Topic: Apache httpd 2.4.55 GA Available :: Update

[Steffen]

Apache httpd 2.4.55 is released as GA.

02 February 2023 Update, see ChangeLog
09 February 2023 Update, see ChangeLog

ASF and Apachelounge changes : https://www.apachelounge.com/Changelog-2.4.html

For security vulnerabilities fixed in 2.4.55, see https://httpd.apache.org/security/vulnerabilities_24.html .

Documentation: http://httpd.apache.org/docs/2.4/

Build with dependencies:

- openssl VS16 1.1.1t, VS17 3.0.8
- nghttp2 1.51.0
- jansson 2.14
- curl 7.87.0
- apr 1.7.2
- apr-util 1.6.3
- apr-iconv 1.2.2
- zlib 1.2.13
- brotli 1.0.9
- pcre2 10.42
- libxml2 2.10.3
- lua VS16 5.2.4, VS17 5.4.4
- expat 2.5.0

Notes VS17 OpenSSL 3.0.7:

- Only the current PHP 8.2 is running as module.
Running with mod_fcgid no issues seen.

For running as module, See also the post from user Otomatic and notes at https://www.apachelounge.com/viewtopic.php?t=8969
and https://www.apachelounge.com/viewtopic.php?t=8938

- With too weak certificates/ciphers Apache does not start, see https://www.apachelounge.com/viewtopic.php?t=8819


When you have hangs, slow traffic and/or when having in your log entries like Asynchronous AcceptEx failed. You can try the following settings:

AcceptFilter http none
AcceptFilter https none
EnableSendfile off
EnableMMAP off

Enjoy,

Steffen

[Steffen]

Update with latest APR and APR-UTIL.

Advised to Update, there are some Windows fixes and one CVE.

Applied also fix mod_http2 unnecessary logging.

See: https://www.apachelounge.com/Changelog-2.4.html

[ltdeta]

Is it possible to update Openssl to version 1.1.1t?

[Steffen]

Updated with VS16 OpenSSL 1.1.1t and VS17 OpenSSl 3.0.8

[ltdeta]

Thanks a lot!