Topic: Apache httpd 2.4.63 GA Available :: Update

[Steffen]

Apache httpd 2.4.63 is released as GA.

07 February 2025 Update, see Httpd 2.4.63 crash with Window 7 https://www.apachelounge.com/viewtopic.php?t=9348

ASF and Apachelounge changes : https://www.apachelounge.com/Changelog-2.4.html

Important : NO security vulnerabilities fixed in 2.4.63, see https://httpd.apache.org/security/vulnerabilities_24.html .

VS17 Win32
The Win32 version is available again, see also discussion https://www.apachelounge.com/viewtopic.php?p=42099
Only build the with the standard Apache modules.
For non-standard modules (like mod_fcgid) use the VS16 Win32 ones at https://www.apachelounge.com/download/VS16/

Documentation: http://httpd.apache.org/docs/2.4/

Build with dependencies:

- openssl 3.3.2
- nghttp2 1.64.1
- jansson 2.14
- curl 8.11.1
- apr 1.7.5
- apr-util 1.6.3
- apr-iconv 1.2.2
- zlib 1.3.1
- brotli 1.1.0
- pcre2 10.44
- libxml2 2.13.5
- lua 5.4.7
- expat 2.6.2

Notes VS17 OpenSSL 3.x.x:

- Only PHP 8.2 and 8.1 (build with 3.x.x) is running as module.
Running with mod_fcgid no issues seen.

For running as module, See also the post from user Otomatic and notes at https://www.apachelounge.com/viewtopic.php?t=8969
and https://www.apachelounge.com/viewtopic.php?t=8938

- With too weak certificates/ciphers Apache does not start, see https://www.apachelounge.com/viewtopic.php?t=8819


Enjoy,

Steffen

[mikerabat]

Thanks for the 2.4.63.
Unfortunately the httpd.exe version of the 32bit 2.4.63 packages shows as version still 2.4.62 (all the other moduels too)

[Steffen]

Thanks for the heads up

Corrected.

[Stray78]

Thank you guys so much for everything you do!

[Stray78]

[Steffen]

Download page updated with Fix crash Win 7. Downgrade OpenSSL from 3.4.0 to 3.3.2.

[mwish]

Since the OpenSSL version was downgraded in the build you are now providing, is it recommended that users that use newer OS's than Windows 7 downgrade to that as well, or keep using the build with OpenSSL 3.4.0?

[admin]

Best is to downgrade all OS’s.