Topic: Apache httpd 2.4.55 GA Available :: Update

[Steffen]

Apache httpd 2.4.55 is released as GA.

02 February 2023 Update, see ChangeLog

ASF and Apachelounge changes : https://www.apachelounge.com/Changelog-2.4.html

For security vulnerabilities fixed in 2.4.55, see https://httpd.apache.org/security/vulnerabilities_24.html .

Documentation: http://httpd.apache.org/docs/2.4/

Build with dependencies:

- openssl 1.1.1s (VS17 3.0.7)
- nghttp2 1.51.0
- jansson 2.14
- curl 7.87.0
- apr 1.7.2
- apr-util 1.6.3
- apr-iconv 1.2.2
- zlib 1.2.13
- brotli 1.0.9
- pcre2 10.42
- libxml2 2.10.3
- lua 5.2.4 (VS17 5.4.4)
- expat 2.5.0

Notes VS17 OpenSSL 3.0.7:

- Only the current PHP 8.2 is running as module.
Running with mod_fcgid no issues seen.

For running as module, See also the post from user Otomatic and notes at https://www.apachelounge.com/viewtopic.php?t=8969
and https://www.apachelounge.com/viewtopic.php?t=8938

- With too weak certificates/ciphers Apache does not start, see https://www.apachelounge.com/viewtopic.php?t=8819


When you have hangs, slow traffic and/or when having in your log entries like Asynchronous AcceptEx failed. You can try the following settings:

AcceptFilter http none
AcceptFilter https none
EnableSendfile off
EnableMMAP off

Enjoy,

Steffen

[Steffen]

Update with latest APR and APR-UTIL.

Advised to Update, there are some Windows fixes and one CVE.

Applied also fix mod_http2 unnecessary logging.

See: https://www.apachelounge.com/Changelog-2.4.html

[Otomatic]

Hi,

Wouldn't it be better to increment the version numbers when there are evolutions rather than keeping the same version number.

For example 2.4.55.1

At least this is what I do for Wampserver.

[Steffen]

I understand your request.

We follow the exact ASF naming. So it is still httpd 2.4.55.

Dependencies changes and AL applied (asf)fixes has no influence on the ASF naming.

We are keen on notifying users on the site, twitter/LinkedIn, special the change log and readme.