while x.{even}.z versions are Stable/GA releases.]
2.4.19 : In development.
- 2.4.18 : Tagged on December 8, 2015.
+ 2.4.18 : Tagged on December 8, 2015. Released on December 14, 2015.
2.4.17 : Tagged on October 9, 2015. Released October 13, 2015.
2.4.16 : Tagged on July 9, 2015. Released July 15, 2015
2.4.15 : Tagged on June 19, 2015. Not released.
PATCHES ACCEPTED TO BACKPORT FROM TRUNK:
[ start all new proposals below, under PATCHES PROPOSED. ]
+
+
PATCHES PROPOSED TO BACKPORT FROM TRUNK:
[ New proposals should be added at the end of the list ]
- *) mod_alias: Introduce expression parser support for Alias, ScriptAlias
- and Redirect. Limit Redirect expressions to directory (Location) context
- and redirect statuses (implicit or explicit).
- trunk patch: http://svn.apache.org/r1653941
- http://svn.apache.org/r1653978
- http://svn.apache.org/r1656225
- http://svn.apache.org/r1686853
- http://svn.apache.org/r1686856
- 2.4.x patch: https://people.apache.org/~minfrin/httpd-mod_alias-expr2.patch
- +1: minfrin, jim
-
- * core: Fix crash in ap_mpm_pod_check call caused by NULL dereference of
- its parameter when starting httpd as single process (httpd -X).
- trunk patch: http://svn.apache.org/r1711479
- 2.4.x patch: trunk works
- +1: jkaluza, jim
- minfrin: Needs extra parens to suppress a warning:
- prefork.c:1319:16: note: place parentheses around the assignment
- to silence this warning
- jailletc36: This has been done in r1711919
- ylavic: Also, I don't think the changes on worker/event are needed,
- prefork only requires the accept mutex in ONE_PROCESS mode.
-
- *) mod_ssl: Fix missing TLS Upgrade/Connection headers on OPTIONS * requests
- (Note that this is simply a necessary band-aid, and still won't allow h2c
- to peacefully coexist with tls/n.n upgrades, because Upgrade phase needs
- to come earlier, not as a handler, and the bogus connection-close behavior
- must be removed before the Protocol API can handle TLS upgrade.)
- PR58688
- trunk patch: http://svn.apache.org/r1717816
- +1: wrowe, icing
- ylavic: how about adding !ap_request_has_body(r) to the test then?
- wrowe responds: nonstarter, as discussed on list.
-
*) mod_ssl: Free dhparams when getting DH params. This fixes issue when
SSLCryptoDevice does not get unregistered because of non-zero refcount
during the mod_ssl unload happening on httpd startup.
trunk patch: http://svn.apache.org/r1720129
2.4.x patch: http://jkaluza.fedorapeople.org/httpd-2.4.x-dhparams-free.patch
+1: jkaluza
+ ylavic: +1 with r1723295 (likewise for ecparams).
+ rpluem says: Can we get an updated 2.4.x proposal that includes r1723295?
+ ylavic: working on it...
- *) mod_cache_socache: Fix a possible cached entity body corruption when it
- is received from an origin server in multiple batches and forwarded by
- mod_proxy.
- trunk patch: http://svn.apache.org/r1721899
- 2.4.x patch: trunk works, module CHANGES
- +1: ylavic, jim
-
- *) core: Add expression support to SetHandler (someone wanted this in
- a well-articulated serverfault post).
- trunk patch: http://svn.apache.org/r1725149
- http://svn.apache.org/r1725151
- http://svn.apache.org/r1726233
- 2.4.x patch: MMN/changes only: http://people.apache.org/~covener/patches/2.4.x-sethandler-expr-2.diff
- +1: covener, jim
-
- *) Add APLOGNO, first chunk (those that were detected by coccinelle).
- There are some more but they are easier to backport once these here are applied.
