[2.4.x] Add ap_*_timingsafe

CHANGES

@@ -1,6 +1,45 @@
                                                          -*- coding: utf-8 -*-
 Changes with Apache 2.4.67
 
+  *) mod_md: update to version 2.6.10
+     - Fix issue #420 <https://github.com/icing/mod_md/issues/420> by ignoring
+       job.json files that claim to have completely finished a certificate
+       renewal, but have not produced the necessary result files.
+
+  *) mod_http2: update to version 2.0.39
+     Remove streams own memory allocator after reports of memory problems
+     with third party modules.
+     [Stefan Eissing]
+
+  *) mod_http2: update to version 2.0.38
+     Source sync with mod_h2 github repository. No functional change.
+     [Stefan Eissing]
+
+  *) Updated conf/mime.types: added vnd.sqlite3, HEIC, HEIF
+     [Alexandru Mărășteanu <hello alexei.ro>]
+
+  *) mod_md: update to version 2.6.7
+     - Fix a regression in `MDStapleOthers` which broke in v2.6.0 and no longer
+       applied, no matter the configuration.
+
+  *) mod_md: update to version 2.6.9
+     - Pebble 2.9+ reports another error when terms of service agreement is
+       not set. Treating all "userActionRequired" errors as permanent now.
+
+  *) mod_md: update to version 2.6.8
+     - Fix the ARI related `replaces` property in ACME order creation to only
+       be used when the CA supports ARI and it is enabled in the menu config.
+     - Fix compatibility with APR versions before 1.6.0 which do not have
+       `apr_cstr_casecmp` and should use `apr_strnatcasecmp` instead.
+
+  *) mod_http2: update to version 2.0.37
+     Prevent double purge of a stream, resulting in a double free.
+     Fixes PR 69899.
+     [Stefan Eissing]
+
+  *) mod_md: Use correct function name when compiling against APR < 1.6.0.
+     PR 69954 [Tần Quảng <[email protected]>]
+
 Changes with Apache 2.4.66
 
   *) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec

docs/manual/caching.html.en

@@ -790,7 +790,7 @@ sys     0m0.000s</pre></div>
       <code>.htaccess</code> files would be a very expensive operation,
       partially defeating the point of caching (to speed up requests),
       <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> makes no decision about whether a cached
-      entity is authorised for serving. In other words; if
+      entity is authorized for serving. In other words; if
       <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code> has cached some content, it will be served
       from the cache as long as that content has not expired.</p>
 
@@ -845,7 +845,7 @@ sys     0m0.000s</pre></div>
       Another example is so-called HTTP request-smuggling attacks.</p>
 
       <p>This document is not the correct place for an in-depth discussion
-      of HTTP request smuggling (instead, try your favourite search engine)
+      of HTTP request smuggling (instead, try your favorite search engine)
       however it is important to be aware that it is possible to make
       a series of requests, and to exploit a vulnerability on an origin
       webserver such that the attacker can entirely control the content

docs/manual/caching.html.fr.utf8

@@ -27,6 +27,8 @@
 <a href="./fr/caching.html" title="Français">&nbsp;fr&nbsp;</a> |
 <a href="./tr/caching.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
 </div>
+<div class="outofdate">Cette traduction peut être périmée. Vérifiez la version
+            anglaise pour les changements récents.</div>
 
     <p>Ce document complète la documentation de référence des modules
     <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>, <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code>,

docs/manual/caching.html.tr.utf8

@@ -27,6 +27,7 @@
 <a href="./fr/caching.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a> |
 <a href="./tr/caching.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
 </div>
+<div class="outofdate">Bu çeviri güncel olmayabilir. Son değişiklikler için İngilizce sürüm geçerlidir.</div>
 
     <p>Bu belge <code class="module"><a href="./mod/mod_cache.html">mod_cache</a></code>,
       <code class="module"><a href="./mod/mod_cache_disk.html">mod_cache_disk</a></code>, <code class="module"><a href="./mod/mod_file_cache.html">mod_file_cache</a></code>

docs/manual/caching.xml.fr

@@ -3,7 +3,7 @@
 <?xml-stylesheet type="text/xsl" href="style/manual.fr.xsl"?>
 <!-- French translation : Lucien GENTIS -->
 <!-- Reviewed by : Vincent Deffontaines -->
-<!-- English Revision: 1836061 -->
+<!-- English Revision: 1836061:1933180 (outdated) -->
 
