Re: Affected versions for CVE-2014-0098

2014-03-31 Thread Joe Orton
On Sun, Mar 30, 2014 at 12:13:20PM +0200, Stefan Fritsch wrote: > Hi, > > I have been looking at backporting the cookie issue fix, and it looks > to me that it was introduced in > > http://svn.apache.org/viewvc?view=revision&revision=r1374538 > http://svn.apache.org/viewvc/httpd/httpd/branches/2

Re: svn commit: r1583175 - /httpd/httpd/trunk/modules/mappers/mod_alias.c

2014-03-31 Thread Rainer Jung
On 30.03.2014 22:52, Eric Covener wrote: > On Sun, Mar 30, 2014 at 4:13 PM, Rainer Jung wrote: >>> AFAICT { >>> In as much that it was ever useful, this breaks people relying on the >>> "context info" for aliasmatches structured the way this code was >>> originally biased to expecting: >>> >>>

Re: svn commit: r1583175 - /httpd/httpd/trunk/modules/mappers/mod_alias.c

2014-03-31 Thread Eric Covener
> So you suggest to remove ap_set_context_info() from the AliasMatch handling? Yes, I just don't think we can pick appropriate values safely.

RE: FW: [PATCH ASF bugzilla# 55897]prefork_mpm patch with SO_REUSEPORT support

2014-03-31 Thread Lu, Yingqi
Dear all, I just want to ping again on the modifications we made on both of the patches [bugzilla #55897 and bugzilla #56279]. Please let us know your comments and feedback. Thanks, Yingqi From: Lu, Yingqi [mailto:yingqi...@intel.com] Sent: Monday, March 24, 2014 1:56 PM To: dev@httpd.apache.o