| Author |
|
Steffen
Moderator
Joined: 15 Oct 2005
Posts: 3092
Location: Hilversum, NL, EU
|
 Posted: Thu 27 Jul '06 22:06 Post subject: Apache 2.2.3 Win32 is now available |
 |
|
Apache 2.2.3 Win32 is now available for download here at the Apache Lounge. Build with the latest Windows® Platform SDK.
It is build without any modification to the ASF source and is soon to be released by ASF
Download: http://www.apachelounge.com/download/
Please let me know how it goes, so we can advise ASF !
Steffen
Changes with Apache 2.2.3
*) SECURITY: CVE-2006-3747 (cve.mitre.org)
mod_rewrite: Fix an off-by-one security problem in the ldap scheme
handling. For some RewriteRules this could lead to a pointer being
written out of bounds. Reported by Mark Dowd of McAfee.
[Mark Cox]
*) Win32: Minor fixes to build more cleanly under Visual Studio 2005
with command line builds. [William Rowe]
*) mod_authn_alias: Add a check to make sure that the base provider and the
alias names are different and also that the alias has not been registered
before. PR 40051. [Brad Nicholes]
*) mod_authnz_ldap: Fix a problem with invalid auth error detection for LDAP
client SDKs that don't support the LDAP_SECURITY_ERROR macro. PR 39529.
[Ray Price <dohrayme yahoo.com>, Josh Fenlason <jfenlason ptc.com>]
*) mod_cache: Do not overwrite the Content-Type in the cache, for
successfully revalidated cached objects. PR 39647. [Ruediger Pluem]
*) mod_speling: Add directive to deal with case corrections only
and ignore other misspellings [Olivier Thereaux <ot w3.org>]
*) mod_dbd: Fix dependence on virtualhost configuration in
defining prepared statements (possible segfault at startup
in user modules such as mod_authn_dbd). [Nick Kew]
*) Add optional 'scheme://' prefix to ServerName directive,
allowing correct determination of the canonical server URL
for use behind a proxy or offload device handling SSL; fixing
redirect generation in those cases. PR 33398. [Sander Temme]
*) Added server_scheme field to server_rec for above. Minor MMN bump.
[Sander Temme]
*) mod_cache: Make caching of reverse SSL proxies possible again. PR 39593.
[Ruediger Pluem, Joe Orton]
*) Worker MPM: On graceless shutdown or restart, send signals to
each worker thread to wake them up if they're polling on a
Keep-Alive connection. PR 38737. [Chris Darroch]
*) worker and event MPMs: fix excessive forking if fork() or child_init
take a long time. PR 39275.
[Greg Ames, Jeff Trawick, Chris Darroch <chrisd pearsoncmg.com> ]
*) configure: Add "--with-included-apr" flag to force use of the
bundled version of APR at build time. [Joe Orton]
*) Respect GracefulShutdownTimeout in the worker and event MPMs.
[Chris Darroch, Garrett Rooney]
*) mod_mem_cache: Set content type correctly when delivering data from
cache. PR 39266. [Ruediger Pluem]
*) mod_autoindex: Fix filename escaping with FancyIndexing disabled.
PR 38910. [Robby Griffin <rmg terc.edu>]
*) mod_charset_lite: Bypass translation when the source and dest charsets
are the same. [Jeff Trawick]
|
|
| Back to top |
|
pnllan
Joined: 05 Dec 2005
Posts: 221
|
| Posted: Thu 27 Jul '06 22:40 Post subject: |
|
|
Steffen,
Is this a RC or a pre-release?
..
. |
|
| Back to top |
|
Steffen
Moderator
Joined: 15 Oct 2005
Posts: 3092
Location: Hilversum, NL, EU
|
| Posted: Fri 28 Jul '06 0:15 Post subject: |
|
|
ASF does not use that terms.
The *complete* build is tagged for voting by the ASF PMC members.
The changes to the code are already voted in an earlier stage and are agreed.
Once tagged there is a very little change that someting is changing.
