Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
Topic: Apache httpd 2.4.47 GA Available |
|
Author |
|
Steffen Moderator
Joined: 15 Oct 2005 Posts: 3095 Location: Hilversum, NL, EU
|
Posted: Thu 29 Apr '21 10:07 Post subject: Apache httpd 2.4.47 GA Available |
|
|
Apache httpd 2.4.47 is released as GA.
ASF and Apachelounge changes : https://www.apachelounge.com/Changelog-2.4.html
Documentation: http://httpd.apache.org/docs/2.4/
Build with dependencies:
- openssl 1.1.1k
- nghttp2 1.43.0
- jansson 2.13.1
- curl 7.76.1
- apr 1.7.0
- apr-util 1.6.1
- apr-iconv 1.2.2
- zlib 1.2.11
- brotli 1.0.9
- pcre 8.44
- libxml2 2.9.10
- lua 5.2.4
- expat 2.3.0
One Redistributable for VC14, VC15 and VS16
For VC14, VC15 and VS16 there is now only one Redistributable, called Microsoft Visual C++ Redistributable for Visual Studio 2015, 2017 and 2019
When you have already installed the VC14 and/or VC15 Redistributable. Then after install of the new, the Redistributable VC14/15 is updated from 14.0x.xx/14.1x.xx to the new one 14.2x.xx , it is called Microsoft Visual C++ 2015-2019 Redistributable and you can still use VC15/14.
Note from Microsoft: Visual C++ 2015, 2017 and 2019 all share the same redistributable files.
For example, installing the Visual C++ 2015-2019 Redistributable will affect programs built with Visual C++ 2015 and 2017 also. However, installing the Visual C++ 2015 Redistributable will not replace the newer versions of the files installed by the Visual C++ 2015-2019 Redistributable.
This is different from all previous Visual C++ versions, as they each had their own distinct runtime files, not shared with other versions.
VS16, VC14 and VC15 are backward compatible.
VS16 is backward compatible to VC15/14 and VC15 backward to VC14. That means for example, a VC15/14 module can be used inside a VS16 binary (for example PHP VC15/14 as module).
Why we have a VS16 now
Maybe you noticed that we call Visual Studio C++ 2019 VS16 instead of VC16. In consultation with the PHP team we both now going to use VS16. VS16 is the version number of Visual Studio 2019.
The reason is, that VC15 is already a fictional identity, as the real VC++ version is 14.1, as you know. The new default one is now 14.2 still, not 16. Also, the version numbers move a lot faster now that in versions before VS2015. Thus, it turns out better to refer to the Visual Studio version and it's default toolset, than trying to catch up with the VC++ version which became unpredictable. Back in time, we've started to build with a preview of VS2017, which was indeed VC15, but after the GA release the version has been changed to 14.1, where we didn't catch up.
When you have hangs, slow traffic and/or when having in your log entries like Asynchronous AcceptEx failed. You can try the following settings:
AcceptFilter http none
AcceptFilter https none
EnableSendfile off
EnableMMAP off
Enjoy,
Steffen |
|
Back to top |
|
Jan-E
Joined: 09 Mar 2012 Posts: 1266 Location: Amsterdam, NL, EU
|
Posted: Sun 02 May '21 0:39 Post subject: |
|
|
The 2.4.47 release was never announced, probably because of a regression that was found after the vote had ended:
https://marc.info/?l=apache-httpd-dev&m=161969641712160&w=2
Might be that a quick fix 2.4.48 will follow, but that has not been decided yet. |
|
Back to top |
|
Jan-E
Joined: 09 Mar 2012 Posts: 1266 Location: Amsterdam, NL, EU
|
Posted: Tue 04 May '21 13:40 Post subject: |
|
|
Christophe JAILLET in gmane.comp.apache.devel (Mon, 3 May 2021 21:25:27 +0200):
Quote: | Hi all,
as you probably have noticed, the 2.4.47 has been distributed on mirrors but not announced, neither on your favorite ML, nor on the official httpd.apache.org website.
The reason is a very last minute regression discovered a few hours before the announcement.
So, as the 2.4.32 release in March 2018, this 2.4.47 release will never be officially announced.
A fix for the regression has already been proposed on trunk (r1889341). It should be reviewed and tested and, if agreed, backported to 2.4.x.
So, I propose to give a little time for all this to occur and I already plan a new T&R on Sunday May 16, 2021, hoping for a successful release on Sunday May 23 or Monday May 24.
Best regards,
Christophe JAILLET
|
|
|
Back to top |
|
Jan-E
Joined: 09 Mar 2012 Posts: 1266 Location: Amsterdam, NL, EU
|
Posted: Mon 24 May '21 13:33 Post subject: |
|
|
Will you be building Apache 2.4.48 with libexpat 2.4.1? There is a CVE fix in 2.4.0:
Code: | CVE-2013-0340/CWE-776 -- Protect against billion laughs attacks | I have no idea if Apache is affected.
https://github.com/libexpat/libexpat/blob/R_2_4_0/expat/Changes
BTW: is there a way tot determine the expat version that was used for compiling Apache? I did try a lot of httpd -options, but none seemd to report dependency versions. |
|
Back to top |
|
admin Site Admin
Joined: 15 Oct 2005 Posts: 693
|
Posted: Mon 24 May '21 14:48 Post subject: |
|
|
We build 2.4.48 with 2.3.0, version 2.4.0/1 too new. Also cannot find a way to determine the version. |
|
Back to top |
|
glsmith Moderator
Joined: 16 Oct 2007 Posts: 2268 Location: Sun Diego, USA
|
Posted: Tue 25 May '21 22:40 Post subject: |
|
|
The version for expat can be found at the bottom of Apache24\include\expat.h
Code: | /* Expat follows the semantic versioning convention.
See http://semver.org.
*/
#define XML_MAJOR_VERSION 2
#define XML_MINOR_VERSION 3
#define XML_MICRO_VERSION 0
| for 2.3.0 in this example |
|
Back to top |
|
|
|
|
|
|