dev  

Messages by Thread

• Antw: Httpd 2.4.69 crash with mod_authnz_ldap.so Steffen via dev
• Httpd 2.4.69 crash with mod_authnz_ldap.so Steffen via dev
  • Re: Httpd 2.4.69 crash with mod_authnz_ldap.so Eric Covener
• Re: svn commit: r1938292 - in httpd/httpd/trunk: modules/metadata test/modules/proxy Rainer Jung
• Re: svn commit: r1938194 - in httpd/httpd/trunk: changes-entries include modules/http modules/mappers modules/metadata modules/proxy server test/modules/proxy test/unit Rainer Jung
• CVE-2026-59685: Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM Eric Covener
• CVE-2026-73637: Apache HTTP Server: mod_auth_digest DoS attack Eric Covener
• CVE-2026-63686: Apache HTTP Server: mod_xml2enc crash on charset conversion failure Eric Covener
• CVE-2026-63292: Apache HTTP Server: mod_vhost_alias stack overflow Eric Covener
• CVE-2026-73636: Apache HTTP Server: mod_auth_digest one-time-nonce replay attack Eric Covener
• CVE-2026-63718: Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling Eric Covener
• CVE-2026-63045: Apache HTTP Server: mod_proxy_ftp PASV address handling Eric Covener
• CVE-2026-59797: Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function Eric Covener
• CVE-2026-58415: Apache HTTP Server: mod_dav_fs property database read access Eric Covener
• CVE-2026-57941: Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy Eric Covener
• CVE-2026-56449: Apache HTTP Server: mod_proxy_html: crash in dump_content Eric Covener
• CVE-2026-56154: Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...} Eric Covener
• CVE-2026-56153: Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char Eric Covener
• CVE-2026-48005: Apache HTTP Server: mod_auth_digest reauthentication attack Eric Covener
• CVE-2026-47360: Apache HTTP Server: mod_session: Session cookie not removed during internal redirect Eric Covener
• CVE-2026-46729: Apache HTTP Server: mod_heartmonitor denial of service Eric Covener
• CVE-2026-42528: Apache HTTP Server: mod_dav shared lock overflow Eric Covener
• [VOTE] Release httpd-2.4.69-rc1 as httpd-2.4.69 Eric Covener
  • Re: [VOTE] Release httpd-2.4.69-rc1 as httpd-2.4.69 Joe Orton
  • Re: [VOTE] Release httpd-2.4.69-rc1 as httpd-2.4.69 Eric Covener
  • Re: [VOTE] Release httpd-2.4.69-rc1 as httpd-2.4.69 Giovanni Bechis
  • Re: [VOTE] Release httpd-2.4.69-rc1 as httpd-2.4.69 Frank Gingras
  • Re: [VOTE] Release httpd-2.4.69-rc1 as httpd-2.4.69 Jeff McKenna
  • Re: [VOTE] Release httpd-2.4.69-rc1 as httpd-2.4.69 Jim Jagielski
  • Re: [VOTE] Release httpd-2.4.69-rc1 as httpd-2.4.69 Giannis Christodoulou
  • Re: [VOTE] Release httpd-2.4.69-rc1 as httpd-2.4.69 Eric Covener
  • Re: [VOTE] Release httpd-2.4.69-rc1 as httpd-2.4.69 Rainer Jung
  • 2.4.x deprecation warnings Joe Orton
  • Re: 2.4.x deprecation warnings Rainer Jung
  • Re: [VOTE] Release httpd-2.4.69-rc1 as httpd-2.4.69 jean-frederic clere
  • Re: [VOTE] Release httpd-2.4.69-rc1 as httpd-2.4.69 Eric Covener
  • Re: [VOTE] Release httpd-2.4.69-rc1 as httpd-2.4.69 SteffenAL via dev
  • Re: [VOTE] Release httpd-2.4.69-rc1 as httpd-2.4.69 Eric Covener
  • Re: [VOTE] Release httpd-2.4.69-rc1 as httpd-2.4.69 Steffen via dev
• Trunk problem with detection for OpenSSL &errno as a THREADID Rainer Jung
  • Re: Trunk problem with detection for OpenSSL &errno as a THREADID Joe Orton
  • Re: Trunk problem with detection for OpenSSL &errno as a THREADID Rainer Jung
• RFC: mod_mime_magic based on libmagic Joe Orton
  • Re: RFC: mod_mime_magic based on libmagic Ruediger Pluem
  • Re: RFC: mod_mime_magic based on libmagic Joe Orton