!! We cannot vote, but when you as member find an issues we can advise !!
This is important, nowadays the Win32 community is more avtive around the dev guys ( Jorge and I are participating )
Steffen |
|
| Back to top |
|
pnllan
Joined: 05 Dec 2005
Posts: 221
|
| Posted: Fri 28 Jul '06 0:55 Post subject: |
|
|
Regardless of how they term their releases, I was curious whether or not it is still in the development cycle. Good to hear you and Jorge are involved.
I installed and have it running with the most common modules and PHP, Perl, SSL, Mod Security, and Mod Macro.
At this point no exceptions or errors have been generated. I'll start some rigorous testing in the next couple of days. |
|
| Back to top |
|
Steffen
Moderator
Joined: 15 Oct 2005
Posts: 3092
Location: Hilversum, NL, EU
|
| Posted: Fri 28 Jul '06 2:09 Post subject: |
|
|
It is official released now, there where enough votes to release it so quick.
I updated the download page.
Thanks! for testing.
Steffen |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg
|
| Posted: Fri 28 Jul '06 9:11 Post subject: |
|
|
I read the eMails from Jorge and Steffen in dev list. Can't post myself (have no clue about c++). Marveless guys!
Can you force the httpd.apache.org guys also to use a newer compiler? Through the better preformance it would help to make apache more popular under windows.  |
|
| Back to top |
|
Jorge
Joined: 12 Mar 2006
Posts: 376
Location: Belgium
|
| Posted: Fri 28 Jul '06 9:47 Post subject: |
|
|
| Steffen wrote: |
This is important, nowadays the Win32 community is more avtive around the dev guys ( Jorge and I are participating )
|
Yes, we can't vote nor can we commit (i submittes a few patches agains x64, but none where committed  )
But we can advice and make sugestions
| James Blond wrote: | I read the eMails from Jorge and Steffen in dev list. Can't post myself (have no clue about c++). Marveless guys!
Can you force the httpd.apache.org guys also to use a newer compiler? Through the better preformance it would help to make apache more popular under windows. |
There has been talk about this... conclusion... a lot o f 3rd party modules are still using VC6 so no go |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg
|
| Posted: Fri 28 Jul '06 11:41 Post subject: |
|
|
| Jorge wrote: |
i submittes a few patches agains x64, but none where committed
|
Did you post your patches at bugzilla as adviced in http://httpd.apache.org/dev/patches.html ?
| Jorge wrote: |
There has been talk about this... conclusion... a lot o f 3rd party modules are still using VC6 so no go
|
I think, if ASF would set a new standart 3rd party modules would be also compiled in a newer compiler. It is like the PHP dev group, changes take so long, because no one want to have a controversy / trouble. Ok, all developer to that in their spare time, but some one need to leed! So I wait for Apache 3.0! |
|
| Back to top |
|
asinsh
Joined: 10 Dec 2005
Posts: 24
|
| Posted: Sun 30 Jul '06 1:08 Post subject: |
|
|
Your apache 2.2.3 seems to work fine...thanks.
One question: how does this now differ from the versions we can now download on the regular apache site? (There, they now have files called httpd-2.2.3-win32-src.zip and apache_2.2.3-win32-x86-no_ssl.msi.) |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg
|
| Posted: Sun 30 Jul '06 12:07 Post subject: |
|
|
| asinsh wrote: | | how does this now differ from the versions we can now download on the regular apache site? (There, they now have files called httpd-2.2.3-win32-src.zip and apache_2.2.3-win32-x86-no_ssl.msi.) |
httpd-2.2.3-win32-src.zip are only the source file, not compiled
The binary download differs in two things: a) apachelounge download support SSL the one from apache.org (ASF) does not include SSL
b) ÁSF uses msi packages. You don't realy know what in the installer do, and what it maybe write into the registry. Download from here is only packed as zip file. You have the full controll what is into it. Also caused by this zip file makes it easier to update a version, because you can only replace the binary files and don't have to uninstall the old one and than install the new one. |
|
| Back to top |
|
