Apache 1.3.23 Released 17
Posted
by
Hemos
from the recompile-time dept.
from the recompile-time dept.
meheler writes "Looks like the Apache Group have released version 1.3.23 of their popular web server. Here's a link to the Official Announcement as well as where you can download it, and even view the ChangeLog."
(sigh) I feel like the Dunkin Donuts guy (Score:3, Interesting)
What I want to know is why Apache 2.0 hasn't made anymore beta progress in the last month or two than it has. Mind you, it's coming along, but it seems to have been in beta a long, long time. How are they coming with it? The bug tracking list doesn't ever seem to shrink much.
Re:(sigh) I feel like the Dunkin Donuts guy (Score:1)
Re:(sigh) I feel like the Dunkin Donuts guy (Score:2)
Re:(sigh) I feel like the Dunkin Donuts guy (Score:1)
Go apache!
Apache ports... (Score:2)
Re:Apache ports... (Score:1)
Why would you want that? (Score:2)
Why would you want to use the cygwin version?
CAN-2001-0731 (Score:1, Informative)
According to the ChangeLog, vulnerability CAN-2001-0731 is present in Apache 1.3.20, and fixed in 1.3.21. Has anyone managed to reproduce this vulnerability? If so, how? The examples given in the vulnerability report don't seem to work.
We use 1.3.20 at work. It works very well, and I don't want to upgrade unless I really have to, but this is a potentially bad security hole for us.
Just in case, I've disabled MultiViews for now. We'll have to turn it on again in a month or so, unless I can code up a fix for some of our instruments so that they no longer rely on it.
This is the link to CAN-2001-0731 [mitre.org]
-- Guges --
Re:CAN-2001-0731 (Score:1)
Any upgrade that fixes a security hole is an upgrade worth getting, IMHO, especially if security is an issue.