- trunk patch: http://svn.apache.org/r1725392 (modules)
- http://svn.apache.org/r1725394 (server/mpm)
- http://svn.apache.org/r1725395 (server others)
- http://svn.apache.org/r1725468 (remove APLOGNO from mod_log_debug custom messages)
- 2.4.x patch: http://people.apache.org/~rjung/patches/aplogno-backport-r1725392.patch
- http://people.apache.org/~rjung/patches/aplogno-backport-r1725394.patch
- http://people.apache.org/~rjung/patches/aplogno-backport-r1725395.patch
- http://people.apache.org/~rjung/patches/aplogno-backport-r1725468.patch
- +1: rjung
- icing: needs http://svn.apache.org/r1725468
- rjung: You are right, I added r1725468 and restart the vote.
- @Jim: Only r1725468 is new: removing the added APLOGNO from
- mod_log_debug where we actually log the configured custom
- log messages. Admins can provide their own LOGNO as part
- of the ocnfigured log message. It doesn't make sense to
- use a fixed AH one.
-
- *) mod_ssl: handle APR_TIMEUP on empty input by keeping connection state valid
- for later retries.
- trunk patch: http://svn.apache.org/r1725940
+ *) mod_proxy_hcheck: Dynamic reverse proxy backend health check module
+ Trunk version of patch: <various>
+ Backport version for 2.4.x of patch:
+ http://home.apache.org/~jim/patches/hcheck-2.4.patch
+ <Plus docs>
+ +1: jim
+ ylavic: Needs r1732957 for empty APLOGNO()s.
+ ylavic: Looks like the changes on struct proxy_worker_shared would break
+ startup with "BalancerPersist on" due to the strict checks on
+ the sizes of existing slotmems (slotmem_create/attach)?
+
+ *) core: Track the useragent_host per-request when mod_remoteip or similar
+ modules track a per-request useragent_ip. Modules should be updated
+ to inquire for ap_get_useragent_host() in place of ap_get_remote_host().
+ Trunk version of patch:
+ http://svn.apache.org/r1729929
+ Trunk patch to core.c/http_core.h applies, modulo CHANGES & ap_mmn.h
+ Note: httpd.h comment r.e. realiging bit fields must be omitted.
+ +1: wrowe
+
+ *) hostname: Test and log useragent_host per-request across various modules,
+ including the scoreboard, expression and rewrite engines, setenvif,
+ authz_host, access_compat, custom logging, ssl and REMOTE_HOST variables.
+ PR55348 [William Rowe]
+ Trunk version of patch:
+ http://svn.apache.org/r1729930
+ http://svn.apache.org/r1729931
+ Trunk patch r1729930 applies, modulo CHANGES
+ Backport patch to r1729931 is noted in the commit log message
+ Requires r1729929 to be applied.
+ +1: wrowe
+
+ *) Use pre_connection hook in event.c to properly setup connection state
+ of slave connections (eliminates hacks in mod_http2).
+ Trunk patch:
+ http://svn.apache.org/r1727603
+ 2.4.x patch:
+ Trunk version of patch works modulo CHANGES
+1: icing
- *) mod_lbmethod_heartbeat: No need to search twice for the same value
- trunk patch: http://svn.apache.org/r1725445
- 2.4.x patch: trunk works
- +1: jailletc36, icing
-
- *) When more than one module calls APACHE_CHECK_OPENSSL, MOD_LDFLAGS and MOD_CFLAGS
- remain unset for second or later caller. Fix this by caching the values for
- MOD_LDFLAGS and MOD_CFLAGS created during the first run and set them in the
- cached case. Change by rpluem
- trunk patch: http://svn.apache.org/r1725325
- 2.4.x patch: trunk works
- +1: icing
+ *) Save a few bytes in conf pool when parsing some directives
+ Trunk patch:
+ http://svn.apache.org/r1732252
+ http://svn.apache.org/r1732353
+ http://svn.apache.org/r1732369
+ 2.4.x patch:
+ Trunk version of patch works
+ +1: jailletc36, ylavic
+
+ *) proxy_util: Add missing APLOGNO()s from r1732266 (already backported
+ to 2.4.x/19)
+ trunk patch: http://svn.apache.org/r1732954
+ 2.4.x patch: trunk works (modulo docs/log-message-tags)
+ +1: ylavic
- *) mod_ssl: Fix some duplicate definitions
- trunk patch: http://svn.apache.org/r1726888
- 2.4.x patch: trunk works
- +1: mrumph, icing
-
- *) core: introducing new hook "pre_close_connection" to give protocols other
- than http/1.1 a chance to send one last frame before close.
