| Author |  | 
| Steffen Moderator
 
 
 Joined: 15 Oct 2005
 Posts: 3131
 Location: Hilversum, NL, EU
 
 | 
|  Posted: Sat 05 Oct '13 11:43    Post subject: mod_fcgid 2.3.10-dev available |   |  
| 
 |  
| Almost 6 years ago 2.3.9 was released by the ASF. 
 There are fixes hanging in trunk, the best is make them available with 2.3.10-dev from trunk.
 
 More info about mod_fcgid :  https://httpd.apache.org/mod_fcgid/
 
 
 Steffen
 
 Changes with mod_fcgid 2.3.10-dev (trunk 6 May 2019)
 
 *) Send Content-Length to backend for chunked request bodies.  PR 53332.
 [Dominic Benson, Joe Orton]
 
 *) Fix memory consumption for large requests.  PR 51747.
 [Dominic Benson, Jan Stürtz]
 
 *) Use an alternate, lower severity log message when a failure to
 forward a response is due to the client connection being aborted.
 [Eric Covener]
 
 *) Windows: "graceful kill fail, sending SIGKILL" log message is now
 debug level instead of warning.  PR 54597.  [Mario Brandt]
 
 Changes with mod_fcgid 2.3.9
 
 *) Revert fix for PR 53693, added in 2.3.8 but undocumented.  Fix
 issues with a minor optimization added in 2.3.8.  [Jeff Trawick]
 
 Changes with mod_fcgid 2.3.8 (not released)
 
 *) SECURITY: CVE-2013-4365 (cve.mitre.org)
 Fix possible heap buffer overwrite.  Reported and solved by:
 [Robert Matthews <rob tigertech.com>]
 
 *) Add experimental cmake-based build system for Windows.  [Jeff Trawick]
 
 *) Correctly parse quotation and escaped spaces in FcgidWrapper and the
 AAA Authenticator/Authorizor/Access directives' command line argument,
 as currently documented.  PR 51194  [William Rowe]
 
 *) Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
 assignments).  PR 51657  [William Rowe]
 
 *) Conform script response parsing with mod_cgid and ensure no response
 body is sent when ap_meets_conditions() determines that request
 conditions are met.  [Chris Darroch]
 
 *) Improve logging in access control hook functions.  [Chris Darroch]
 
 *) Avoid making internal sub-requests and processing Location headers
 when in FCGI_AUTHORIZER mode, as the auth hook functions already
 treat Location headers returned by scripts as an error since
 redirections are not meaningful in this mode.  [Chris Darroch]
 
 Last edited by Steffen on Mon 06 May '19 13:58; edited 2 times in total
 |  | 
| Back to top |  | 
| Steffen Moderator
 
 
 Joined: 15 Oct 2005
 Posts: 3131
 Location: Hilversum, NL, EU
 
 | 
|  Posted: Mon 06 May '19 13:56    Post subject: |   |  
| 
 |  
| Almost 6 years ago 2.3.9 was released by the ASF. 
 There are fixes hanging in trunk, the best is make them available with 2.3.10-dev from trunk. We keep 2.3.9 available.
 |  | 
| Back to top |  | 
| Smitty 
 
 
 Joined: 03 Jan 2008
 Posts: 197
 
 
 | 
|  Posted: Wed 08 May '19 14:56    Post subject: |   |  
| 
 |  
| 2.3.10 working fine here. The error.log is breathing a sigh of relief now with the SIGKILL notices gone. |  | 
| Back to top |  | 
| Jan-E 
 
 
 Joined: 09 Mar 2012
 Posts: 1283
 Location: Amsterdam, NL, EU
 
 | 
|  Posted: Thu 09 May '19 20:51    Post subject: |   |  
| 
 |  
| Was there a special reason to make this available without a ASF release? Which of the changes was important enough to justify this ‘release’? |  | 
| Back to top |  | 
| James Blond Moderator
 
  
 Joined: 19 Jan 2006
 Posts: 7442
 Location: EU, Germany, Next to Hamburg
 
 | 
|  Posted: Fri 10 May '19 8:57    Post subject: |   |  
| 
 |  
|  	  | Jan-E wrote: |  	  | Was there a special reason to make this available without a ASF release? Which of the changes was important enough to justify this ‘release’? | 
 
 it has some important bug fixes for windows, runs stable as a rock and no one on mailing list was willing to run the official release.
 |  | 
| Back to top |  | 
| Jan-E 
 
 
 Joined: 09 Mar 2012
 Posts: 1283
 Location: Amsterdam, NL, EU
 
 | 
|  Posted: Fri 10 May '19 18:14    Post subject: |   |  
| 
 |  
| OK. I still regret that mod_fcgid is not part of the httpd project it self, like so many other modules. Did you ever try to get that accepted? |  | 
| Back to top |  | 
| James Blond Moderator
 
  
 Joined: 19 Jan 2006
 Posts: 7442
 Location: EU, Germany, Next to Hamburg
 
 | 
|  Posted: Fri 10 May '19 23:14    Post subject: |   |  
| 
 |  
| Yes, but mod_proxy_fcgi was more in favor. There was a hype about all mod_proxy_* modules. Gladly mod_proxy_html made it into the main project. Also mod_macro. I don't think the hype was a bad thing. A lot of code was cleaned and the different proxy modules use the same api and the same base module / code.
 mod_proxy_fcgi is for PHP FPM which doesn't work so great for me on windows. Also I prefer the fact of multiple PHP processes. That way multi core cpu are much better used.
 
 Another reason from my point of view is that there not so many windows guys on the httpd dev list.
 |  | 
| Back to top |  | 
| admin Site Admin
 
  
 Joined: 15 Oct 2005
 Posts: 706
 
 
 | 
|  Posted: Mon 17 Jun '19 14:41    Post subject: |   |  
| 
 |  
| Now 2.3.10 available for VS16 |  | 
| Back to top |  | 
| jmweb 
 
 
 Joined: 08 Jun 2017
 Posts: 22
 Location: USA, Charlotte
 
 | 
|  Posted: Fri 03 Apr '20 19:05    Post subject: |   |  
| 
 |  
| Any chance the following patch can make it into 2.3.10? 
 https://lists.gt.net/apache/dev/390238
 
 If not, I will have to keep using a custom build with each release
  |  | 
| Back to top |  | 
| Steffen Moderator
 
 
 Joined: 15 Oct 2005
 Posts: 3131
 Location: Hilversum, NL, EU
 
 |  | 
| Back to top |  | 
| Steffen Moderator
 
 
 Joined: 15 Oct 2005
 Posts: 3131
 Location: Hilversum, NL, EU
 
 | 
|  Posted: Tue 08 Nov '22 13:18    Post subject: |   |  
| 
 |  
| Now also available for VS17. |  | 
| Back to top |  | 
| James Blond Moderator
 
  
 Joined: 19 Jan 2006
 Posts: 7442
 Location: EU, Germany, Next to Hamburg
 
 | 
|  Posted: Wed 09 Nov '22 9:55    Post subject: |   |  
| 
 |  
| We need a release of that version. it might be an option to send more email requests for that to the development mailing list. |  | 
| Back to top |  |