Software Update: Apache 2.0.50

The Apache Software Foundation folks have released version 2.0.50 of the Apache HTTP server. The program is the most widely used web server in the world and owes this title to the fact that the web server is open source, cross platform and flexible. The full changelog is here can be found, the main changes are in the release notes below:

This version of Apache is principally a bug fix release. A summary of the bug fixes is given at the end of this document. Of particular note is that 2.0.50 addresses two security vulnerabilities:

A remotely triggered memory leak in http header parsing can allow a denial of service attack due to excessive memory consumption. [CAN-2004-0493]

Fixes a mod_ssl buffer overflow in the FakeBasicAuth code for a (trusted) client certificate subject DN which exceeds 6K in length. [CAN-2004-0488]