Patch from Mark Watts. Mention ProxyErrorOverride.

[apache] / CHANGES

diff --git a/CHANGES b/CHANGES
index f38e9cae2fcd08442fbc6077676564561450a213..aa16383327377ebba7a0e90b3632dc2d3b7a6e61 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,5 +1,39 @@
                                                         -*- coding: utf-8 -*-
 
+Changes with Apache 2.3.5
+
+  *) mod_headers: Ensure that changes to the main request remain valid when
+     the subrequest is destroyed. PR 48359 [Nick Kew, Ruediger Pluem]
+
+  *) Core HTTP: disable keepalive when the Client has sent
+     Expect: 100-continue
+     but we respond directly with a non-100 response.
+     Keepalive here led to data from clients continuing being treated as
+     a new request.
+     PR 47087 [Nick Kew]
+
+Changes with Apache 2.3.4
+
+  *) Replace AcceptMutex, LockFile, RewriteLock, SSLMutex, SSLStaplingMutex,
+     and WatchdogMutexPath with a single Mutex directive.  Add APIs to
+     simplify setup and user customization of APR proc and global mutexes.  
+     (See util_mutex.h.)  Build-time setting DEFAULT_LOCKFILE is no longer
+     respected; set DEFAULT_REL_RUNTIMEDIR instead.  [Jeff Trawick]
+
+  *) http_core: KeepAlive no longer accepts other than On|Off.
+     [Takashi Sato]
+
+  *) mod_dav: Remove errno from dav_error interface.  Calls to dav_new_error()
+     and dav_new_error_tag() must be adjusted to add an apr_status_t parameter.
+     [Jeff Trawick]
+
+  *) mod_authnz_ldap: Add AuthLDAPBindAuthoritative to allow Authentication to
+     try other providers in the case of an LDAP bind failure.
+     PR 46608 [Justin Erenkrantz, Joe Schaefer, Tony Stevenson]
+
+  *) Build: fix --with-module to work as documented
+     PR 43881 [Gez Saunders <gez.saunders virgin.net>]
+
 Changes with Apache 2.3.3
 
   *) SECURITY: CVE-2009-3095 (cve.mitre.org)
@@ -9,14 +43,13 @@ Changes with Apache 2.3.3
   *) SECURITY: CVE-2009-3094 (cve.mitre.org)
      mod_proxy_ftp: NULL pointer dereference on error paths.
      [Stefan Fritsch <sf fritsch.de>, Joe Orton]
-     
   *) mod_ssl: enable support for ECC keys and ECDH ciphers.  Tested against
      OpenSSL 1.0.0b3.  [Vipul Gupta <vipul.gupta sun.com>, Sander Temme]
 
-  *) mod_dav_fs: Include uri when logging a PUT error due to connection abort.
+  *) mod_dav: Include uri when logging a PUT error due to connection abort.
      PR 38149. [Stefan Fritsch]
 
-  *) mod_dav_fs: Return 409 instead of 500 for a LOCK request if the parent
+  *) mod_dav: Return 409 instead of 500 for a LOCK request if the parent
      resource does not exist or is not a collection. PR 43465. [Stefan Fritsch]
 
   *) mod_dav_fs: Return 409 instead of 500 for Litmus test case copy_nodestcoll
@@ -30,8 +63,9 @@ Changes with Apache 2.3.3
      old file if the transfer aborted. PR 39815. [Paul Querna, Stefan Fritsch]
 
   *) mod_dav_fs: Remove inode keyed locking as this conflicts with atomically
-     creating files. This is a format cange of the DavLockDB. The old
-     DavLockDB must be deleted on upgrade. [Stefan Fritsch]
+     creating files. On systems with inode numbers, this is a format change of
+     the DavLockDB. The old DavLockDB must be deleted on upgrade.
+     [Stefan Fritsch]
 
   *) mod_log_config: Make ${cookie}C correctly match whole cookie names
      instead of substrings. PR 28037. [Dan Franklin <dan dan-franklin.com>,