bugs  

Messages by Date

• 2026/10/12 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/12 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/11 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/10 [Bug 70264] New: mod_dav advertises TRACE in Allow when TraceEnable is off bugzilla
• 2026/10/10 [Bug 70264] mod_dav advertises TRACE in Allow when TraceEnable is off bugzilla
• 2026/10/10 [Bug 65357] TraceEnable Off Returns Empty Allow to TRACE request bugzilla
• 2026/10/10 [Bug 66499] 302 redirects when the :scheme header does not match the connection type bugzilla
• 2026/10/10 [Bug 64507] module does not send Allow: header bugzilla
• 2026/10/10 [Bug 70204] Make sensitive ap_expr file functions deny-by-default for new callers bugzilla
• 2026/10/09 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/09 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/09 [Bug 69186] Apache httpd generates body for 205 status code bugzilla
• 2026/10/09 [Bug 70263] New: mod_remoteip clears remote_host and triggers unbracketed IPv6 forward DNS lookups (appending search domain) bugzilla
• 2026/10/08 [Bug 61430] mod_proxy_fcgi is not RFC 3875 compliant (section 6.2.2 Local Redirect Response) bugzilla
• 2026/10/08 [Bug 70188] content-range header is not set with init range bugzilla
• 2026/10/08 [Bug 63893] Bogus warning "unsupported command 20" bugzilla
• 2026/10/08 [Bug 69933] status of worker thread in scoreboard not correct due to exit of extra process bugzilla
• 2026/10/08 [Bug 70012] Substitute with empty replacement triggers subsequent Substitute empty reply bugzilla
• 2026/10/08 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/08 [Bug 70257] mod_http2: GOAWAY INTERNAL_ERROR on whole connection when client RST_STREAM races HEADERS send (on_frame_not_send_cb) bugzilla
• 2026/10/08 [Bug 70255] mod_proxy_beacon: pre-auth per-tick memory amplification via UDP flood (missing per-datagram subpool) bugzilla
• 2026/10/08 [Bug 70255] mod_proxy_beacon: pre-auth per-tick memory amplification via UDP flood (missing per-datagram subpool) bugzilla
• 2026/10/08 [Bug 70261] New: Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/07 [Bug 66486] DTD HTML 3.2 Final still seen in Directory Indexes as default in 2023 bugzilla
• 2026/10/07 [Bug 68995] Apache compile goes through but httpd -V throws error bugzilla
• 2026/10/07 [Bug 66583] The Apache2.4.57 service crash with php7.3 Every few days bugzilla
• 2026/10/07 [Bug 68872] xmlhttprequest.onprogress behavior changed after updated to 2.4.59 bugzilla
• 2026/10/07 [Bug 66168] Segmentation fault bugzilla
• 2026/10/07 [Bug 66486] DTD HTML 3.2 Final still seen in Directory Indexes as default in 2023 bugzilla
• 2026/10/07 [Bug 66526] provide a better way to reload TLS certificates/keys/etc. bugzilla
• 2026/10/07 [Bug 68517] Getting AH00898: Error during SSL Handshake with remote server while using apache as reverse proxy bugzilla
• 2026/10/07 [Bug 69149] Apache misbehave with a folder named math bugzilla
• 2026/10/07 [Bug 69732] Apache HTTP Server emits empty list elements in header fields — violates RFC 9110 §5.6.1.1 bugzilla
• 2026/10/07 [Bug 62903] Better handling of a thread limit forced by cgroups via systemd bugzilla
• 2026/10/07 [Bug 68860] Segmentation fault when disabling config with SSLStaplingCache shmcb and two graceful reloads bugzilla
• 2026/10/07 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/07 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/07 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/07 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/07 [Bug 70260] New: Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/07 [Bug 70259] New: apxs -A may leave a module enabled when duplicate LoadModule entries exist bugzilla
• 2026/10/07 [Bug 70259] apxs -A may leave a module enabled when duplicate LoadModule entries exist bugzilla
• 2026/10/07 [Bug 70258] apxs -A mishandles LoadModule entries at configuration file boundaries bugzilla
