bugs  

Messages by Thread

• [Bug 70300] New: Internal error (specific information not available) obtaining certificate bugzilla.apache.org via bugs
• [Bug 70299] New: mod_dav_lock: dav_generic_load_lock_record() reads the indirect-lock key length as a 4-byte int, but the save path always writes it as a full apr_size_t bugzilla.apache.org via bugs
• [Bug 70298] New: mod_dav_lock: dav_size_indirect() reserves sizeof(int) for a field written as apr_size_t bugzilla
  • [Bug 70298] mod_dav_lock: dav_size_indirect() reserves sizeof(int) for a field written as apr_size_t bugzilla.apache.org via bugs
  • [Bug 70298] mod_dav_lock: dav_size_indirect() reserves sizeof(int) for a field written as apr_size_t bugzilla.apache.org via bugs
  • [Bug 70298] mod_dav_lock: dav_size_indirect() reserves sizeof(int) for a field written as apr_size_t bugzilla.apache.org via bugs
• [Bug 70294] New: mod_socache_dbm: socache_dbm_iterate skips apr_dbm_close() when the iterator callback fails, leaking an open DBM handle bugzilla
  • [Bug 70294] mod_socache_dbm: socache_dbm_iterate skips apr_dbm_close() when the iterator callback fails, leaking an open DBM handle bugzilla
• [Bug 70295] New: REMOTE_PORT environment variable is invalid when using mod_remoteip bugzilla
  • [Bug 70295] REMOTE_PORT environment variable is invalid when using mod_remoteip bugzilla
  • [Bug 70295] REMOTE_PORT environment variable is invalid when using mod_remoteip bugzilla
• [Bug 70293] New: mod_proxy_balancer: balancer_handler ignores PROXY_THREAD_LOCK failure yet still calls PROXY_THREAD_UNLOCK, unlike the other three call sites in the same file bugzilla
  • [Bug 70293] mod_proxy_balancer: balancer_handler ignores PROXY_THREAD_LOCK failure yet still calls PROXY_THREAD_UNLOCK, unlike the other three call sites in the same file bugzilla
• [Bug 70291] New: mod_ssl: Missing NULL check for sk_X509_INFO_new_null() in ssl_init_proxy_certs() bugzilla
  • [Bug 70291] mod_ssl: Missing NULL check for sk_X509_INFO_new_null() in ssl_init_proxy_certs() bugzilla
• [Bug 70289] New: mod_cache stores Vary: * responses when mod_headers adds Vary with Header always bugzilla
  • [Bug 70289] mod_cache stores Vary: * responses when mod_headers adds Vary with Header always bugzilla.apache.org via bugs
  • [Bug 70289] mod_cache stores Vary: * responses when mod_headers adds Vary with Header always bugzilla.apache.org via bugs
  • [Bug 70289] mod_cache stores Vary: * responses when mod_headers adds Vary with Header always bugzilla.apache.org via bugs
  • [Bug 70289] mod_cache stores Vary: * responses when mod_headers adds Vary with Header always bugzilla.apache.org via bugs
  • [Bug 70289] mod_cache stores Vary: * responses when mod_headers adds Vary with Header always bugzilla.apache.org via bugs
  • [Bug 70289] mod_cache stores Vary: * responses when mod_headers adds Vary with Header always bugzilla.apache.org via bugs
  • [Bug 70289] mod_cache stores Vary: * responses when mod_headers adds Vary with Header always bugzilla.apache.org via bugs
• [Bug 66387] Per directory fcgi handler is ignored if there is a global fcgi handler bugzilla
  • [Bug 66387] Per directory fcgi handler is ignored if there is a global fcgi handler bugzilla
• [Bug 66480] AuthBasicFake does not seem to work with e.g. AuthUserFile/Require bugzilla
• [Bug 70284] New: Require ssl-verify-client broken with h2 bugzilla
  • [Bug 70284] Require ssl-verify-client broken with h2 bugzilla.apache.org via bugs
• [Bug 63891] Balancer failover fails for POST with small request Body and CL set bugzilla
• [Bug 66033] Latent read beyond bounds in ap_is_matchexp() [zhbug_httpd_46.2] bugzilla
