Author |
|
fritzmg
Joined: 15 Jul 2024 Posts: 3
|
Posted: Mon 15 Jul '24 13:31 Post subject: Windows downloads for previous versions |
|
|
Are the downloads for previous versions for Windows still available somewhere? In the wild many Hosters are still running Apache 2.4.59.1 and 2.4.60 and haven't updated to 2.4.61 yet. Thus I wanted to test the behaviour regarding the newly introduced "UnsafeAllow3F" rewrite rule flag introduced due to https://www.cve.org/CVERecord?id=CVE-2024-38474 - as it is unclear whether this flag is still necessary in 2.4.61+ or not.
Disallowing any URL encoded URL with query parameters as a query parameter value by default breaks a lot of applications and I wanted to check whether an update to 2.4.61 is the only solution (by confirming that it does indeed break in 2.4.59.1 and 2.4.60). |
|
Back to top |
|
Steffen Moderator
Joined: 15 Oct 2005 Posts: 3084 Location: Hilversum, NL, EU
|
Posted: Mon 15 Jul '24 13:42 Post subject: |
|
|
There was no 2.4.59.1 here at Apachelounge.
Current is 2.4.61 and 2.4.62 is coming soon.
Best you report on the dev mailing list at https://httpd.apache.org/lists.html |
|
Back to top |
|
fritzmg
Joined: 15 Jul 2024 Posts: 3
|
Posted: Mon 15 Jul '24 13:46 Post subject: |
|
|
Hm, according to the news ticker on https://www.apachelounge.com/download/ there was a 2.4.59 update on 2024-06-05 for example (i.e. a new build for 2.4.59 to due to CVE-2024-38474, which introduces the "UnsafeAllow3F" flag).
Are these previous versions still available to download somewhere? |
|
Back to top |
|
Steffen Moderator
Joined: 15 Oct 2005 Posts: 3084 Location: Hilversum, NL, EU
|
|
Back to top |
|
fritzmg
Joined: 15 Jul 2024 Posts: 3
|
Posted: Mon 15 Jul '24 15:22 Post subject: |
|
|
Steffen wrote: | https://www.apachelounge.com/download/VS17/binaries/httpd-2.4.59-240605-win64-VS17.zip |
I tried that already, that URL does not work unfortunately.
// ah, now it seems to work. Did you re-upload it just now? |
|
Back to top |
|
admin Site Admin
![](images/avatars/18435454e5916d2088.gif)
Joined: 15 Oct 2005 Posts: 683
|
Posted: Mon 15 Jul '24 15:30 Post subject: |
|
|
No re-upload |
|
Back to top |
|