  • Re: RFC: mod_mime_magic based on libmagic Rainer Jung
  • Re: RFC: mod_mime_magic based on libmagic Joe Orton
  • Re: RFC: mod_mime_magic based on libmagic Rainer Jung
  • Re: RFC: mod_mime_magic based on libmagic Eric Covener
  • Re: RFC: mod_mime_magic based on libmagic Joe Orton
  • Re: RFC: mod_mime_magic based on libmagic Ruediger Pluem
  • Re: RFC: mod_mime_magic based on libmagic Joe Orton
  • Re: RFC: mod_mime_magic based on libmagic Jim Jagielski
• [PROPOSAL] mod_env: new SetEnvFromFile directive (PR #750) Cornel Isbiceanu via dev
  • Re: [PROPOSAL] mod_env: new SetEnvFromFile directive (PR #750) Joe Orton
  • Re: [PROPOSAL] mod_env: new SetEnvFromFile directive (PR #750) Eric Covener
  • Re: [PROPOSAL] mod_env: new SetEnvFromFile directive (PR #750) Ruediger Pluem
  • Re: [PROPOSAL] mod_env: new SetEnvFromFile directive (PR #750) Eric Covener
  • Re: [PROPOSAL] mod_env: new SetEnvFromFile directive (PR #750) Ruediger Pluem
  • Re: [PROPOSAL] mod_env: new SetEnvFromFile directive (PR #750) Cornel Isbiceanu via dev
  • Re: [PROPOSAL] mod_env: new SetEnvFromFile directive (PR #750) Cornel Isbiceanu via dev
  • Re: [PROPOSAL] mod_env: new SetEnvFromFile directive (PR #750) Joe Orton
• small CI update on trunk Joe Orton
• Working towards HTTP3 - current MPM's only support TCP connections Steffen
  • Re: Working towards HTTP3 - current MPM's only support TCP connections Aleksandr Gerasimov via dev
  • Re: Working towards HTTP3 - current MPM's only support TCP connections Tarek
  • Re: Working towards HTTP3 - current MPM's only support TCP connections jean-frederic clere
  • Re: Working towards HTTP3 - current MPM's only support TCP connections Oleksandr Gerasymov via dev
  • Re: Working towards HTTP3 - current MPM's only support TCP connections tarek i
  • Re: Working towards HTTP3 - current MPM's only support TCP connections Oleksandr Gerasymov via dev
  • Re: Working towards HTTP3 - current MPM's only support TCP connections Graham Leggett via dev
  • Re: Working towards HTTP3 - current MPM's only support TCP connections Tarek
  • Re: Working towards HTTP3 - current MPM's only support TCP connections Graham Leggett via dev
  • Re: Working towards HTTP3 - current MPM's only support TCP connections Helmut K. C. Tessarek
  • Re: Working towards HTTP3 - current MPM's only support TCP connections Graham Leggett via dev
  • Re: Working towards HTTP3 - current MPM's only support TCP connections tarek i
• mod_ssl: Add support for OpenSSL providers Graham Leggett via dev
  • Re: mod_ssl: Add support for OpenSSL providers Joe Orton
  • Re: mod_ssl: Add support for OpenSSL providers Graham Leggett via dev
  • Re: mod_ssl: Add support for OpenSSL providers Joe Orton
  • Re: mod_ssl: Add support for OpenSSL providers Graham Leggett via dev
  • Re: mod_ssl: Add support for OpenSSL providers Joe Orton
  • Re: mod_ssl: Add support for OpenSSL providers Graham Leggett via dev
  • Re: mod_ssl: Add support for OpenSSL providers Daniel
• Machine-readable license information with REUSE Volker Weißmann
• mod_ssl_ct cannot find openssl on MacOS Graham Leggett via dev
  • Re: mod_ssl_ct cannot find openssl on MacOS Roy T. Fielding
• httpd-test: mod_test_session included, mod_session excluded, tests break Graham Leggett via dev
• Re: svn commit: r1936367 - in httpd/httpd/trunk/docs/manual: mod rewrite style/lang Eric Covener
  • Re: svn commit: r1936367 - in httpd/httpd/trunk/docs/manual: mod rewrite style/lang Rich Bowen
  • Re: svn commit: r1936367 - in httpd/httpd/trunk/docs/manual: mod rewrite style/lang Joe Orton