• [Bug 60947] Segfault on startup when using mod_ssl with APR-crypto bugzilla
• [Bug 66119] Segmentation fault in libpcre when processing Location regex match for a long request path when MPM worked is used in 2.4.53+ bugzilla
• [Bug 66525] document when certificate/key/CRL/etc. files are reloaded bugzilla
• [Bug 68257] FallbackResource causes DirectoryIndex to fail after first try bugzilla
• [Bug 66034] Read beyond bounds via mod_substitute.c [zhbug_httpd_22.1] bugzilla
• [Bug 70282] New: RFE: handle Retry-After from ACME server bugzilla
  • [Bug 70282] RFE: handle Retry-After from ACME server bugzilla
• [Bug 66333] hdjsjshajajaj bugzilla
• [Bug 70275] New: mod_autht_jwt only enforces the "exp" (expiry) and "nbf" (not-before) claims when their JSON value is an integer. If the value is a float or a string, the check is silently skipped and the token is accepted. An expired token whose "exp" is encoded as a fl bugzilla
• [Bug 70277] New: mod_autht_jwt: HAVE_APU_JOSE gate evaluated before apu_version.h is included → module compiles as a no-op stub bugzilla
  • [Bug 70277] mod_autht_jwt: HAVE_APU_JOSE gate evaluated before apu_version.h is included → module compiles as a no-op stub bugzilla.apache.org via bugs
• [Bug 70276] New: mod_autht_jwt: apr_jose_signature_make() called with wrong argument count → fails to compile against apr-util ≥ 1.7 bugzilla
  • [Bug 70276] mod_autht_jwt: apr_jose_signature_make() called with wrong argument count → fails to compile against apr-util ≥ 1.7 bugzilla
  • [Bug 70276] mod_autht_jwt: apr_jose_signature_make() called with wrong argument count → fails to compile against apr-util ≥ 1.7 bugzilla
  • [Bug 70276] mod_autht_jwt: apr_jose_signature_make() called with wrong argument count → fails to compile against apr-util ≥ 1.7 bugzilla.apache.org via bugs
• [Bug 70274] New: mod_autht_jwt: worker segfault (NULL deref) on a JWT with empty/non-object claims bugzilla
  • [Bug 70274] mod_autht_jwt: worker segfault (NULL deref) on a JWT with empty/non-object claims bugzilla.apache.org via bugs
• [Bug 70272] New: mod_auth_digest: failed child_init destroys shared rmm state for all processes and leaves the child with dangling pointers bugzilla
  • [Bug 70272] mod_auth_digest: failed child_init destroys shared rmm state for all processes and leaves the child with dangling pointers bugzilla
• [Bug 70271] New: mod_proxy: TCP connection pooling retains stale sockets across upstream carrier CGNAT IP rotations bugzilla
• [Bug 70270] New: Sanity check breaks large environment bugzilla
  • [Bug 70270] Sanity check breaks large environment bugzilla
  • [Bug 70270] Sanity check breaks large environment bugzilla
• [Bug 70267] New: SIGTERM delivered during startup may crash the child bugzilla
• [Bug 70266] New: test_107_frame_lengths.py intermittently fails with AH03490 "scoreboard is full" under CI load bugzilla
  • [Bug 70266] test_107_frame_lengths.py intermittently fails with AH03490 "scoreboard is full" under CI load bugzilla
• [Bug 70265] New: test_proxy_beacon.py flaky: "added backend" logged twice from two different child pids in one test session bugzilla
• [Bug 70264] New: mod_dav advertises TRACE in Allow when TraceEnable is off bugzilla
  • [Bug 70264] mod_dav advertises TRACE in Allow when TraceEnable is off bugzilla
  • [Bug 70264] mod_dav advertises TRACE in Allow when TraceEnable is off bugzilla
  • [Bug 70264] mod_dav advertises TRACE in Allow when TraceEnable is off bugzilla
• [Bug 65357] TraceEnable Off Returns Empty Allow to TRACE request bugzilla
• [Bug 66499] 302 redirects when the :scheme header does not match the connection type bugzilla
