September 28, 2004
28 September 2004 - Apache HTTP Server 2.0.52 Released
The Apache Software Foundation and The Apache HTTP Server Project are pleased to announce the release of version 2.0.52 of the Apache HTTP Server ("Apache"). This Announcement notes the significant changes in 2.0.52 as compared to 2.0.51. The Announcement is also available in German and Japanese from:
http://www.apache.org/dist/httpd/Announcement2.html.de
http://www.apache.org/dist/httpd/Announcement2.html.ja
This version of Apache is principally a bug fix release. Of particular note is that 2.0.52 addresses one new security related flaw introduced in 2.0.51:
Fix merging of the Satisfy directive, which was applied to the surrounding context and could allow access despite configured authentication. PR 31315.
[CAN-2004-0811]
The Apache HTTP Server Project would like to thank Rici Lake for identification and a proposed fix of this flaw.
This release is compatible with modules compiled for 2.0.42 and later versions. We consider this release to be the best version of Apache available and encourage users of all prior versions to upgrade.
Apache 2.0.52 is available for download from
http://httpd.apache.org/download.cgi
Please see the CHANGES_2.0 file, linked from the above page, for a full list of changes.
Apache 2.0 offers numerous enhancements, improvements, and performance boosts over the 1.3 codebase. For an overview of new features introduced after 1.3 please see
http://httpd.apache.org/docs-2.0/new_features_2_0.html
When upgrading or installing this version of Apache, please keep in mind the following:
If you intend to use Apache with one of the threaded MPMs, you must ensure that the modules (and the libraries they depend on) that you will be using are thread-safe. Please contact the vendors of these modules to obtain this information.
----
-- Apache HTTP Server Project Team
---- Posted by Tetsuya Kitahata at September 28, 2004 01:41 PMhttp://www.apachenews.org/archives/000469.html
[ Category : Apache HTTP ] (PDF)(XML)
