Eric Covener 8abb3d06b2 fix rewritecond expr regression in 2.4.64 ...

*) SECURITY: CVE-2025-54090: Apache HTTP Server: 'RewriteCond expr'
     always evaluates to true in 2.4.64 (cve.mitre.org)
     A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond
     expr ..." tests evaluating as "true".
     Users are recommended to upgrade to version 2.4.65, which fixes
     the issue.


Reviewed By: covener, ylavic, gbechis, jorton



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927361 13f79535-47bb-0310-9956-ffa450edef68

2025-07-21 11:12:44 +00:00

..

.indent.pro

…

config9.m4

Merge r1909241 from trunk:

2023-07-07 12:05:33 +00:00

Makefile.in

…

mod_actions.c

Merge r1918551 from trunk:

2024-06-24 17:54:34 +00:00

mod_actions.dep

Win32-specific build files.

2016-03-23 03:53:49 +00:00

mod_actions.dsp

Embed the .manifest files of all httpd binaries as a post-build

2007-01-11 05:37:20 +00:00

mod_actions.exp

…

mod_actions.mak

Clean up embedded abspaths that came along with resource

2016-04-07 15:04:27 +00:00

mod_alias.c

Merge r1909137, r1911067 from trunk:

2023-10-16 11:42:54 +00:00

mod_alias.dep

Win32-specific build files.

2016-03-23 03:53:49 +00:00

mod_alias.dsp

Embed the .manifest files of all httpd binaries as a post-build

2007-01-11 05:37:20 +00:00

mod_alias.exp

…

mod_alias.mak

Clean up embedded abspaths that came along with resource

2016-04-07 15:04:27 +00:00

mod_dir.c

Merge r1777556, r1777557, r1777593, r1777594, r1783056 from trunk:

2017-03-29 17:15:29 +00:00

mod_dir.dep

Win32-specific build files.

2016-03-23 03:53:49 +00:00

mod_dir.dsp

Embed the .manifest files of all httpd binaries as a post-build

2007-01-11 05:37:20 +00:00

mod_dir.exp

…

mod_dir.mak

Clean up embedded abspaths that came along with resource

2016-04-07 15:04:27 +00:00

mod_imagemap.c

Merge r1918795, r1918814 from trunk:

2024-07-02 13:07:17 +00:00

mod_imagemap.dep

Win32-specific build files.

2016-03-23 03:53:49 +00:00

mod_imagemap.dsp

Embed the .manifest files of all httpd binaries as a post-build

2007-01-11 05:37:20 +00:00

mod_imagemap.exp

rename mod_imap to mod_imagemap.

2005-04-07 02:04:03 +00:00

mod_imagemap.mak

Clean up embedded abspaths that came along with resource

2016-04-07 15:04:27 +00:00

mod_negotiation.c

Merge r1918551 from trunk:

2024-06-24 17:54:34 +00:00

mod_negotiation.dep

Win32-specific build files.

2016-03-23 03:53:49 +00:00

mod_negotiation.dsp

Embed the .manifest files of all httpd binaries as a post-build

2007-01-11 05:37:20 +00:00

mod_negotiation.exp

…

mod_negotiation.mak

Clean up embedded abspaths that came along with resource

2016-04-07 15:04:27 +00:00

mod_rewrite.c

fix rewritecond expr regression in 2.4.64

2025-07-21 11:12:44 +00:00

mod_rewrite.dep

Win32-specific build files.

2016-03-23 03:53:49 +00:00

mod_rewrite.dsp

Embed the .manifest files of all httpd binaries as a post-build

2007-01-11 05:37:20 +00:00

mod_rewrite.exp

…

mod_rewrite.h

Merge r1557641, r1559394, r1559398 from trunk:

2014-01-23 14:33:09 +00:00

mod_rewrite.mak

Followup to r1908937:

2023-04-11 06:25:41 +00:00

mod_speling.c

Backport:

2021-09-26 13:07:01 +00:00

mod_speling.dep

Win32-specific build files.

2016-03-23 03:53:49 +00:00

mod_speling.dsp

Embed the .manifest files of all httpd binaries as a post-build

2007-01-11 05:37:20 +00:00

mod_speling.exp

…

mod_speling.mak

Clean up embedded abspaths that came along with resource

2016-04-07 15:04:27 +00:00

mod_userdir.c

mod_userdir: Constify and save a few bytes in the conf pool when parsing

2016-06-13 23:20:20 +00:00

mod_userdir.dep

Win32-specific build files.

2016-03-23 03:53:49 +00:00

mod_userdir.dsp

Embed the .manifest files of all httpd binaries as a post-build

2007-01-11 05:37:20 +00:00

mod_userdir.exp

…

mod_userdir.mak

Clean up embedded abspaths that came along with resource

2016-04-07 15:04:27 +00:00

mod_vhost_alias.c

Merge most of r1747469 from trunk

2021-01-19 19:29:43 +00:00

mod_vhost_alias.dep

Win32-specific build files.

2016-03-23 03:53:49 +00:00

mod_vhost_alias.dsp

Embed the .manifest files of all httpd binaries as a post-build

2007-01-11 05:37:20 +00:00

mod_vhost_alias.exp

…

mod_vhost_alias.mak

Clean up embedded abspaths that came along with resource

2016-04-07 15:04:27 +00:00

NWGNUactions

Use var for prelude so its possible to change it at one place.

2011-03-18 03:09:27 +00:00

NWGNUimagemap

Use var for prelude so its possible to change it at one place.

2011-03-18 03:09:27 +00:00

NWGNUmakefile

Use a var INSTALLBASE to simplify NetWare installation rules.

2011-03-18 04:56:06 +00:00

NWGNUrewrite

Use var for prelude so its possible to change it at one place.

2011-03-18 03:09:27 +00:00

NWGNUspeling

Use var for prelude so its possible to change it at one place.

2011-03-18 03:09:27 +00:00

NWGNUuserdir

Use var for prelude so its possible to change it at one place.

2011-03-18 03:09:27 +00:00

NWGNUvhost

Use var for prelude so its possible to change it at one place.

2011-03-18 03:09:27 +00:00