 <!--
  Licensed to the Apache Software Foundation (ASF) under one or more

docs/manual/caching.xml.meta

@@ -8,7 +8,7 @@
 
   <variants>
     <variant>en</variant>
-    <variant>fr</variant>
-    <variant>tr</variant>
+    <variant outdated="yes">fr</variant>
+    <variant outdated="yes">tr</variant>
   </variants>
 </metafile>

docs/manual/caching.xml.tr

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8" ?>
 <!DOCTYPE manualpage SYSTEM "style/manualpage.dtd">
 <?xml-stylesheet type="text/xsl" href="style/manual.tr.xsl"?>
-<!-- English Revision: 1836061 -->
+<!-- English Revision: 1836061:1933180 (outdated) -->
 <!-- =====================================================
  Translated by: Nilgün Belma Bugüner <nilgun belgeler.gen.tr>
    Reviewed by: Orhan Berent <berent belgeler.gen.tr>

docs/manual/content-negotiation.html.en

@@ -82,10 +82,9 @@ Negotiation</a></li>
     other media types, but also allowing any other media type as a
     last resort:</p>
 
-<div class="example"><p><code>
-  Accept-Language: fr; q=1.0, en; q=0.5<br />
-  Accept: text/html; q=1.0, text/*; q=0.8, image/gif; q=0.6, image/jpeg; q=0.6, image/*; q=0.5, */*; q=0.1
-</code></p></div>
+<div class="example"><pre class="prettyprint lang-config">Accept-Language: fr; q=1.0, en; q=0.5
+Accept: text/html; q=1.0, text/*; q=0.8, image/gif; q=0.6, image/jpeg; q=0.6, image/*; q=0.5, */*; q=0.1</pre>
+</div>
 
     <p>httpd supports 'server driven' content negotiation, as
     defined in the HTTP/1.1 specification. It fully supports the
@@ -161,17 +160,16 @@ Negotiation</a></li>
     absolute or relative URIs for any file located on the same server as
     the map file.</p>
 
-<div class="example"><p><code>
-  URI: foo<br />
-<br />
-  URI: foo.en.html<br />
-  Content-type: text/html<br />
-  Content-language: en<br />
-<br />
-  URI: foo.fr.de.html<br />
-  Content-type: text/html;charset=iso-8859-2<br />
-  Content-language: fr, de<br />
-</code></p></div>
+<div class="example"><pre class="prettyprint lang-config">URI: foo
+
+URI: foo.en.html
+Content-type: text/html
+Content-language: en
+
+URI: foo.fr.de.html
+Content-type: text/html;charset=iso-8859-2
+Content-language: fr, de</pre>
+</div>
 
     <p>Note also that a typemap file will take precedence over the
     filename's extension, even when Multiviews is on. If a
@@ -194,34 +192,32 @@ Negotiation</a></li>
     the original) in the type map file. The original file can be
     assigned its language in the type map without being renamed:</p>
 
-<div class="example"><p><code>
-  URI: foo<br />
-<br />
-  URI: foo.html<br />
-  Content-type: text/html<br />
-  Content-language: en<br />
-<br />
-  URI: foo.fr.html<br />
-  Content-type: text/html<br />
-  Content-language: fr<br />
-</code></p></div>
+<div class="example"><pre class="prettyprint lang-config">URI: foo
+
+URI: foo.html
+Content-type: text/html
+Content-language: en
+
+URI: foo.fr.html
+Content-type: text/html
+Content-language: fr</pre>
+</div>
 
     <p>If the variants have different source qualities, that may be
     indicated by the "qs" parameter to the media type, as in this
     picture (available as JPEG, GIF, or ASCII-art): </p>
 
-<div class="example"><p><code>
-  URI: foo<br />
-<br />
-  URI: foo.jpeg<br />
-  Content-type: image/jpeg; qs=0.8<br />
-<br />
-  URI: foo.gif<br />
-  Content-type: image/gif; qs=0.5<br />
-<br />
-  URI: foo.txt<br />
-  Content-type: text/plain; qs=0.01<br />
-</code></p></div>
+<div class="example"><pre class="prettyprint lang-config">URI: foo
+
+URI: foo.jpeg
+Content-type: image/jpeg; qs=0.8
+
+URI: foo.gif
+Content-type: image/gif; qs=0.5
+
+URI: foo.txt
+Content-type: text/plain; qs=0.01</pre>
+</div>
 
