logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Apache View previous topic :: View next topic
Reply to topic   Topic: Windows downloads for previous versions
Author
fritzmg



Joined: 15 Jul 2024
Posts: 3
PostPosted: Mon 15 Jul '24 13:31    Post subject: Windows downloads for previous versions Reply with quote
Are the downloads for previous versions for Windows still available somewhere? In the wild many Hosters are still running Apache 2.4.59.1 and 2.4.60 and haven't updated to 2.4.61 yet. Thus I wanted to test the behaviour regarding the newly introduced "UnsafeAllow3F" rewrite rule flag introduced due to https://www.cve.org/CVERecord?id=CVE-2024-38474 - as it is unclear whether this flag is still necessary in 2.4.61+ or not.

Disallowing any URL encoded URL with query parameters as a query parameter value by default breaks a lot of applications and I wanted to check whether an update to 2.4.61 is the only solution (by confirming that it does indeed break in 2.4.59.1 and 2.4.60).
Back to top
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 3092
Location: Hilversum, NL, EU
PostPosted: Mon 15 Jul '24 13:42    Post subject: Reply with quote
There was no 2.4.59.1 here at Apachelounge.

Current is 2.4.61 and 2.4.62 is coming soon.

Best you report on the dev mailing list at https://httpd.apache.org/lists.html
Back to top
fritzmg



Joined: 15 Jul 2024
Posts: 3
PostPosted: Mon 15 Jul '24 13:46    Post subject: Reply with quote
Hm, according to the news ticker on https://www.apachelounge.com/download/ there was a 2.4.59 update on 2024-06-05 for example (i.e. a new build for 2.4.59 to due to CVE-2024-38474, which introduces the "UnsafeAllow3F" flag).

Are these previous versions still available to download somewhere?
Back to top
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 3092
Location: Hilversum, NL, EU
PostPosted: Mon 15 Jul '24 15:17    Post subject: Reply with quote
https://www.apachelounge.com/download/VS17/binaries/httpd-2.4.59-240605-win64-VS17.zip
Back to top
fritzmg



Joined: 15 Jul 2024
Posts: 3
PostPosted: Mon 15 Jul '24 15:22    Post subject: Reply with quote
Steffen wrote:
https://www.apachelounge.com/download/VS17/binaries/httpd-2.4.59-240605-win64-VS17.zip

I tried that already, that URL does not work unfortunately.

// ah, now it seems to work. Did you re-upload it just now?
Back to top
admin
Site Admin


Joined: 15 Oct 2005
Posts: 692
PostPosted: Mon 15 Jul '24 15:30    Post subject: Reply with quote
No re-upload
Back to top


Reply to topic   Topic: Windows downloads for previous versions View previous topic :: View next topic
Post new topic   Forum Index -> Apache