Apache 2.0.43 is uit!
http://www.apache.org/dist/httpd/Announcement2.html
http://www.apache.org/dist/httpd/
http://www.apache.org/dist/httpd/binaries/
Deze nieuwe versie is in verschillende versies verkrijgbaar:
httpd-2.0.43-win32-src.zip
httpd-2.0.43.tar.Z
httpd-2.0.43.tar.gz
apache_2.0.43-win32-x8 6-no_ssl.exe
Op
http://www.apache.org/mirrors/ staat een lijst mirrors, maar lang niet mirrors alle zijn geüpdate tot de huidige versie.
Lange changelog:
http://www.apache.org/dist/httpd/CHANGES_2.0Apache 2.0.43 Major changes
Security vulnerabilities closed since Apache 2.0.42
- Fixed the security vulnerability noted in CAN-2002-0840 (cve.mitre.org) regarding a cross-site scripting vulnerability in the default error page when using wildcard DNS.
- Prevent POST requests for CGI scripts from serving the source code when DAV is enabled on the location.
Bugs fixed since Apache 2.0.42
- Fixed a core dump in mod_cache when it attemtped to store uncopyable buckets, such as a file containing SSI tags to execute a CGI script.
- Ensured that output already available is flushed to the network to help some streaming CGIs and other dynamically-generated content.
- Fixed a mutex problem in mod_ssl dbm session cache support.
- Allow the UserDir directive to accept a list of directories, as in 1.3.
- Changed SuExec to use the same default directory as the rest of the server, e.g. /usr/local/apache2.
- Retry connections with mod_auth_ldap on LDAP_SERVER_DOWN errors.
Pass the WWW-Authenticate header on a 4xx responses from the proxy.
- Fixed mod_cache's CacheMaxStreamingBuffer directive within virtual hosts.
Add -p option to apxs to allow programs to be compiled with apxs.