Maintenance of Apache web server 2.0 discontinued |
Version 2.0 of the web server first became available for general use eleven years ago. Among the issues that have been fixed in this final release are six CVE-numbered security holes – including a bug in the logging feature that potentially allowed attackers to gain control of the server. However, the developers of the web server that is also known as "httpd" or "Apache HTTP Server" point out that it remains possible to exhaust all memory using a carefully crafted .htaccess rule. The issue will remain unresolved in version series 2.0; version 2.2.25, which was released in parallel with 2.0.65, has been modified to minimise this risk. This version also fixes the previously mentioned security hole in the logging feature.
Maintenance of Apache web server 2.0 discontinued | The H Security
No comments:
Post a Comment