Pages

[Gregg]

Announcing the release of Apache 2.4.51

Well, 2.4.50 lasted about all of 72 hours.

It seems the fix for CVE-2021-41773 did not quite go far enough. I'll let one of the dev's explain what is going on.
https://github.com/icing/blog/blob/main/httpd-2.4.50.md

By default configuration, Apache Haus binaries should not be vulnerable but it is best to upgrade anyway.

All the various dependencies are the same as was used in 2.4.50.

You can get your copy of the new Apache HTTP Server from our download page.