15 July 2013, 10:10

Maintenance of Apache web server 2.0 discontinued

Apache feather

With the recent release of Apache web server version 2.0.65, the Apache project has discontinued the maintenance of the 2.0 version branch. The developers have urged users to migrate to current version series 2.2 or 2.4 editions as soon as possible; version 2.4 was released in February 2012.

Version 2.0 of the web server first became available for general use eleven years ago. Among the issues that have been fixed in this final release are six CVE-numbered security holes – including a bug in the logging feature that potentially allowed attackers to gain control of the server. However, the developers of the web server that is also known as "httpd" or "Apache HTTP Server" point out that it remains possible to exhaust all memory using a carefully crafted .htaccess rule. The issue will remain unresolved in version series 2.0; version 2.2.25, which was released in parallel with 2.0.65, has been modified to minimise this risk. This version also fixes the previously mentioned security hole in the logging feature.

(fab)

« previous | next »

Print Version | Send by email | Permalink: http://h-online.com/-1917444