• 2026/10/07 [Bug 70258] New: apxs -A mishandles LoadModule entries at configuration file boundaries bugzilla
• 2026/10/06 [Bug 70169] RewriteCond expr !(...) is true if ... fails bugzilla
• 2026/10/06 [Bug 70176] mod_proxy drops backend Content-Length: 0 on HEAD responses bugzilla
• 2026/10/06 [Bug 70207] RemoteIPTrustedProxyList / RemoteIPInternalProxyList entries silently ignored at request time bugzilla
• 2026/10/06 [Bug 70193] Redis timeouts using the wrong unit bugzilla
• 2026/10/06 [Bug 70213] ProxyPassMatch worker selection depends on backreference length bugzilla
• 2026/10/06 [Bug 70195] mod_http2 rejects asterisk-form "OPTIONS *" with 400 since 2.4.55 bugzilla
• 2026/10/06 [Bug 70195] mod_http2 rejects asterisk-form "OPTIONS *" with 400 since 2.4.55 bugzilla
• 2026/10/05 [Bug 70257] New: mod_http2: GOAWAY INTERNAL_ERROR on whole connection when client RST_STREAM races HEADERS send (on_frame_not_send_cb) bugzilla
• 2026/10/05 [Bug 70256] Managed Staplings not shown any more after upgrading to httpd/2.4.69 bugzilla
• 2026/10/05 [Bug 70256] Managed Staplings not shown any more after upgrading to httpd/2.4.69 bugzilla
• 2026/10/05 [Bug 70256] New: Managed Staplings not shown any more after upgrading to httpd/2.4.69 bugzilla
• 2026/10/04 [Bug 70255] New: mod_proxy_beacon: pre-auth per-tick memory amplification via UDP flood (missing per-datagram subpool) bugzilla
• 2026/10/02 [Bug 65307] Rewrite and improvements of mod_unique_id bugzilla
• 2026/09/29 [Bug 65159] mod_unique_id generates non-unique ids bugzilla
• 2026/09/29 [Bug 60075] segmentation fault during a false request bugzilla
• 2026/09/29 [Bug 64252] Upgrade PCRE to PCRE2 bugzilla
• 2026/09/29 [Bug 57477] mod_auth_digest AH00052: child pid $pid exit signal Floating point exception bugzilla
• 2026/09/29 [Bug 66228] Apache fails to start with "(38)Function not implemented: AH00141: Could not initialize random number generator" bugzilla
• 2026/09/29 [Bug 65159] mod_unique_id generates non-unique ids bugzilla
• 2026/09/25 [Bug 64263] TLSv1.3 with SSLVerifyClient optional inside a Location returns 403 bugzilla
• 2026/09/24 [Bug 64263] TLSv1.3 with SSLVerifyClient optional inside a Location returns 403 bugzilla
• 2026/09/24 [Bug 63096] TLS 1.3: Client certificates don't work if they are optional on virtual host but required on location bugzilla
• 2026/09/24 [Bug 63096] TLS 1.3: Client certificates don't work if they are optional on virtual host but required on location bugzilla
• 2026/09/24 [Bug 69421] SSLVerifyClient require + TLS 1.3 = Cannot perform Post-Handshake Authentication bugzilla
• 2026/09/24 [Bug 63096] TLS 1.3: Client certificates don't work if they are optional on virtual host but required on location bugzilla
• 2026/09/24 [Bug 70205] compat macros for X509_get0_notBefore/notAfter/serialNumber missing for httpd-2.4.68 bugzilla
• 2026/09/23 [Bug 69933] status of worker thread in scoreboard not correct due to exit of extra process bugzilla
• 2026/09/21 [Bug 70243] New: i have encouter an error on chrome browser bugzilla
• 2026/09/18 [Bug 70237] New: "Invalid base address" linker error on windows arm64 bugzilla
• 2026/09/17 [Bug 70222] New: mod_ssl_ct: unchecked calloc() return dereferenced in ssl_ct_proxy_post_handshake() -- NULL pointer crash under memory pressure bugzilla
• 2026/09/14 [Bug 70213] ProxyPassMatch worker selection depends on backreference length bugzilla
• 2026/09/14 [Bug 70213] New: ProxyPassMatch worker selection depends on backreference length bugzilla
• 2026/09/14 [Bug 70212] New: mod_http2 leaks internal APR status codes (e.g., 70007 APR_TIMEUP) as raw HTTP/2 GOAWAY error codes bugzilla
• 2026/09/10 [Bug 70210] New: mod_rewrite prefix_stat() reaches a UNC host before UNCList is consulted - incomplete "expand UNC checking" (r1927041), UNCList bypassed on Windows bugzilla
• 2026/09/07 [Bug 70207] New: RemoteIPTrustedProxyList / RemoteIPInternalProxyList entries silently ignored at request time bugzilla
• 2026/09/07 [Bug 70189] mod_log_json: limit Jansson diagnostic suppressions to the included headers bugzilla
