Topic: Apache httpd 2.4.69 GA Available

[Steffen]

Apache httpd 2.4.69 is released as GA.

ASF and Apachelounge changes : https://www.apachelounge.com/Changelog-2.4.html

Lot of security fixes. See the important security vulnerabilities fixed in 2.4.xx, https://httpd.apache.org/security/vulnerabilities_24.html .

Documentation: http://httpd.apache.org/docs/2.4/

Build with dependencies:

- openssl 3.5.9
- nghttp2 1.70.0
- jansson 2.15.1
- curl 8.22.0
- apr 1.7.6
- apr-util 1.6.5
- apr-iconv 1.2.2
- zlib 1.3.2
- zstd 1.5.7
- brotli 1.2.0
- pcre2 10.49
- libxml2 2.15.4
- lua 5.5.1
- expat 2.8.5
- nghttp3 1.18.0
- ngtcp2 1.25.0

Enjoy

[psadmin]

So OpenSSL is going from 3.6.4 to 3.5.9 in this release?

Thanks

[psadmin]

Ahh, I believe I see why. 3.5 is a LTS branch....

[admin]

LTS versions are highly stable releases designed for enterprise use, guaranteeing a 5-year lifecycle.
Each LTS release receives full bug and security fixes for the first four years, followed by security-only patches in its final year.

[Steffen]

Due to a crash with LDAP mod_authnz_ldap.so, the module is replaced by the good working one from 2.4.68

see https://www.apachelounge.com/viewtopic.php?p=44520#44520

[Jan-E]

Brotli 1.2.0 has a vulnerability in broli decode. Please update to Brotli 1.2.1

[puertoblack2003]