
mpm_even
|
bugs
|
RESO
|
FIXE
|
Event MPM listener thread may get blocked by SSL shutdowns
|
2017-09-22
|
61012
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
ProxyWebsocketIdleTimeout no log message
|
2017-04-25
|
61124
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
ap_parse_form_data does not translate URL escaped form data correctly on EBCDIC systems
|
2017-05-27
|
61132
|
Apache h
|
mod_subs
|
bugs
|
RESO
|
FIXE
|
Tracing info
|
2018-05-31
|
61184
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
[PATCH] Fix build with LibreSSL in 2.4.26-dev
|
2017-10-03
|
61202
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
SCRIPT_NAME is broken in 2.4.26, path is stripped
|
2017-07-18
|
61206
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
mod_ssl fails to build with 2.4.26 if openssl was built with OPENSSL_NO_COMP
|
2018-03-27
|
61207
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
HTTP OPTIONS method shows HEAD multiple times ("GET,HEAD,POST,OPTIONS,HEAD,HEAD")
|
2017-07-12
|
61222
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Apache consumes too much memory for CGI output.
|
2017-10-10
|
61240
|
Apache h
|
support
|
bugs
|
RESO
|
FIXE
|
apr_file_transfer_contents change breaks htpasswd(1)
|
2017-07-05
|
61301
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
ab slows dramatically with requests >8192 bytes, httpd seems to be working correctly
|
2017-11-08
|
61310
|
Apache h
|
mod_reqt
|
bugs
|
RESO
|
FIXE
|
mod_reqtimeout does not timeout during SSL handshakes
|
2019-03-27
|
61328
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
provide straightforward option to only respond on configured hostnames
|
2020-02-17
|
61546
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
[PATCH] mod_authz_dbd segfaults when AuthzDBDQuery missing
|
2018-03-24
|
61551
|
Apache h
|
mpm_even
|
bugs
|
RESO
|
FIXE
|
Event MPM loses track of connections not reported as processed by modules
|
2018-01-18
|
61560
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Incorrect string matching used in ProxyPassReverseCookiePath and ProxyPassReverseCookieDomain
|
2018-08-03
|
61820
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
304 headers stripped
|
2021-06-09
|
61979
|
Apache h
|
mpm_even
|
bugs
|
RESO
|
FIXE
|
some listener thread failures do no wake workers
|
2018-03-24
|
62009
|
Apache h
|
mod_http
|
bugs
|
RESO
|
FIXE
|
scoreboard is full with worker MPM
|
2019-07-27
|
62044
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
shared memory segments are not found in global list, but appear to exist in kernel.
|
2020-12-05
|
62149
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
Passwords hashed with SHA-512 are not cached
|
2020-04-19
|
62161
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
no way to ensure error log contains timezone in timestamps
|
2023-07-17
|
62180
|
Apache h
|
mod_xml2
|
bugs
|
RESO
|
FIXE
|
mod_xml2enc destroys error buckets
|
2018-08-04
|
62186
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
ErrorDocument causes POST request getting logged as GET request
|
2018-05-31
|
62190
|
Apache h
|
mod_http
|
bugs
|
RESO
|
FIXE
|
CMakeLists.txt is missing mod_http2_extra_includes
|
2018-07-19
|
62196
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Proxy response headers can be thrown away after processing a large header
|
2018-08-04
|
62198
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
ap_rgetline_core can return without consuming a full line
|
2018-08-04
|
62199
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Make mod_proxy response header size configurable
|
2018-04-11
|
62232
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
AH01962: Unable to create a new SSL connection from the SSL context for proxy connections when using SSLRequire
|
2018-06-18
|
62311
|
Apache h
|
mod_rewr
|
bugs
|
RESO
|
FIXE
|
only create the rewritelock when needed
|
2019-01-26
|
62344
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Failing variable interpolation and memory allocation failure in ProxyHTMLURLMap
|
2019-06-14
|
62362
|
Apache h
|
mod_rate
|
bugs
|
RESO
|
FIXE
|
Proxied content not properly rate-limited
|
2018-08-30
|
62368
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Print unparsed URI in the 'URI incorrectly encoded' error message
|
2018-05-17
|
62469
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
AuthzProviderAlias ignoring all Require-Parameters except first one
|
2018-07-02
|
62568
|
Apache h
|
mod_rate
|
bugs
|
RESO
|
FIXE
|
ERR_INVALID_HTTP_RESPONSE as of 2.4.34 when listing directories
|
2018-10-24
|
62769
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
no dedicated handling of frontend and backend TLS connections anymore in the context of clientside client certificate authentication.