  • [Bug 66499] 302 redirects when the :scheme header does not match the connection type bugzilla
• [Bug 70263] New: mod_remoteip clears remote_host and triggers unbracketed IPv6 forward DNS lookups (appending search domain) bugzilla
• [Bug 70261] New: Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
  • [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
  • [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
  • [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
  • [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
  • [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
  • [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
  • [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
  • [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
  • [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
  • [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
  • [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• [Bug 66583] The Apache2.4.57 service crash with php7.3 Every few days bugzilla
• [Bug 66168] Segmentation fault bugzilla
• [Bug 66526] provide a better way to reload TLS certificates/keys/etc. bugzilla
• [Bug 68517] Getting AH00898: Error during SSL Handshake with remote server while using apache as reverse proxy bugzilla
• [Bug 70260] New: Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • Re: [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 Steffen via bugs
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
  • Re: [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 Steffen via bugs
• [Bug 70259] New: apxs -A may leave a module enabled when duplicate LoadModule entries exist bugzilla
  • [Bug 70259] apxs -A may leave a module enabled when duplicate LoadModule entries exist bugzilla
• [Bug 70258] New: apxs -A mishandles LoadModule entries at configuration file boundaries bugzilla
  • [Bug 70258] apxs -A mishandles LoadModule entries at configuration file boundaries bugzilla
• [Bug 70257] New: mod_http2: GOAWAY INTERNAL_ERROR on whole connection when client RST_STREAM races HEADERS send (on_frame_not_send_cb) bugzilla
  • [Bug 70257] mod_http2: GOAWAY INTERNAL_ERROR on whole connection when client RST_STREAM races HEADERS send (on_frame_not_send_cb) bugzilla
• [Bug 70256] New: Managed Staplings not shown any more after upgrading to httpd/2.4.69 bugzilla
  • [Bug 70256] Managed Staplings not shown any more after upgrading to httpd/2.4.69 bugzilla
  • [Bug 70256] Managed Staplings not shown any more after upgrading to httpd/2.4.69 bugzilla
• [Bug 70255] New: mod_proxy_beacon: pre-auth per-tick memory amplification via UDP flood (missing per-datagram subpool) bugzilla
  • [Bug 70255] mod_proxy_beacon: pre-auth per-tick memory amplification via UDP flood (missing per-datagram subpool) bugzilla
  • [Bug 70255] mod_proxy_beacon: pre-auth per-tick memory amplification via UDP flood (missing per-datagram subpool) bugzilla
• [Bug 65307] Rewrite and improvements of mod_unique_id bugzilla
• [Bug 64252] Upgrade PCRE to PCRE2 bugzilla
• [Bug 66228] Apache fails to start with "(38)Function not implemented: AH00141: Could not initialize random number generator" bugzilla
• [Bug 65159] mod_unique_id generates non-unique ids bugzilla
  • [Bug 65159] mod_unique_id generates non-unique ids bugzilla
• [Bug 64263] TLSv1.3 with SSLVerifyClient optional inside a Location returns 403 bugzilla
  • [Bug 64263] TLSv1.3 with SSLVerifyClient optional inside a Location returns 403 bugzilla
• [Bug 70243] New: i have encouter an error on chrome browser bugzilla
• [Bug 70237] New: "Invalid base address" linker error on windows arm64 bugzilla