• 2026/09/07 [Bug 70189] mod_log_json: limit Jansson diagnostic suppressions to the included headers bugzilla
• 2026/09/07 [Bug 70205] compat macros for X509_get0_notBefore/notAfter/serialNumber missing for httpd-2.4.68 bugzilla
• 2026/09/05 [Bug 70205] New: compat macros for X509_get0_notBefore/notAfter/serialNumber missing for httpd-2.4.68 bugzilla
• 2026/09/04 [Bug 70204] Make sensitive ap_expr file functions deny-by-default for new callers bugzilla
• 2026/09/04 [Bug 70204] New: Make sensitive ap_expr file functions deny-by-default for new callers bugzilla
• 2026/08/31 [Bug 70193] Redis timeouts using the wrong unit bugzilla
• 2026/08/31 [Bug 70193] Redis timeouts using the wrong unit bugzilla
• 2026/08/30 [Bug 63325] Default body_min_rate not enabled in mod_reqtimeout bugzilla
• 2026/08/25 [Bug 70196] New: mod_dav_fs SIGSEGV inside apr_dbm_lmdb (__pthread_mutex_lock_full) under concurrent PUT traffic (event MPM) bugzilla
• 2026/08/25 [Bug 70195] New: mod_http2 rejects asterisk-form "OPTIONS *" with 400 since 2.4.55 bugzilla
• 2026/08/24 [Bug 70193] New: Redis timeouts using the wrong unit bugzilla
• 2026/08/23 [Bug 70192] New: Apache mod_proxy_hcheck — Health Check Mechanism Failure Causing 503 Errors and High CPU/Memory in WebServer bugzilla
• 2026/08/23 [Bug 70191] New: Possible impact of htmlAttrAllowed() deprecation on mod_proxy_html bugzilla
• 2026/08/23 [Bug 70190] New: Failed basic auth does not return 401 on broken symbolic link etc. bugzilla
• 2026/08/22 [Bug 70189] New: mod_log_json: limit Jansson diagnostic suppressions to the included headers bugzilla
• 2026/08/18 [Bug 70188] content-range header is not set with init range bugzilla
• 2026/08/18 [Bug 70188] content-range header is not set with init range bugzilla
• 2026/08/18 [Bug 70188] content-range header is not set with init range bugzilla
• 2026/08/18 [Bug 70188] New: content-range header is not set with init range bugzilla
• 2026/08/11 [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
• 2026/08/11 [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
• 2026/08/10 [Bug 70176] New: mod_proxy drops backend Content-Length: 0 on HEAD responses bugzilla
• 2026/08/07 [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
• 2026/08/07 [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
• 2026/08/07 [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
• 2026/08/06 [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
• 2026/08/06 [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
• 2026/08/06 [Bug 70171] New: mod_md does not remove orphan san from certificate bugzilla
• 2026/08/06 [Bug 70169] New: RewriteCond expr !(...) is true if ... fails bugzilla
• 2026/08/05 [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
• 2026/08/05 [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
• 2026/08/05 [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
• 2026/08/05 [Bug 70167] Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
• 2026/08/05 [Bug 70167] New: Memory increase with 2.4.66 with large file transfert leading to crash bugzilla
• 2026/08/05 [Bug 69857] Server initiates connections to INADDR_ANY (0.0.0.0) in mpm_unix.c bugzilla
• 2026/08/05 [Bug 69857] Server initiates connections to INADDR_ANY (0.0.0.0) in mpm_unix.c bugzilla
• 2026/08/05 [Bug 69857] Server initiates connections to INADDR_ANY (0.0.0.0) in mpm_unix.c bugzilla
• 2026/08/05 [Bug 69857] Server initiates connections to INADDR_ANY (0.0.0.0) in mpm_unix.c bugzilla
• 2026/08/05 [Bug 69857] Server initiates connections to INADDR_ANY (0.0.0.0) in mpm_unix.c bugzilla
• 2026/08/02 [Bug 69857] Server initiates connections to INADDR_ANY (0.0.0.0) in mpm_unix.c bugzilla
• 2026/08/02 [Bug 69857] Server initiates connections to INADDR_ANY (0.0.0.0) in mpm_unix.c bugzilla
• 2026/07/31 [Bug 69857] Server initiates connections to INADDR_ANY (0.0.0.0) in mpm_unix.c bugzilla
• 2026/07/31 [Bug 69929] server stalls: AH00046: child process 2876749 still did not exit, sending a SIGKILL bugzilla
