Win7 Download
bookmark Windows 7 Download add as favorite Windows 7 Download Windows 7 Download RSS register at Windows 7 Download

Apache HTTP Server full changelog

Apache HTTP Server full changelog

Apache HTTP Server 2.4.1 released Feb 24, 2012 (New Release)
*) SECURITY: CVE-2012-0053 (cve.mitre.org)
Fix an issue in error responses that could expose quot;httpOnlyquot; cookies
when no custom ErrorDocument is specified for status code 400.
[Eric Covener]

*) mod_proxy_balancer: Fix crash on Windows. PR 52402 [Mladen Turk]

*) core: Check during configtest that the directories for error logs exist.
PR 29941 [Stefan Fritsch]

*) Core configuration: add AllowOverride option to treat syntax
errors in .htaccess as non-fatal. PR 52439 [Nick Kew, Jim Jagielski]

*) core: Fix memory consumption in core output filter with streaming
bucket types like CGI or PIPE. [Joe Orton, Stefan Fritsch]

*) configure: Disable modules at configure time if a prerequisite module
is not enabled. PR 52487. [Stefan Fritsch]

*) Rewrite and proxy now decline what they don't support rather
than fail the request. [Joe Orton]
Apache HTTP Server 2.2.22 released Feb 6, 2012 (New Release)
· Reject requests where the request-URI does not match the HTTP specification, preventing unexpected expansion of target URLs in some reverse proxy configurations. [Joe Orton]
· Fix integer overflow in ap_pregsub() which, when the mod_setenvif module is enabled, could allow local users to gain privileges via a .htaccess file. [Stefan Fritsch, Greg Ames]
· Resolve additional cases of URL rewriting with ProxyPassMatch or RewriteRule, where particular request-URIs could result in undesired backend network exposure in some configurations. [Joe Orton]
Apache HTTP Server 2.2.21 released Sep 19, 2011 (New Release)
· SECURITY: CVE-2011-3348 (cve.mitre.org) mod_proxy_ajp: Respond with HTTP_NOT_IMPLEMENTED when the method is not recognized. [Jean-Frederic Clere]
· Fix a regression introduced by the CVE-2011-3192 byterange fix in 2.2.20. PR 51748. []
· mod_filter: Instead of dropping the Accept-Ranges header when a filter registered with AP_FILTER_PROTO_NO_BYTERANGE is present, set the header value to quot;nonequot;. [Eric Covener, Ruediger Pluem]
· mod_proxy_ajp: Ignore flushing if headers have not been sent. PR 51608 [Ruediger Pluem]
· mod_dav_fs: Fix segfault if apr DBM driver cannot be loaded. PR 51751. [Stefan Fritsch]
· mod_alias: Adjust log severity of quot;incomplete redirection targetquot; message. PR 44020.
· mod_rewrite: Check validity of each internal (int:) RewriteMap even if the RewriteEngine is disabled in server context, avoiding a crash while referencing the invalid int: map at runtime. PR 50994. [Ben Noordhuis ]
Apache HTTP Server 2.2.20 released Sep 6, 2011 (New Release)
· SECURITY: CVE-2011-3192 (cve.mitre.org)
· core: Fix handling of byte-range requests to use less memory, to avoid denial of service. If the sum of all ranges in a request is larger than the original file, ignore the ranges and send the complete file. PR 51714.
· mod_authnz_ldap: If the LDAP server returns constraint violation,
· don't treat this as an error but as quot;auth deniedquot;.
· mod_filter: Fix FilterProvider conditions of type quot;resp=quot; (response headers) for CGI.
· mod_reqtimeout: Fix a timed out connection going into the keep-alive state after a timeout when discarding a request body. PR 51103.
· core: Do the hook sorting earlier so that the hooks are properly sorted for the pre_config hook and during parsing the config.
Apache HTTP Server 2.2.19 released May 23, 2011 (New Release)
· Revert ABI breakage in 2.2.18 caused by the function signature change of ap_unescape_url_keep2f(). This release restores the signature from 2.2.17 and prior, and introduces ap_unescape_url_keep2f_ex().
Apache HTTP Server 2.2.18 released May 12, 2011 (New Release)
· coding: utf-8 -*- Changes with Apache 2.2.18
· Log an error for failures to read a chunk-size, and return 408 instead 413 when this is due to a read timeout. This change also fixes some cases of two error documents being sent in the response for the same scenario. [Eric Covener] PR49167
· core: Only log a 408 if it is no keepalive timeout. PR 39785 [Ruediger Pluem, Mark Montague ]
· core: Treat timeout reading request as 408 error, not 400. Log 408 errors in access log as was done in Apache 1.3.x. PR 39785 [Nobutaka Mantani , Stefan Fritsch, Dan Poirier]
Apache HTTP Server 2.2.17 released Oct 19, 2010 (New Release)
· prefork MPM: Run cleanups for final request when process exits gracefully to work around a flaw in apr-util.
· mod_reqtimeout: Do not wrongly enforce timeouts for mod_proxy's backend connections and other protocol handlers (like mod_ftp). Enforce the timeout for AP_MODE_GETLINE. If there is a timeout, shorten the lingering close time from 30 to 2 seconds.
· Proxy balancer: support setting error status according to HTTP response code from a backend.
· mod_authnz_ldap: If AuthLDAPCharsetConfig is set, also convert the password to UTF-8. PR 45318.
· core: check symlink ownership if both FollowSymlinks and SymlinksIfOwnerMatch are set
· core: fix origin checking in SymlinksIfOwnerMatch
· mod_headers: Enable multi-match-and-replace edit option
· mod_log_config: Make ${cookie}C correctly match whole cookie names instead of substrings.
Apache HTTP Server 2.2.16 released Jul 30, 2010 (New Release)
· SECURITY: CVE-2010-1452
· mod_dav, mod_cache: Fix Handling of requests without a path segment.
· SECURITY: CVE-2010-2068
· mod_proxy_ajp, mod_proxy_http, mod_reqtimeout: Fix timeout detection
· for platforms Windows, Netware and OS2. PR: 49417.
· core: Filter init functions are now run strictly once per request before handler invocation. The init functions are no longer run for connection filters. PR 49328. [Joe Orton]
· mod_filter: enable it to act on non-200 responses. PR 48377 [Nick Kew]
· mod_ldap: LDAP caching was suppressed (and ldap-status handler returns
· title page only) when any mod_ldap directives were used in VirtualHost context. [Eric Covener]
· mod_ssl: Fix segfault at startup if proxy client certs are shared across multiple vhosts. PR 39915. [Joe Orton]
· mod_proxy_http: Log the port of the remote server in various messages. PR 48812.
· apxs: Fix -A and -a options to ignore whitespace in httpd.conf

Apache HTTP Server for Windows 7 - free download notice

Windows 7 Download periodically updates software information of Apache HTTP Server from the publisher.
« BACK
My Account
My Saved Stuff
Windows 7 Downloads Picks
Popular Tags
Popular Windows 7 Software
© 2012 Windows7Download.com - All logos, trademarks, art and other creative works are and remain copyright and property of their respective owners. Microsoft Windows is a registered trademarks of Microsoft Corporation. Microsoft Corporation in no way endorses or is affiliated with windows7download.com.