- Requires MMN bump
- trunk patch: http://svn.apache.org/r1727071
- http://svn.apache.org/r1727573
- 2.4.x patch: trunk works (modulo CHANGES)
- +1: icing
+ *) core: Add missing APLOGNO() from r1729495 (somehow r1725395 was
+ backported in r1729495 but without this "server/core.c" change)
+ trunk patch: http://svn.apache.org/viewvc/httpd/httpd/trunk/server/core.c?r1=1725395&r2=1725394&pathrev=1725395&view=patch
+ 2.4.x patch: trunk above works
+ +1: ylavic
- *) core: Prevent a server crash in case of an invalid CONNECT request with
- a custom error page for status code 400 that uses server side includes.
- PR 58929
- Trunk version of patch:
- http://svn.apache.org/r1727544
- Backport version for 2.4.x of patch:
- Trunk version of patch works modulo CHANGES
- +1: rpluem,
+ *) mod_proxy: Play/restore the TLS-SNI on new backend connections which
+ had to be issued because the remote closed the previous/reusable one
+ during idle (keep-alive) time.
+ trunk patch: http://svn.apache.org/r1729826
+ http://svn.apache.org/r1729847
+ http://svn.apache.org/r1732986
+ http://svn.apache.org/r1733056
+ 2.4.x patch: http://people.apache.org/~ylavic/httpd-2.4.x-mod_proxy-SNI_reuse-v2.patch
+ +1: ylavic
+
+ *) core: Fix a bug in <UnDefine ...> directive processing. When used, the
+ last <Define...>'ed variable was also withdrawn. PR 59019
+ Trunk patch:
+ http://svn.apache.org/r1732716
+ 2.4.x patch:
+ Trunk version of patch works (modulo CHNAGES)
+ +1: jailletc36
+
+ * prefork: Fix crash in ap_mpm_pod_check call caused by NULL dereference of
+ its parameter when starting httpd as single process (httpd -X).
+ trunk patch: http://svn.apache.org/r1711479
+ http://svn.apache.org/r1733064
+ http://svn.apache.org/r1733068
+ 2.4.x patch: http://people.apache.org/~ylavic/httpd-2.4.x-prefork-ONE_PROCESS_POD.patch
+ +1: ylavic
- *) mod_ssl: Add SSLOCSPProxyURL to add the possibility to do all queries
- to OCSP responders through a HTTP proxy.
- Trunk version of patch:
- http://svn.apache.org/r1726881
- http://svn.apache.org/r1727111
- Backport version for 2.4.x of patch:
- Trunk version of patch works modulo CHANGES
- +1: rpluem,
PATCHES/ISSUES THAT ARE BEING WORKED
http://svn.apache.org/r1618588
2.4.x patch: http://people.apache.org/~jkaluza/patches/mod_systemd/httpd-2.4.x-mod_systemd.patch
+1: jkaluza
+ sf comments: The IdleShutdown logic seems broken. Consider a single
+ active connection that is stalled for 10 seconds. That
+ connection will be broken after GracefulShutdownTimeout.
+ A better logic would be to check if there is any open
+ connection that is not in keep-alive state.
* mod_journald: Add new module mod_journald to log error logs into journald.
This patch needs changes done in mod_systemd patch (already