• 2026/07/31 [Bug 66100] openssl3 ab maintainer mode failures bugzilla
• 2026/07/31 [Bug 69929] server stalls: AH00046: child process 2876749 still did not exit, sending a SIGKILL bugzilla
• 2026/07/31 [Bug 69857] Server initiates connections to INADDR_ANY (0.0.0.0) in mpm_unix.c bugzilla
• 2026/07/31 [Bug 70021] AH00574: ap_content_length_filter: apr_bucket_read() failed bugzilla
• 2026/07/31 [Bug 70021] AH00574: ap_content_length_filter: apr_bucket_read() failed bugzilla
• 2026/07/30 [Bug 62493] mod_cache_socache loses request bodies after revalidation bugzilla
• 2026/07/30 [Bug 62493] mod_cache_socache loses request bodies after revalidation bugzilla
• 2026/07/30 [Bug 70021] AH00574: ap_content_length_filter: apr_bucket_read() failed bugzilla
• 2026/07/30 [Bug 70021] AH00574: ap_content_length_filter: apr_bucket_read() failed bugzilla
• 2026/07/30 [Bug 70161] mod_expires is fundamentally flawed: server unilaterally predicts file lifetimes bugzilla
• 2026/07/30 [Bug 70128] Segmentation fault in mod_http2 during SSL output (ssl_io_filter_coalesce) bugzilla
• 2026/07/26 [Bug 70161] New: mod_expires is fundamentally flawed: server unilaterally predicts file lifetimes bugzilla
• 2026/07/21 [Bug 64919] mod_proxy_fcgi fails to parse headers with a string length over 8192 bugzilla
• 2026/07/21 [Bug 64919] mod_proxy_fcgi fails to parse headers with a string length over 8192 bugzilla
• 2026/07/20 [Bug 68527] NULL dereference in mod_dir:fixup_dir bugzilla
• 2026/07/20 [Bug 68527] NULL dereference in mod_dir:fixup_dir bugzilla
• 2026/07/11 [Bug 69648] apxs removes LoadModule line instead of adding it bugzilla
• 2026/07/07 [Bug 70140] Feature request: ServerTokens to support a "PatchLevels" option bugzilla
• 2026/07/07 [Bug 70140] New: Feature request: ServerTokens to support a "PatchLevels" option bugzilla
• 2026/07/03 [Bug 69397] Effect of SSLOpenSSLConfCmd in catch-all VirtualHost affects other VirtualHosts bugzilla
• 2026/07/03 [Bug 66481] SSL_CLIENT_SAN_Email (without _n) doesn't work bugzilla
• 2026/07/01 [Bug 70131] mod_http2: HTTP/2 stream left open when a response starts but never reaches EOS (e.g. a CGI that hits the server Timeout mid-body) bugzilla
• 2026/06/24 [Bug 70131] New: mod_http2: HTTP/2 stream left open when a response starts but never reaches EOS (e.g. a CGI that hits the server Timeout mid-body) bugzilla
• 2026/06/23 [Bug 70128] New: Segmentation fault in mod_http2 during SSL output (ssl_io_filter_coalesce) bugzilla
• 2026/06/19 [Bug 70123] apachectl status/fullstatus should report a clear error when configured text browser is missing bugzilla
• 2026/06/19 [Bug 70123] New: apachectl status/fullstatus should report a clear error when configured text browser is missing bugzilla
• 2026/06/18 [Bug 70122] New: HTTP response splitting via unsanitized 1xx interim status line in mod_proxy_http / ap_send_interim_response bugzilla
• 2026/06/18 [Bug 70117] Apache HTTP Server 2.4.68 Released: Links to itself bugzilla
• 2026/06/18 [Bug 70117] New: Apache HTTP Server 2.4.68 Released: Links to itself bugzilla
• 2026/06/18 [Bug 70116] AddType Handler should anchor extensions bugzilla
• 2026/06/18 [Bug 70116] New: AddType Handler should anchor extensions bugzilla
• 2026/06/12 [Bug 35154] Support for NID_serialNumber, etc. in SSLUserName bugzilla
• 2026/06/12 [Bug 56395] Allow SERVER_ADDR environment variable to be optionally undisclosed bugzilla
• 2026/06/12 [Bug 45058] Mod_SSL does not set AUTH_TYPE with client certificate authentication bugzilla
• 2026/06/12 [Bug 35154] Support for NID_serialNumber, etc. in SSLUserName bugzilla
• 2026/06/10 [Bug 70106] New: Use-After-Close in ap_duplicate_listeners due to unhandled make_sock return value bugzilla
• 2026/06/09 [Bug 66640] Fix spelling errors in libapreq2 bugzilla
• 2026/06/09 [Bug 69346] type mismatch in libapreq2 on 32-bit platforms (MGVTBL.svt_copy's namelen argument) bugzilla
