当前位置:安全企业动态 → 正文

Apache HTTPD 2.4.28 稳定版发布

责任编辑:editor005 |来源:企业网D1Net  2017-10-06 17:15:42 本文摘自:cnBeta.COM

Apache HTTP Server(简称Apache)是Apache软件基金会的一个开放源码的网页服务器,可以在大多数电脑操作系统中运行,由于其跨平台和安全性被广泛使用,是最流行的Web服务器端软件之一。它快速、可靠并且可通过简单的API扩充,将Perl/Python等解释器编译到服务器中。

下载地址:

http://www.apache.org/dist/httpd/httpd-2.4.28.tar.gz

Changes with Apache 2.4.28

*) SECURITY: CVE-2017-9798 (cve.mitre.org)

Corrupted or freed memory access. must now be used in the

main configuration file (httpd.conf) to register HTTP methods before the

.htaccess files. [Yann Ylavic]

*) event: Avoid possible blocking in the listener thread when shutting down

connections. PR 60956. [Yann Ylavic]

*) mod_speling: Don't embed referer data in a link in error page.

PR 38923 [Nick Kew]

*) htdigest: prevent a buffer overflow when a string exceeds the allowed max

length in a password file.

[Luca Toscano, Hanno B枚ck ]

*) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).

[Jim Jagielski]

*) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.

PR 61142.

*) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified

down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),

's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]

*) mod_http2: Fix for stalling when more than 32KB are written to a

suspended stream. [Stefan Eissing]

*) build: allow configuration without APR sources. [Jacob Champion]

*) mod_ssl, ab: Fix compatibility with LibreSSL. PR 61184.

[Bernard Spil , Michael Schlenker ,

Yann Ylavic]

*) core/log: Support use of optional "tag" in syslog entries.

PR 60525. [Ben Rubson , Jim Jagielski]

*) mod_proxy: Fix ProxyAddHeaders merging. [Joe Orton]

*) core: Disallow multiple Listen on the same IP:port when listener buckets

are configured (ListenCoresBucketsRatio > 0), consistently with the single

bucket case (default), thus avoiding the leak of the corresponding socket

descriptors on graceful restart. [Yann Ylavic]

*) event: Avoid listener periodic wake ups by using the pollset wake-ability

when available. PR 57399. [Yann Ylavic, Luca Toscano]

*) mod_proxy_wstunnel: Fix detection of unresponded request which could have

led to spurious HTTP 502 error messages sent on upgrade connections.

PR 61283. [Yann Ylavic]

关键字:Apachehttpd

本文摘自:cnBeta.COM

x Apache HTTPD 2.4.28 稳定版发布 扫一扫
分享本文到朋友圈
当前位置:安全企业动态 → 正文

Apache HTTPD 2.4.28 稳定版发布

责任编辑:editor005 |来源:企业网D1Net  2017-10-06 17:15:42 本文摘自:cnBeta.COM

Apache HTTP Server(简称Apache)是Apache软件基金会的一个开放源码的网页服务器,可以在大多数电脑操作系统中运行,由于其跨平台和安全性被广泛使用,是最流行的Web服务器端软件之一。它快速、可靠并且可通过简单的API扩充,将Perl/Python等解释器编译到服务器中。

下载地址:

http://www.apache.org/dist/httpd/httpd-2.4.28.tar.gz

Changes with Apache 2.4.28

*) SECURITY: CVE-2017-9798 (cve.mitre.org)

Corrupted or freed memory access. must now be used in the

main configuration file (httpd.conf) to register HTTP methods before the

.htaccess files. [Yann Ylavic]

*) event: Avoid possible blocking in the listener thread when shutting down

connections. PR 60956. [Yann Ylavic]

*) mod_speling: Don't embed referer data in a link in error page.

PR 38923 [Nick Kew]

*) htdigest: prevent a buffer overflow when a string exceeds the allowed max

length in a password file.

[Luca Toscano, Hanno B枚ck ]

*) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).

[Jim Jagielski]

*) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.

PR 61142.

*) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified

down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),

's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]

*) mod_http2: Fix for stalling when more than 32KB are written to a

suspended stream. [Stefan Eissing]

*) build: allow configuration without APR sources. [Jacob Champion]

*) mod_ssl, ab: Fix compatibility with LibreSSL. PR 61184.

[Bernard Spil , Michael Schlenker ,

Yann Ylavic]

*) core/log: Support use of optional "tag" in syslog entries.

PR 60525. [Ben Rubson , Jim Jagielski]

*) mod_proxy: Fix ProxyAddHeaders merging. [Joe Orton]

*) core: Disallow multiple Listen on the same IP:port when listener buckets

are configured (ListenCoresBucketsRatio > 0), consistently with the single

bucket case (default), thus avoiding the leak of the corresponding socket

descriptors on graceful restart. [Yann Ylavic]

*) event: Avoid listener periodic wake ups by using the pollset wake-ability

when available. PR 57399. [Yann Ylavic, Luca Toscano]

*) mod_proxy_wstunnel: Fix detection of unresponded request which could have

led to spurious HTTP 502 error messages sent on upgrade connections.

PR 61283. [Yann Ylavic]

关键字:Apachehttpd

本文摘自:cnBeta.COM

电子周刊
回到顶部

关于我们联系我们版权声明隐私条款广告服务友情链接投稿中心招贤纳士

企业网版权所有 ©2010-2024 京ICP备09108050号-6 京公网安备 11010502049343号

^