|
2018-11-01
|
62823
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
core_filter call mod_log_config before setting connec_rec to aborted
|
2021-01-16
|
62932
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
bug in function proxy_wstunnel_canon preventing functionality of websocket proxy over Unix Domain Sockets
|
2019-02-15
|
62939
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
DUPL
|
SSLProtocol and TLSv1.3
|
2020-05-06
|
62989
|
Apache h
|
All
|
bugs
|
RESO
|
FIXE
|
HTML generated by Apache httpd itself is often invalid or uses ancient doctypes (and patches to fix that)
|
2020-01-31
|
63079
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Add a debug line if Directory instruction provides an invalid path
|
2020-04-11
|
63092
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Spellcheck: replace inavalid by invalid
|
2019-11-22
|
63095
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
invalid html tag in blancer manager ( ">" missing )
|
2019-03-15
|
63124
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
race condition in mod_auth_digest
|
2019-04-01
|
63136
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
After r1781187 httpd is seg faulting in FIPS mode
|
2019-02-08
|
63192
|
Apache h
|
mod_rate
|
bugs
|
RESO
|
FIXE
|
mod_ratelimit breaks HEAD requests
|
2021-10-15
|
63307
|
Apache h
|
All
|
bugs
|
RESO
|
FIXE
|
apxs gives "use of uninitialized value in concatenation" error
|
2020-03-23
|
63391
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Provide ability to log key material for session decryption
|
2021-09-20
|
63503
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Reverse proxy server - SIGSEGV
|
2020-01-14
|
63628
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Support specifying the http status codes to be considered by ProxyErrorOverride
|
2021-01-16
|
63669
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
Incomplete error code check in read_request_line()
|
2020-01-31
|
63679
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Usage of wrong mctx in ssl_callback_SSLVerify function
|
2020-06-20
|
63687
|
Apache h
|
Core
|
bugs
|
RESO
|
FIXE
|
High Memory usage after upgrade to 2.4.41
|
2020-07-29
|
63688
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Balancer Manager: problem with CSRF protection
|
2020-04-19
|
63959
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
DUPL
|
Empty POST request to a live node after a node failure
|
2020-03-03
|
63965
|
Apache h
|
Platform
|
bugs
|
RESO
|
FIXE
|
Uninitialized variable in winnt_accept()
|
2020-03-08
|
63967
|
Apache h
|
Platform
|
bugs
|
RESO
|
FIXE
|
Missing out-of-memory check in create_process()
|
2020-02-24
|
63971
|
Apache h
|
mod_lua
|
bugs
|
RESO
|
FIXE
|
lua: apr_table_unset for headers_out etc
|
2019-11-30
|
64047
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Libressl #ifdef needed on OpenBSD
|
2020-02-21
|
64049
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
Missing malloc check in sct_parse
|
2020-02-21
|
64077
|
Apache h
|
mod_user
|
bugs
|
RESO
|
FIXE
|
Support SameSite, Secure and httpOnly parameter
|
2020-02-22
|
64135
|
Apache h
|
mod_ssl
|
bugs
|
RESO
|
FIXE
|
OCSP Stapling doesn't handle Keep-Alive responses properly, causing delays/timeouts
|
2021-09-26
|
64138
|
Apache h
|
mod_md
|
bugs
|
RESO
|
FIXE
|
Documentation fix related to TLS
|
2020-02-21
|
64172
|
Apache h
|
mod_auth
|
bugs
|
RESO
|
FIXE
|
Error 'user doesn't appear in group file'
|
2020-04-19
|
64234
|
Apache h
|
mod_prox
|
bugs
|
RESO
|
FIXE
|
Fix random memory-corruption in proxy error-reading-response path for http2 worker setup
|
2021-03-09
|