Topic: Apache httpd 2.4.54 GA Available :: Update

[Steffen]

Apache httpd 2.4.54 is released as GA.

24 June 2022 Update, see ChangeLog

ASF and Apachelounge changes : https://www.apachelounge.com/Changelog-2.4.html

For security vulnerabilities fixed in 2.4.54, see https://httpd.apache.org/security/vulnerabilities_24.html .

Documentation: http://httpd.apache.org/docs/2.4/

Build with dependencies:

- openssl 1.1.1o
- nghttp2 1.47.0
- jansson 2.14
- curl 7.83.1
- apr 1.7.0
- apr-util 1.6.1
- apr-iconv 1.2.2
- zlib 1.2.12
- brotli 1.0.9
- pcre2 10.40
- libxml2 2.9.14
- lua 5.2.4
- expat 2.4.8


When you have hangs, slow traffic and/or when having in your log entries like Asynchronous AcceptEx failed. You can try the following settings:

AcceptFilter http none
AcceptFilter https none
EnableSendfile off
EnableMMAP off

Enjoy,

Steffen

[Steffen]

Summary from Stefan:

On 2022-06-08 the project released version 2.4.54 of Apache httpd. 8 CVEs have been fixed, 7 low and 1 moderate. Bugs have been fixed, the ACME certificate provisioning has some enhancements.

In detail:

Read more …. https://github.com/icing/blog/blob/main/httpd-2.4.54.md

[Steffen]

Update with latest OpenSSL 1.1.1p

[dmye]

New 2.5.x + option parameters can try to support it has been a few months thanks

DirectorySlash
DeflateAlterETag
StrictHostCheck
MergeSlashes
AsyncFilter
IndexForbiddenReturn404