apache2/httpd-2.4.28.tar.bz2.asc

- updated to 2.4.28: ) SECURITY: CVE-2017-9798 (cve.mitre.org) Corrupted or freed memory access. <Limit[Except]> must now be used in the main configuration file (httpd.conf) to register HTTP methods before the .htaccess files. [Yann Ylavic] ) event: Avoid possible blocking in the listener thread when shutting down connections. PR 60956. [Yann Ylavic] ) mod_speling: Don't embed referer data in a link in error page. PR 38923 [Nick Kew] ) htdigest: prevent a buffer overflow when a string exceeds the allowed max length in a password file. [Luca Toscano, Hanno Böck <hanno hboeck de>] ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25). [Jim Jagielski] ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically. PR 61142. ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond), 's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski] ) mod_http2: Fix for stalling when more than 32KB are written to a suspended stream. [Stefan Eissing] ) build: allow configuration without APR sources. [Jacob Champion] ) mod_ssl, ab: Fix compatibility with LibreSSL. PR 61184. [Bernard Spil <brnrd freebsd.org>, Michael Schlenker <msc contact.de>, Yann Ylavic] ) core/log: Support use of optional "tag" in syslog entries. PR 60525. [Ben Rubson <ben.rubson gmail.com>, Jim Jagielski] ) mod_proxy: Fix ProxyAddHeaders merging. [Joe Orton] *) core: Disallow multiple Listen on the same IP:port when listener buckets are configured (ListenCoresBucketsRatio > 0), consistently with the single OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=527 2017-10-06 07:51:06 +00:00			`-----BEGIN PGP SIGNATURE-----`

			`iQIVAwUAWcjw5zTqduZ5FIWoAQr5EQ/7BXT4HjCD3eUJK9OymmpchCYZL1l4uZNy`
			`4oywYvn5THhWy4i9+sOxgju4LFQJCUlu/Cmqeh5bZgZIfdCAnxNANiNmtIaL0gum`
			`in0ZmLYeiJHLT1qkUYUhmUgRXoUTG5GBeHEhKaQUG36aywYlJK/OVRxEA/tqaLPX`
			`SyaUCHao98E0UjarDvSLwpH1/7KAA8GyknEaZnTXhnyFboEFGRiI2xpkeRM8NhNh`
			`ASIq0YfndBlneG4uHlsPoWLcFp5HttQ9YdpBo39sbSVLKFlUg9XYK/3n0mh3Xx5Z`
			`xowVOs2/5gP2sPjmC92ycx3LRlwK7ygw1/Dx/dImuhTtTAL7OG6i1/qFNY1utNCh`
			`LAddU/on5YQz5beV1LjZip9ef4yBikqBsRUtyu/fQG+EqiszzpxxHf+JfaWXl+hu`
			`NoFIALVtSEBf8LHT0cvIRWY3Id05nYDpknGiuNxuDIpYc4qdY7yDOa6lPeS3kGzC`
			`iPFh63B6nhzNudNWCT0YH2mLKGs6szDM4Hwh13Kotva3vus7UWv4O8jFAiSPvO8h`
			`aNpfy2IMcvjuXBu4oWbuu/X6l0FLZo/LKGzvUDZiG62Z1RCH/zg9f5OiBVIlEIWM`
			`INe6IsivQOM3DMNJX6U3VZUyx2hN4J5O31bkP4qMoNnHOzA7PD9JX4owirpxy4eZ`
			`Y2Ywbc9jeBk=`
			`=kUfO`
			`-----END PGP SIGNATURE-----`