Download Apache 2.0.46

On Apache.org we read the joyful message that version 2.0.46 of the Apache HTTP Server has been released. The release, number nine in the 2.0 line, contains two major security updates and a few bug fixes:

Security vulnerabilities closed since Apache 2.0.45

• SECURITY [CAN-2003-0245]: Fixed a bug that could be triggered remotely through mod_dav and possibly other mechanisms, causing an Apache child process to crash. The crash was first reported by David Endler and was researched and fixed by Joe Orton . Details will be released on May 30, 2003.
• SECURITY [CAN-2003-0189]: Fixed a denial-of-service vulnerability affecting basic authentication on Unix platforms related to thread-safety in apr_password_validate(). The problem was reported by John Hughes

[break]The complete changelog is here to find. People with a Unix-like operating system can here right for the new source. Windows owners should here to be.