*) SECURITY: CVE-2014-3583 (cve.mitre.org)
mod_proxy_fcgi: Fix a potential crash due to buffer over-read, with
response headers' size above 8K. [Yann Ylavic, Jeff Trawick]
-
*) SECURITY: CVE-2014-3581 (cve.mitre.org)
mod_cache: Avoid a crash when Content-Type has an empty value.
PR 56924. [Mark Montague <mark catseye.org>, Jan Kaluza]
request headers earlier. Adds "MergeTrailers" directive to restore
legacy behavior. [Edward Lu, Yann Ylavic, Joe Orton, Eric Covener]
+ *) core: Fix -D[efined] or <Define>[d] variables lifetime accross restarts.
+ PR 57328. [Armin Abfalterer <a.abfalterer gmail.com>, Yann Ylavic].
+
*) mod_proxy: Preserve original request headers even if they differ
from the ones to be forwarded to the backend. PR 45387.
[Yann Ylavic]
2.4.x patch: https://issues.apache.org/bugzilla/attachment.cgi?id=32209
+1: druggeri, gsmith, rjung
- * core: Fix -D[efined] or <Define>[d] variables lifetime accross restarts.
- PR 57328.
- trunk patch: http://svn.apache.org/r1643825
- 2.4.x patch: trunk works (module CHANGES)
- +1: ylavic, rjung, trawick
-
PATCHES PROPOSED TO BACKPORT FROM TRUNK:
[ New proposals should be added at the end of the list ]
static int reset_config_defines(void *dummy)
{
ap_server_config_defines = saved_server_config_defines;
+ saved_server_config_defines = NULL;
server_config_defined_vars = NULL;
return OK;
}