• [I] Not Handling Spaces In Wrapper Path [httpd-mod_fcgid] via GitHub
  • Re: [I] Not Handling Spaces In Wrapper Path [httpd-mod_fcgid] via GitHub
  • Re: [I] Not Handling Spaces In Wrapper Path [httpd-mod_fcgid] via GitHub
• Re: svn commit: r1934995 - in httpd/httpd/trunk: . docs/log-message-tags docs/manual/mod modules/proxy test/pytest_suite/t/conf test/pytest_suite/tests/t/modules Eric Covener
• OK to backport mod_md 2.6.11 features? Rainer Jung
  • Re: OK to backport mod_md 2.6.11 features? Eric Covener
  • Re: OK to backport mod_md 2.6.11 features? Ruediger Pluem
  • Re: OK to backport mod_md 2.6.11 features? Joe Orton
• Re: svn commit: r1935199 - httpd/docs-build/trunk Ruediger Pluem
• Ancient Contributors page Rich Bowen
  • Re: Ancient Contributors page Joe Orton
  • Re: Ancient Contributors page Peter
  • Re: Ancient Contributors page Roy T. Fielding
  • Re: Ancient Contributors page Rich Bowen
  • httpd.apache.org: Dealing with historical/outdated pages (was: Re: Ancient Contributors page) Philippe Cloutier
  • Re: httpd.apache.org: Dealing with historical/outdated pages (was: Re: Ancient Contributors page) Rich Bowen
  • Re: httpd.apache.org: Dealing with historical/outdated pages Philippe Cloutier
  • Re: Ancient Contributors page Philippe Cloutier
  • https://httpd.apache.org/contributors/ outdated: Abort, Retry, Fail? (was: Ancient Contributors page) Philippe Cloutier
• Project Showcase: Siteload.net (built using Apache Benchmark) Rodion Vynohradov
• CVE-2026-49975: Apache HTTP Server: mod_http2 denial of service Eric Covener
• CVE-2026-48913: Apache HTTP Server: mod_http2 memory corruption when file handles exhausted Eric Covener
• CVE-2026-44631: Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow Eric Covener
• CVE-2026-44186: Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp Eric Covener
• CVE-2026-44185: Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request` Eric Covener
• CVE-2026-43951: Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash Eric Covener
• CVE-2026-44119: Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules Eric Covener
• CVE-2026-42536: Apache HTTP Server: mod_xml2enc heap overflow Eric Covener
• CVE-2026-42535: Apache HTTP Server: mod_dav_fs protected directory access Eric Covener
• Re: [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68-Apache Mail Archives Steffen
  • Re: [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68-Apache Mail Archives Rainer Jung
• [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68 Eric Covener
  • Re: [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68 Eric Covener
  • Re: [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68 Joe Orton
  • Re: [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68 Jim Jagielski
  • Re: [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68 Frank Gingras
  • Re: [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68 Jeff McKenna
  • Re: [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68 Pierre Brochard
  • Re: [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68 Christophe JAILLET
  • Re: [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68 Steffen
  • Re: [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68 Rainer Jung
  • Re: [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68 Mario Brandt
  • Re: [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68 Eric Covener
• mod_http2/mod_md upkeep Stefan Eissing via dev
  • Re: mod_http2/mod_md upkeep Joe Orton
  • Re: mod_http2/mod_md upkeep Stefan Eissing via dev