     <p>qs values can vary in the range 0.000 to 1.000. Note that
     any variant with a qs value of 0.000 will never be chosen.

docs/manual/content-negotiation.html.fr.utf8

@@ -29,6 +29,8 @@
 <a href="./ko/content-negotiation.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
 <a href="./tr/content-negotiation.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
 </div>
+<div class="outofdate">Cette traduction peut être périmée. Vérifiez la version
+            anglaise pour les changements récents.</div>
 
 
     <p>Apache HTTPD prend en charge la négociation de

docs/manual/content-negotiation.xml.fr

@@ -3,7 +3,7 @@
 <?xml-stylesheet type="text/xsl" href="./style/manual.fr.xsl"?>
 <!-- French translation : Lucien GENTIS -->
 <!-- Reviewed by : Vincent Deffontaines -->
-<!-- English Revision: 1932310 -->
+<!-- English Revision: 1932310:1933190 (outdated) -->
 
 <!--
  Licensed to the Apache Software Foundation (ASF) under one or more

docs/manual/content-negotiation.xml.ja

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8" ?>
 <!DOCTYPE manualpage SYSTEM "./style/manualpage.dtd">
 <?xml-stylesheet type="text/xsl" href="./style/manual.ja.xsl"?>
-<!-- English Revision: 675610:1932310 (outdated) -->
+<!-- English Revision: 675610:1933190 (outdated) -->
 
 <!--
  Licensed to the Apache Software Foundation (ASF) under one or more

docs/manual/content-negotiation.xml.ko

@@ -1,7 +1,7 @@
 <?xml version='1.0' encoding='EUC-KR' ?>
 <!DOCTYPE manualpage SYSTEM "./style/manualpage.dtd">
 <?xml-stylesheet type="text/xsl" href="./style/manual.ko.xsl"?>
-<!-- English Revision: 151408:1932310 (outdated) -->
+<!-- English Revision: 151408:1933190 (outdated) -->
 
 <!--
  Licensed to the Apache Software Foundation (ASF) under one or more

docs/manual/content-negotiation.xml.meta

@@ -8,7 +8,7 @@
 
   <variants>
     <variant>en</variant>
-    <variant>fr</variant>
+    <variant outdated="yes">fr</variant>
     <variant outdated="yes">ja</variant>
     <variant outdated="yes">ko</variant>
     <variant outdated="yes">tr</variant>

docs/manual/content-negotiation.xml.tr

@@ -1,7 +1,7 @@
 <?xml version='1.0' encoding='UTF-8' ?>
 <!DOCTYPE manualpage SYSTEM "./style/manualpage.dtd">
 <?xml-stylesheet type="text/xsl" href="./style/manual.tr.xsl"?>
-<!-- English Revision: 1450091:1932310 (outdated) -->
+<!-- English Revision: 1450091:1933190 (outdated) -->
 <!-- =====================================================
  Translated by: Nilgün Belma Bugüner <nilgun belgeler.gen.tr>
    Reviewed by: Orhan Berent <berent belgeler.gen.tr>

docs/manual/custom-error.html.en

@@ -108,18 +108,17 @@ ErrorDocument 401 /subscription/how_to_subscribe.html</pre>
       <p>For example, you might receive, in addition to more usual
       environment variables, the following.</p>
 
-      <div class="example"><p><code>
-        REDIRECT_HTTP_ACCEPT=*/*, image/gif, image/jpeg, image/png<br />
-        REDIRECT_HTTP_USER_AGENT=Mozilla/5.0 Fedora/3.5.8-1.fc12 Firefox/3.5.8<br />
-        REDIRECT_PATH=.:/bin:/usr/local/bin:/sbin<br />
-        REDIRECT_QUERY_STRING=<br />
-        REDIRECT_REMOTE_ADDR=121.345.78.123<br />
-        REDIRECT_REMOTE_HOST=client.example.com<br />
-        REDIRECT_SERVER_NAME=www.example.edu<br />
-        REDIRECT_SERVER_PORT=80<br />
-        REDIRECT_SERVER_SOFTWARE=Apache/2.2.15<br />
-        REDIRECT_URL=/cgi-bin/buggy.pl
-      </code></p></div>
+      <div class="example"><pre class="prettyprint lang-config">REDIRECT_HTTP_ACCEPT=*/*, image/gif, image/jpeg, image/png
+REDIRECT_HTTP_USER_AGENT=Mozilla/5.0 Fedora/3.5.8-1.fc12 Firefox/3.5.8
+REDIRECT_PATH=.:/bin:/usr/local/bin:/sbin
+REDIRECT_QUERY_STRING=
+REDIRECT_REMOTE_ADDR=121.345.78.123
+REDIRECT_REMOTE_HOST=client.example.com
+REDIRECT_SERVER_NAME=www.example.edu
+REDIRECT_SERVER_PORT=80
+REDIRECT_SERVER_SOFTWARE=Apache/2.2.15
+REDIRECT_URL=/cgi-bin/buggy.pl</pre>
+</div>
 
