Software Update: Apache 1.3.24

Steije pointed out that the Apache Software Foundation has released version 1.3.24 of the widely used web server. The tarball is via this link to bring in. For other downloads you can click this page justly. Below is a list of the most important changes:

Security vulnerabilities

• Fix the security vulnerability noted in CAN-2002-0061 (mitre.org) regarding the escaping of command line args on Win32.
• Prevent invalid client hostnames from appearing in the log file.

New features

• Various mod_proxy improvements, such as the new ProxyIOBufferSize directive
• The new IgnoreCase keyword to the IndexOptions directive.
• Added the module mod_log_nw to handle log rotation under NetWare

Bug fixed

• mod_rewrite’s rnd was broken and has been fixed.
• The -S option of apxs was not able to handle quotes; also apxs is now rebuilt when options are changed.
• proxy now correctly handles Cookies and X-Cache headers.
• Fixed a problem in TPF when we were using the wrong subpool when opening the error log.
• pthread accept() mutexes on Solaris were broken (since we were not linking against pthread)