  • Re: mod_http2/mod_md upkeep Stefan Eissing via dev
• Release timeline for version 2.4.68 Abfalterer, Armin
• Coming soon - Automatic back-end servers addition Jim Jagielski
• Perl to Python Jim Jagielski
  • Re: Perl to Python Joe Orton
  • Re: Perl to Python Jim Jagielski
  • Re: Perl to Python Giannis Christodoulou
• help needed: Windows CI broken Joe Orton
  • Re: help needed: Windows CI broken Jeff McKenna
  • Re: help needed: Windows CI broken Jeff McKenna
  • Re: help needed: Windows CI broken Joe Orton
  • Re: help needed: Windows CI broken Jeff McKenna
  • Re: help needed: Windows CI broken Jeff McKenna
  • Re: help needed: Windows CI broken Vladimir Chlup
  • Re: help needed: Windows CI broken Paul Lodge
  • Re: help needed: Windows CI broken Jeff McKenna
  • Re: help needed: Windows CI broken Jeff McKenna
  • Re: help needed: Windows CI broken Vladimir Chlup
  • Re: help needed: Windows CI broken Jeff McKenna
  • Re: help needed: Windows CI broken Paul Lodge
  • Re: help needed: Windows CI broken Jeff McKenna
  • Re: help needed: Windows CI broken Joe Orton
  • Re: help needed: Windows CI broken Ivan Zhakov
• motorz Jim Jagielski
  • Re: motorz Eric Covener
  • Re: motorz Ruediger Pluem
  • MotorZ in trunk Jim Jagielski
  • Re: MotorZ in trunk Jim Jagielski
• release soon, need http2 reviews/votes Eric Covener
  • Re: release soon, need http2 reviews/votes Eric Covener
• Test suite - commit process clarifications Giannis Christodoulou
  • Re: Test suite - commit process clarifications Joe Orton
  • Re: Test suite - commit process clarifications Eric Covener
  • Re: Test suite - commit process clarifications jean-frederic clere
  • [VOTE] add cmake and tests to 2.4.x RTC exceptions Joe Orton
  • Re: [VOTE] add cmake and tests to 2.4.x RTC exceptions Eric Covener
  • Re: [VOTE] add cmake and tests to 2.4.x RTC exceptions Rainer Jung
  • Re: [VOTE] add cmake and tests to 2.4.x RTC exceptions Giannis Christodoulou
  • Re: [VOTE] add cmake and tests to 2.4.x RTC exceptions Ruediger Pluem
  • Re: [VOTE] add cmake and tests to 2.4.x RTC exceptions Jim Jagielski
  • Re: [VOTE] add cmake and tests to 2.4.x RTC exceptions Jim Jagielski
  • Re: [VOTE] add cmake and tests to 2.4.x RTC exceptions Dennis Clarke
  • [RESULT] Re: [VOTE] add cmake and tests to 2.4.x RTC exceptions Joe Orton
• Mod Random Pierre Pilou
• Httpd website modernization Rich Bowen
• [RFC] Describe the security model Joe Orton
  • Re: [RFC] Describe the security model Rich Bowen
  • Re: [RFC] Describe the security model Emmanuel Dreyfus
  • Re: [RFC] Describe the security model Joe Orton
  • Re: [RFC] Describe the security model Emmanuel Dreyfus
  • Re: [RFC] Describe the security model Ruediger Pluem
  • Re: [RFC] Describe the security model Ruediger Pluem
  • Re: [RFC] Describe the security model Joe Orton
  • Re: [RFC] Describe the security model Joe Orton
• Stale bugs closes Bowen, Rich
• May 2026 Board report (draft) Joe Orton
  • Re: May 2026 Board report (draft) Dennis Clarke
• [VOTE] commit Low/Moderate severity security issues to public repos Joe Orton
  • Re: [VOTE] commit Low/Moderate severity security issues to public repos Eric Covener
  • Re: [VOTE] commit Low/Moderate severity security issues to public repos Rainer Jung
  • Re: [VOTE] commit Low/Moderate severity security issues to public repos Steffen
  • Re: [VOTE] commit Low/Moderate severity security issues to public repos Peter
  • Re: [VOTE] commit Low/Moderate severity security issues to public repos Frank Gingras

• Earlier messages