Apache HTTP Server 2.4.33 stable release: fix bugs

Apache HTTP Server

The Apache HTTP Server Project is a collaborative software development effort aimed at creating a robust, commercial-grade, featureful, and freely-available source code implementation of an HTTP (Web) server. The project is jointly managed by a group of volunteers located around the world, using the Internet and the Web to communicate, plan, and develop the server and its related documentation. This project is part of the Apache Software Foundation. In addition, hundreds of users have contributed ideas, code, and documentation to the project. This file is intended to briefly describe the history of the Apache HTTP Server and recognize the many contributors.

Apache HTTP Server

Licensed under the Apache License, Version 2.0

The stable version of Apache HTTP Server 2.4.33 has been released. The updated content is as follows:

*) core: Fix request timeout logging and possible crash for error_log hooks.

[Yann Ylavic]

*) mod_slomem_shm: Fix failure to create balancers’s slotmems in Windows MPM,

where children processes need to attach them instead since they are owned

by the parent process already.  [Yann Ylavic]

*) ab: try all destination socket addresses returned by

apr_sockaddr_info_get instead of failing on first one when not available.

Needed for instance if localhost resolves to both ::1 and 127.0.0.1

e.g. if both are in /etc/hosts.  [Jan Kaluza]

*) ab: Use only one connection to determine working destination socket

address.  [Jan Kaluza]

*) ab: LibreSSL doesn’t have or require Windows applink.c.  [Gregg L. Smith]

*) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.

apr-util’s bcrypt implementation doesn’t tolerate EBCDIC.  [Eric Covener]

*) htpasswd/htdbm: report the right limit when get_password() overflows.

[Yann Ylavic]

*) htpasswd: Don’t fail in -v mode if password file is unwritable.

PR 61631.  [Joe Orton]

*) htpasswd: don’t point to (unused) stack memory on output

to make static analysers happy.  PR 60634.

[Yann Ylavic, reported by shqking and Zhenwei Zou]

Download