Apache HTTP Server 2.4.1
Changes* SECURITY: CVE-2012-0053 (cve.mitre.org). Fix an issue in error responses that could expose "httpOnly" cookies when no custom ErrorDocument is specified for status code 400. [Eric Covener]
* mod_proxy_balancer: Fix crash on Windows. PR 52402 [Mladen Turk]
* core: Check during configtest that the directories for error logs exist. PR 29941 [Stefan Fritsch]
* Core configuration: add AllowOverride option to treat syntax errors in .htaccess as non-fatal. PR 52439 [Nick Kew, Jim Jagielski]
* core: Fix memory consumption in core output filter with streaming bucket types like CGI or PIPE. [Joe Orton, Stefan Fritsch]
* configure: Disable modules at configure time if a prerequisite module is not enabled. PR 52487. [Stefan Fritsch]
* Rewrite and proxy now decline what they don't support rather than fail the request. [Joe Orton]
* Fix building against external apr plus ap-util if apr is not installed in a system default path. [Rainer Jung]
* Doxygen fixes and improvements. [Joe Orton, Igor Galić]
* core: Fix building against PCRE 8.30 by switching from the obsolete pcre_info() to pcre_fullinfo(). PR 52623 [Ruediger Pluem, Rainer Jung]
Linux - 5.30 MB