• [Bug 70222] New: mod_ssl_ct: unchecked calloc() return dereferenced in ssl_ct_proxy_post_handshake() -- NULL pointer crash under memory pressure bugzilla
  • [Bug 70222] mod_ssl_ct: unchecked calloc() return dereferenced in ssl_ct_proxy_post_handshake() -- NULL pointer crash under memory pressure bugzilla
  • [Bug 70222] mod_ssl_ct: unchecked calloc() return dereferenced in ssl_ct_proxy_post_handshake() -- NULL pointer crash under memory pressure bugzilla
• [Bug 70213] New: ProxyPassMatch worker selection depends on backreference length bugzilla
  • [Bug 70213] ProxyPassMatch worker selection depends on backreference length bugzilla
  • [Bug 70213] ProxyPassMatch worker selection depends on backreference length bugzilla
• [Bug 70212] New: mod_http2 leaks internal APR status codes (e.g., 70007 APR_TIMEUP) as raw HTTP/2 GOAWAY error codes bugzilla
  • [Bug 70212] mod_http2 leaks internal APR status codes (e.g., 70007 APR_TIMEUP) as raw HTTP/2 GOAWAY error codes bugzilla
• [Bug 70210] New: mod_rewrite prefix_stat() reaches a UNC host before UNCList is consulted - incomplete "expand UNC checking" (r1927041), UNCList bypassed on Windows bugzilla
  • [Bug 70210] mod_rewrite prefix_stat() reaches a UNC host before UNCList is consulted - incomplete "expand UNC checking" (r1927041), UNCList bypassed on Windows bugzilla
• [Bug 70207] New: RemoteIPTrustedProxyList / RemoteIPInternalProxyList entries silently ignored at request time bugzilla
  • [Bug 70207] RemoteIPTrustedProxyList / RemoteIPInternalProxyList entries silently ignored at request time bugzilla
• [Bug 70205] New: compat macros for X509_get0_notBefore/notAfter/serialNumber missing for httpd-2.4.68 bugzilla
  • [Bug 70205] compat macros for X509_get0_notBefore/notAfter/serialNumber missing for httpd-2.4.68 bugzilla
  • [Bug 70205] compat macros for X509_get0_notBefore/notAfter/serialNumber missing for httpd-2.4.68 bugzilla
• [Bug 70204] New: Make sensitive ap_expr file functions deny-by-default for new callers bugzilla
  • [Bug 70204] Make sensitive ap_expr file functions deny-by-default for new callers bugzilla
  • [Bug 70204] Make sensitive ap_expr file functions deny-by-default for new callers bugzilla
• [Bug 63325] Default body_min_rate not enabled in mod_reqtimeout bugzilla
• [Bug 70196] New: mod_dav_fs SIGSEGV inside apr_dbm_lmdb (__pthread_mutex_lock_full) under concurrent PUT traffic (event MPM) bugzilla
• [Bug 70195] New: mod_http2 rejects asterisk-form "OPTIONS *" with 400 since 2.4.55 bugzilla
  • [Bug 70195] mod_http2 rejects asterisk-form "OPTIONS *" with 400 since 2.4.55 bugzilla
  • [Bug 70195] mod_http2 rejects asterisk-form "OPTIONS *" with 400 since 2.4.55 bugzilla
  • [Bug 70195] mod_http2 rejects asterisk-form "OPTIONS *" with 400 since 2.4.55 bugzilla
• [Bug 70193] New: Redis timeouts using the wrong unit bugzilla
  • [Bug 70193] Redis timeouts using the wrong unit bugzilla
  • [Bug 70193] Redis timeouts using the wrong unit bugzilla
  • [Bug 70193] Redis timeouts using the wrong unit bugzilla
• [Bug 70192] New: Apache mod_proxy_hcheck — Health Check Mechanism Failure Causing 503 Errors and High CPU/Memory in WebServer bugzilla
  • [Bug 70192] Apache mod_proxy_hcheck — Health Check Mechanism Failure Causing 503 Errors and High CPU/Memory in WebServer bugzilla
  • [Bug 70192] Apache mod_proxy_hcheck — Health Check Mechanism Failure Causing 503 Errors and High CPU/Memory in WebServer bugzilla
• [Bug 70191] New: Possible impact of htmlAttrAllowed() deprecation on mod_proxy_html bugzilla
• [Bug 70190] New: Failed basic auth does not return 401 on broken symbolic link etc. bugzilla
• [Bug 70189] New: mod_log_json: limit Jansson diagnostic suppressions to the included headers bugzilla
