Project description.

The Apache HTTP Server Project is an effort to develop and maintain an open-source HTTP server for modern operating systems including UNIX and Windows NT.

The goal of this project is to provide a secure, efficient and extensible server that provides HTTP services in sync with the current HTTP standards

Apache 2.2.14 Changelog
  • SECURITY: CVE-2009-2699 ( Fixed in APR 1.3.9. Faulty error handling in the Solaris pollset support (Event Port backend) which could trigger hangs in the prefork and event MPMs on that platform. PR 47645. [Jeff Trawick]
  • SECURITY: CVE-2009-3095 ( mod_proxy_ftp: sanity check authn credentials. [Stefan Fritsch , Joe Orton]
  • SECURITY: CVE-2009-3094 ( mod_proxy_ftp: NULL pointer dereference on error paths. [Stefan Fritsch , Joe Orton]
  • mod_proxy_scgi: Backport from trunk. [AndrĂ© Malo]
  • mod_ldap: Don't try to resolve file-based user ids to a DN when AuthLDAPURL has been defined at a very high level. PR 45946. [Eric Covener]
  • htcacheclean: 19 ways to fail, 1 error message. Fixed. [Graham Leggett]
  • mod_ldap: Bring the LDAPCacheEntries and LDAPOpCacheEntries usage() in synch with the manual and the implementation (0 and -1 both disable the cache). [Eric Covener]
  • mod_ssl: The error message when SSLCertificateFile is missing should at least give the name or position of the problematic virtual host definition. [Stefan Fritsch sf]
  • htdbm: Fix possible buffer overflow if dbm database has very long values. PR 30586 [Dan Poirier]
  • Add support for HTTP PUT to ab. [Jeff Barnes ]
  • mod_ssl: Fix SSL_*_DN_UID variables to use the 'userID' attribute type. PR 45107. [Michael Ströder , Peter Sylvester ]
  • mod_cache: Add CacheIgnoreURLSessionIdentifiers directive to ignore defined session identifiers encoded in the URL when caching. [Ruediger Pluem]
  • mod_mem_cache: fix seg fault under load due to pool concurrency problem PR: 47672 [Dan Poirier ]
  • mod_autoindex: Correctly create an empty cell if the description for a file is missing. PR 47682 [Peter Poeml ]