The Apache Haus Forum

Forum Topics => Announcements => Topic started by: Gregg on October 05, 2021, 09:44:27 PM

Title: Announcing the release of Apache 2.4.50
Post by: Gregg on October 05, 2021, 09:44:27 PM
Announcing the release of Apache 2.4.50

!!!This release fixes CVE-2021-41773, an evil path traversal 0-day in Apache 2.4.49!!!
If you are currently using Apache 2.4.49 it is seriously suggested that you upgrade to 2.4.50 today!

This release includes:
APR Version:        1.7.0
APU Version:        1.6.1
Brotli Version:    1.0.9
Jansson Version:    2.14
Libcurl Version:   7.79.1
LibXML2 Version:    2.9.12
LUA Version:        5.2.4
NGHTTP2 Version:    1.45.1
OpenSSL Version:    1.1.1l or LibreSSL 3.3.5
PCRE Version:       8.45
SQLite3 Version:    3.36.0
ZLib Version:       1.2.11

You can get your copy of the new Apache HTTP Server from our download page (http://www.apachehaus.com/cgi-bin/download.plx).

Change Log (https://downloads.apache.org/httpd/CHANGES_2.4.50) for Apache 2.4.50
Change Log (https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.3.5-relnotes.txt) for LibreSSL 3.3.5