  • [Bug 70189] mod_log_json: limit Jansson diagnostic suppressions to the included headers bugzilla
  • [Bug 70189] mod_log_json: limit Jansson diagnostic suppressions to the included headers bugzilla
• [Bug 70188] New: content-range header is not set with init range bugzilla
  • [Bug 70188] content-range header is not set with init range bugzilla
  • [Bug 70188] content-range header is not set with init range bugzilla
  • [Bug 70188] content-range header is not set with init range bugzilla
  • [Bug 70188] content-range header is not set with init range bugzilla
• [Bug 70176] New: mod_proxy drops backend Content-Length: 0 on HEAD responses bugzilla
  • [Bug 70176] mod_proxy drops backend Content-Length: 0 on HEAD responses bugzilla
  • [Bug 70176] mod_proxy drops backend Content-Length: 0 on HEAD responses bugzilla
• [Bug 70171] New: mod_md does not remove orphan san from certificate bugzilla
• [Bug 70169] New: RewriteCond expr !(...) is true if ... fails bugzilla
  • [Bug 70169] RewriteCond expr !(...) is true if ... fails bugzilla
• [Bug 70167] New: Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
  • [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
  • [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
  • [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
  • [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
  • [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
  • [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
  • [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
  • [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
  • [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
  • [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
  • [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
• [Bug 66100] openssl3 ab maintainer mode failures bugzilla
• [Bug 70161] New: mod_expires is fundamentally flawed: server unilaterally predicts file lifetimes bugzilla
  • [Bug 70161] mod_expires is fundamentally flawed: server unilaterally predicts file lifetimes bugzilla
• [Bug 68527] NULL dereference in mod_dir:fixup_dir bugzilla
  • [Bug 68527] NULL dereference in mod_dir:fixup_dir bugzilla
  • [Bug 68527] NULL dereference in mod_dir:fixup_dir bugzilla.apache.org via bugs
• [Bug 70140] New: Feature request: ServerTokens to support a "PatchLevels" option bugzilla
  • [Bug 70140] Feature request: ServerTokens to support a "PatchLevels" option bugzilla
• [Bug 70131] New: mod_http2: HTTP/2 stream left open when a response starts but never reaches EOS (e.g. a CGI that hits the server Timeout mid-body) bugzilla
  • [Bug 70131] mod_http2: HTTP/2 stream left open when a response starts but never reaches EOS (e.g. a CGI that hits the server Timeout mid-body) bugzilla
• [Bug 70128] New: Segmentation fault in mod_http2 during SSL output (ssl_io_filter_coalesce) bugzilla
  • [Bug 70128] Segmentation fault in mod_http2 during SSL output (ssl_io_filter_coalesce) bugzilla
• [Bug 70123] New: apachectl status/fullstatus should report a clear error when configured text browser is missing bugzilla
  • [Bug 70123] apachectl status/fullstatus should report a clear error when configured text browser is missing bugzilla
• [Bug 70122] New: HTTP response splitting via unsanitized 1xx interim status line in mod_proxy_http / ap_send_interim_response bugzilla
• [Bug 70117] New: Apache HTTP Server 2.4.68 Released: Links to itself bugzilla
  • [Bug 70117] Apache HTTP Server 2.4.68 Released: Links to itself bugzilla
• [Bug 70116] New: AddType Handler should anchor extensions bugzilla
  • [Bug 70116] AddType Handler should anchor extensions bugzilla

• Earlier messages