• 2026/06/09 [Bug 68913] RHEL8: undefined symbol: apreq_handle_apache2 at /usr/lib64/perl5/DynaLoader.pm line 193. bugzilla
• 2026/06/09 [Bug 56598] Content-Length header should be always interpreted as a decimal bugzilla
• 2026/06/09 [Bug 66463] Socket Stuck on: proxy_fcgi:error (104)Connection reset by peer: bugzilla
• 2026/05/31 [Bug 70101] New: East Asian UTF-8 is three bytes long, but two columns wide bugzilla
• 2026/05/30 [Bug 70100] New: Apache HTTP Server Binary Distributions: Links to defunct Apache Haus bugzilla
• 2026/05/26 [Bug 70080] New: apachectl configtest does not warn about deprecated variables bugzilla
• 2026/05/22 [Bug 70063] specific public directory Forbidden due to missing .htaccess bugzilla
• 2026/05/22 [Bug 70063] specific public directory Forbidden due to missing .htaccess bugzilla
• 2026/05/21 [Bug 70063] specific public directory Forbidden due to missing .htaccess bugzilla
• 2026/05/21 [Bug 70063] New: specific public directory Forbidden due to missing .htaccess bugzilla
• 2026/05/20 [Bug 64472] mod_auth_digest module's AuthDigestProvider directive does not sets 'ldap' as provider to authenticate users from LDAP bugzilla
• 2026/05/20 [Bug 54255] mod_deflate adjusts the headers "too late" bugzilla
• 2026/05/20 [Bug 61975] Error page reports an ErrorDocument problem when a RewriteRule has set the status code bugzilla
• 2026/05/20 [Bug 63434] Multiple Cookie headers combined to one comma-separated header line bugzilla
• 2026/05/20 [Bug 60580] Multiple SetEnvIf statements with the same condition assume that the condition does not change bugzilla
• 2026/05/20 [Bug 54415] Please tell the root cause of mutex and scoreboard generation failure! bugzilla
• 2026/05/20 [Bug 66000] Configure option "--with-pcre" does not work anymore bugzilla
• 2026/05/20 [Bug 59311] Do not send "Upgrade: h2" header to HTTP/1.1 clients when SSL/TLS is used bugzilla
• 2026/05/19 [Bug 70051] httpd trunk - NULL pointer dereference in DAV leads to DOS bugzilla
• 2026/05/19 [Bug 70051] New: httpd 2.4.67 trunk - NULL pointer dereference in DAV leads to DOS bugzilla
• 2026/05/19 [Bug 70037] Getting error: GnuTLS error -344: No common application protocol could be negotiated. bugzilla
• 2026/05/19 [Bug 70037] Getting error: GnuTLS error -344: No common application protocol could be negotiated. bugzilla
• 2026/05/18 [Bug 62493] mod_cache_socache loses request bodies after revalidation bugzilla
• 2026/05/18 [Bug 70037] Getting error: GnuTLS error -344: No common application protocol could be negotiated. bugzilla
• 2026/05/16 [Bug 70039] Website: Welcome! outdated (“The Number One HTTP Server On The Internet”) bugzilla
• 2026/05/15 [Bug 66000] Configure option "--with-pcre" does not work anymore bugzilla
• 2026/05/15 [Bug 58799] mod_fcgid: FcgidMinProcessesPerClass doesn't seem to work bugzilla
• 2026/05/15 [Bug 45058] Mod_SSL does not set AUTH_TYPE with client certificate authentication bugzilla
• 2026/05/15 [Bug 58799] mod_fcgid: FcgidMinProcessesPerClass doesn't seem to work bugzilla
• 2026/05/14 [Bug 45058] Mod_SSL does not set AUTH_TYPE with client certificate authentication bugzilla
• 2026/05/14 [Bug 45058] Mod_SSL does not set AUTH_TYPE with client certificate authentication bugzilla
• 2026/05/14 [Bug 57121] ocsp stapling should not pass temporary server outages to clients bugzilla
• 2026/05/14 [Bug 58799] mod_fcgid: FcgidMinProcessesPerClass doesn't seem to work bugzilla
• 2026/05/14 [Bug 57121] ocsp stapling should not pass temporary server outages to clients bugzilla
• 2026/05/13 [Bug 53595] Media type qs parameters for MultiViews sent in Content-Type bugzilla
• 2026/05/13 [Bug 57121] ocsp stapling should not pass temporary server outages to clients bugzilla
• 2026/05/12 [Bug 56176] mod_substitute truncates the response body if the "Line is too long" bugzilla
• 2026/05/12 [Bug 70039] New: Website: Welcome! outdated (“The Number One HTTP Server On The Internet”) bugzilla
• 2026/05/11 [Bug 62903] Better handling of a thread limit forced by cgroups via systemd bugzilla

• Earlier messages