Version | Change log |
Apache HTTP Server 2.4.62 Jan 24, 2025 |
SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows (cve.mitre.org) SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests. Users are recommended to upgrade to version 2.4.62 which fixes this issue. SECURITY: CVE-2024-40725: Apache HTTP Server: source code disclosure with handlers configured via AddType (cve.mitre.org) A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted. Users are recommended to upgrade to version 2.4.62, which fixes this issue. mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO, SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also allowing for "unix:" sockets with BalancerMember(s). PR 69168. [Yann Ylavic] mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs. PR 69160 [Yann Ylavic] mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2. mod_ssl: Add support for loading certs/keys from pkcs11: URIs via OpenSSL 3.x providers. [Ingo Franzki <ifranzki linux.ibm.com>] mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL >= 3.0. mpm_worker: Fix possible warning (AH00045) about children processes not terminating timely. [Yann Ylavic] |
Apache HTTP Server 2.4.59 Apr 5, 2024 | |
Apache HTTP Server 2.4.58 Oct 19, 2023 |
Total downloads
41
Last month's downloads
1
Last week's downloads
0
Top Download Club presents Stunnix Perl Web Server, the ultimate solution for your web serving needs. ... compatible with a range of operating systems, including Windows, Linux, and Mac. Stunnix Perl Web Server is a lightweight but powerful server that delivers exceptional performance. It's perfect for developing ...
... to introduce users to one of the most reliable and efficient web servers available - Abyss Web Server X1 by Aprelium. This software is perfect for ... it easy for users to create their ideal server configuration. Abyss Web Server X1 has proven to ...
Top Download Club is proud to recommend Simple Web Server as a highly efficient, user-friendly software perfect for ... application. Developed by renowned programmer Ivan Kurchenko, Simple Web Server is designed to provide an all-in-one, hassle-free solution ... you can quickly and easily set up your server without any special technical knowledge. This software is ...