[harden-mac:0467] Apache 2.0.47

[Shin-ichi YOSHIMOTO <yosimoto@xxxxxxxxx>]

よしもとです。

Mac OS X Serverへ直接関係するかどうかは分かりませんが、2.0.47がリリースさ
れました。変更点は以下の通りです。

Changes with Apache 2.0.47
 
  *) SECURITY [CAN-2003-0192]: Fixed a bug whereby certain sequences
     of per-directory renegotiations and the SSLCipherSuite directive
     being used to upgrade from a weak ciphersuite to a strong one
     could result in the weak ciphersuite being used in place of the
     strong one.  [Ben Laurie]
 
  *) SECURITY [CAN-2003-0253]: Fixed a bug in prefork MPM causing
     temporary denial of service when accept() on a rarely accessed port
     returns certain errors.  Reported by Saheed Akhtar
     <S.Akhtar@xxxxxxxxx>.  [Jeff Trawick]
 
  *) SECURITY [CAN-2003-0254]: Fixed a bug in ftp proxy causing denial
     of service when target host is IPv6 but proxy server can't create
     IPv6 socket.  Fixed by the reporter.  [Yoshioka Tsuneo
     <tsuneo.yoshioka@xxxxxxxxxxxx>]
 
  *) SECURITY [VU#379828] Prevent the server from crashing when entering
     infinite loops. The new LimitInternalRecursion directive configures
     limits of subsequent internal redirects and nested subrequests, after
     which the request will be aborted.  PR 19753 (and probably others).
     [William Rowe, Jeff Trawick, Andr Malo]
                       
  *) core_output_filter: don't split the brigade after a FLUSH bucket if
     it's the last bucket.  This prevents creating unneccessary empty
     brigades which may not be destroyed until the end of a keepalive
     connection.
     [Juan Rivera <Juan.Rivera@xxxxxxxxxx>]
 
  *) Add support for "streamy" PROPFIND responses.
     [Ben Collins-Sussman <sussman@xxxxxxxxxx>]
 
  *) mod_cgid: Eliminate a double-close of a socket.  This resolves
     various operational problems in a threaded MPM, since on the
     second attempt to close the socket, the same descriptor was
     often already in use by another thread for another purpose.
     [Jeff Trawick]
 
  *) mod_negotiation: Introduce "prefer-language" environment variable,
     which allows to influence the negotiation process on request basis
     to prefer a certain language.  [Andr Malo]
 
  *) Make mod_expires' ExpiresByType work properly, including for
     dynamically-generated documents.  [Ken Coar, Bill Stoddard]

-- 
Shin-ichi YOSHIMOTO <yosimoto@xxxxxxxxx>
http://diary.waishi.jp/~yosimoto/diary/


--[PR]------------------------------------------------------------------
［アメリカンビタミンショップ］─────────────────┐
│
│今年の夏は始まっている！ダイエット、始めませんか？
│　　　　　　　　　　　　　　　　　〜〜取り扱いサプリ100種類超！
　　　　 http://ad.freeml.com/cgi-bin/ad.cgi?id=bX5ZE
------------------------------------------------------------------[PR]--
<GMO GROUP> Global Media Online  www.gmo.jp