Apache 2.0.44 Released

rbowen writes "The Apache Software Foundation is pleased to announce the release of Apache 2.0.44, which addresses a number of security issues. Download it from your favorite mirror." Rich notes that it fixes some important security problems (under Windows) for the Windows version. Also interesting is that now there truly is a split between a development and regular releases, adopting the Linux kernel model, with 2.1 being the dev Apache tree and 2.0 being the release tree.

What exactly are the differences...

[xchino]

between 1.x and 2.x? Could someone fill me in?

Apache

[ObviousGuy]

They both have to do with running the server on 9x or ME.

Is Apache's security really the problem here?

Re:Security problems under windows

[devleopard]

Haha.. as if someone running a unpatched Linux box who gets hacked doesn't deserve it. :-)

Compatibilty issues...

[rollthelosindice]

The 2.x and 1.x releases are VERY DIFFERENT. and mod_perl, for 1, hasn't released a stable release for the 2.x tree, so using the good old 1.3.27 is what you need to do.

This may be an issue of not being able to see the forest from the trees, and everyone that knows apache, knows what version they need for their server, so may not be the best bet for noobs.

But then again they may want all noobs to download the 2.x version, so the use of "best available" might be their marketing.

Re:Here are some major differences

[AKnightCowboy]

So basically, according to the performance graphs, Apache 2.0 is slower than 1.3 and doesn't support running PHP. Oooh, where can I sign up? ;-) I think I'll stick with 1.3.27 for quite some time until nobody updates it anymore and all my favorite mods are ported to Apache 2.0.

Re:Still no SSL for Windows

[kalos]

I'm running it without any problems.
http://uptime.netcraft.com/up/graph?mode_u=off&mod e_w=on&site=kalos.ath.cx&submit=Examine

to be exact. =)

Re:Interesting...

[Micah]

I'm developing a website right now using the httpd, php, and postgresql packages from RH 8. No problems yet.

Good news to Win users

[blaqsun]

This is excellent news for Windows users who wish to run Apache 2 from their systems. For ages, it seems, Apache 2 had a security issue under Windows XP that would not allow it to run properly under the OS. Only users wh ohad registered with Microsfot online could download the special patches that fixed these problems.

Now Apache 2 has worked around these issues while also improving security. Halleluia, I say. I can get rid of my old Linux server now and cannabalize the spare parts to augment my current XP server.

Always Have a "Backup" Plan

[EXTomar]

Of course your regular maintance should include backups but I'm not talking about that. If you "play" with not so mature software for your production environment then you ARE asking for trouble.

I have been playing with Apache 2.0 line for a while and it most assuredly does not have the stability of the 1.3 line. Each release does get a little better.

What I end up doing is keeping a 2.0 and 1.3 server compiled with modules and configuration necessary. If it turns out that the 2.0 has a devistating problem or fails to work then then 1.3 is ready to go. The code bases aren't that large and although the configurations do differ they are managable.

I recommend anyone who wants to try out Apache 2.0 but can't tolerate disruptions to maintain two configured servers.