Slashdot Mirror


Apache 2.0.46 Released

The Apache HTTP Server Project writes "Apache 2.0.46 has been released. It's an important security-fix release, fixing both a crash bug [CAN-2003-0245] and a DoS [CAN-2003-0189], so everybody using prior versions of Apache 2.0 should grab a copy from the nearest mirror and upgrade!"

4 of 19 comments (clear)

  1. vague changelog by Imperator · · Score: 4, Interesting

    I wish the announcement would be a bit more specific about the security fixes and who needs them. I don't use mod_dav or a threaded MPM, but do I still need to upgrade?

    --

    Gates' Law: Every 18 months, the speed of software halves.
    1. Re:vague changelog by cliffwoolley · · Score: 4, Informative
      but do I still need to upgrade?


      Definitely upgrade. Note also that full details of the problem will be released on Friday.

      --Cliff Woolley
      Apache HTTP Server Project
      Apache 2.0.46 Release Management team
    2. Re:vague changelog by SpaFF · · Score: 3, Informative

      Well for one it gives people a chance to upgrade before the "bad guys" know the specifics of what the problem is. That way people can get their servers updated before a DoS attack program is written.

      --
      -----BEGIN GEEK CODE BLOCK----- Version: 3.12 GIT d? s: a-- C++++ UL++++ P++ L+++ E- W++ N o-- K- w--- O- M+ V PS+ P
  2. Re:Unfortunately.. by SiMac · · Score: 2

    It turns out it was my fault...i did --enable-proxy-httpd but not --enable-proxy. Perhaps there should be some configure check to stop me from doing this?

    Sorry to waste your time.