       <p><code>REDIRECT_</code> environment variables are created from
       the environment variables which existed prior to the

docs/manual/custom-error.html.es

@@ -30,6 +30,10 @@
 <a href="./ko/custom-error.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
 <a href="./tr/custom-error.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>
 </div>
+<div class="outofdate">Esta traducci&#243;n podr&#237;a estar
+            obsoleta. Consulte la versi&#243;n en ingl&#233;s de la
+            documentaci&#243;n para comprobar si se han producido cambios
+            recientemente.</div>
 
     <p>Apache ofrece la posibilidad de que los webmasters puedan
     configurar las respuestas que muestra el servidor Apache cuando se

docs/manual/custom-error.html.fr.utf8

@@ -30,6 +30,8 @@
 <a href="./ko/custom-error.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
 <a href="./tr/custom-error.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>
 </div>
+<div class="outofdate">Cette traduction peut être périmée. Vérifiez la version
+            anglaise pour les changements récents.</div>
 
     <p>Le serveur HTTP Apache fournit des messages d'erreur génériques
     pour les codes de statut 4xx ou 5xx ; ces messages sont cependant

docs/manual/custom-error.html.tr.utf8

@@ -30,6 +30,7 @@
 <a href="./ko/custom-error.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |
 <a href="./tr/custom-error.html" title="Türkçe">&nbsp;tr&nbsp;</a></p>
 </div>
+<div class="outofdate">Bu çeviri güncel olmayabilir. Son değişiklikler için İngilizce sürüm geçerlidir.</div>
 
 
     <p>Apache HTTP Sunucusu 4xx veya 5xx HTTP durum kodları ile ilgili

docs/manual/custom-error.xml.es

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8" ?>
 <!DOCTYPE manualpage SYSTEM "./style/manualpage.dtd">
 <?xml-stylesheet type="text/xsl" href="./style/manual.es.xsl"?>
-<!-- English Revision: 1741841 -->
+<!-- English Revision: 1741841:1933190 (outdated) -->
 
 <!--
  Licensed to the Apache Software Foundation (ASF) under one or more

docs/manual/custom-error.xml.fr

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8" ?>
 <!DOCTYPE manualpage SYSTEM "./style/manualpage.dtd">
 <?xml-stylesheet type="text/xsl" href="./style/manual.fr.xsl"?>
-<!-- English Revision: 1741841 -->
+<!-- English Revision: 1741841:1933190 (outdated) -->
 <!-- French translation : Lucien GENTIS -->
 <!-- Reviewed by : Vincent Deffontaines -->
 

docs/manual/custom-error.xml.ja

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8" ?>
 <!DOCTYPE manualpage SYSTEM "./style/manualpage.dtd">
 <?xml-stylesheet type="text/xsl" href="./style/manual.ja.xsl"?>
-<!-- English Revision: 558686:1741841 (outdated) -->
+<!-- English Revision: 558686:1933190 (outdated) -->
 
 <!--
  Licensed to the Apache Software Foundation (ASF) under one or more

docs/manual/custom-error.xml.ko

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="EUC-KR" ?>
 <!DOCTYPE manualpage SYSTEM "./style/manualpage.dtd">
 <?xml-stylesheet type="text/xsl" href="./style/manual.ko.xsl"?>
-<!-- English Revision: 420990:1741841 (outdated) -->
+<!-- English Revision: 420990:1933190 (outdated) -->
 
 <!--
  Licensed to the Apache Software Foundation (ASF) under one or more