Slashdot Mirror

← Back to Stories (view on slashdot.org)

Apache 2.0.45 Released

Posted by michael on from the better-than-okra dept.

thx2001r writes "Well, it's no longer April 1st across the contiguous United States, so the coast is clear to say Apache 2.0.45 is released. This version contains two important security fixes and a number of bug fixes. The security fixes affect all platforms and versions of Apache 2.0.x up until this update with some special caveats for the 2.0.45 OS/2 release. It looks like the first security vulnerability addressed in this eighth public release of the Apache 2.0.x series is having its details witheld until April 8th. This is being called "a significant Denial of Service vulnerability" for Apache 2.0.x by the ASF."

5 of 35 comments (clear)

  1. Re:Soo... When can NT users use this? by rdieter · · Score: 5, Informative
    when will SSL support be ported for Apache 2?
    FYI, SSL support is builtin (apache.org) now.
  2. Re:Soo... When can NT users use this? by thx2001r · · Score: 5, Informative

    Well, I've been using Apache 2.0.x Mod_SSL OpenSSL since, Apache 2.0.35, on Windows NT 5 (Win2k). Get a compiler the instructions are available publicly.

    The only reason it is not pre-compiled for binary release (win32) with OpenSSL by Apache Group is legal concerns over strong encryption:

    "This version is only available at present in a -no_ssl flavor, due to ongoing questions of strong crypto redistribution. When a binary build with mod_ssl compiled in is made available, the -no_ssl flavor will remain as an option for those in jurisdictions that restrict ssl encryption, as well as those T8 prohibited from downloading from the ASF's US-based servers." Source:

    Apache 2.0.44 and the latest OpenSSL 0.9.7a were, well, a bit of a challenge to compile, but it's done (and that was mostly to do with OpenSSL 0.9.7a). Now on to 2.0.45!

    --

    -Joe
    If we're all god's children, what's so special about Jesus? - Jimmy Carr

  3. Re:PHP4 with Apache2? by bodgit · · Score: 4, Informative

    I've been running PHP 4.2.3 with Apache 2.0.43+ and there haven't been any problems so far. I've kept the PHP options to a minimum to get Horde/Imp working, so there may be some adventurous settings that will still cause problems.

  4. PHP4 with Apache2: YES! by dananderson · · Score: 3, Informative
    Most problems seem to be caused by those who use the Apache MT model with thread-unsafe libraries that PHP may link in.

    Stick with the classic (Apache 1.x) prefork MPM model and you'll be a lot safer. YMMV.

    I have a writeup on using PHP with Apache 2 at http://dan.drydog.com/apache2php.html

  5. Re:PHP4 with Apache2? by Malcolm+Scott · · Score: 4, Informative

    I've been using Apache 2.0.44 with PHP 4.3.1 for a while on a Gentoo-based server, and I've had no problem at all. Works like a treat.

    The PHP team needed to do a bit of code tweaking to make PHP fit into the Apache 2 module format (APXS2) - so initially, as you say, PHP support for Apache 2 was very bad/nonexistant. But that work has been completed AFAIK, so any recent PHP version should work fine with Apache 2.