|
Written by Administrator
|
|
Friday, 05 March 2010 21:17 |
The Apache Software Foundation has released Version 2.2.15
Built with APR 1.4.2, APR-Util 1.3.9, OpenSSL 0.9.8m.
Apache 2.2.15 is primarily a Security Release and was intended to coincide with the release of OpenSSL 0.9.8m addressing the recently published SSLv3/TLS MITM attact. Some renegotiation (server requested) has been enabled again, client requested renegotiation will fail unless SSLInsecureRenegotiation is enabled.
There is a security fix to mod_isapi as well. I cannot tell you anything more on it than what is written in the change log. It was obviously worthy of a CVE.
Last, but not least a new toy, mod_reqtimeout. It hasn't been tested on any large hosting environment. But I've had it running for 4 days now with no problems seen yet. It was written as a mitigation to Slowloris. What I like about this module is that it is of an entirely different concept than the other anti-loris mitigation techniques in use. It does not bother with keeping a list of IPs in memory but rather if you cannot get the header or body of a request completed in x amount of seconds, goodbye!
The change log can be viewed here and binaries are available on our Downloads Page. |
|
|
Mod Security 2.5.12 has been released |
 |
|
Written by Gregg
|
|
Monday, 08 February 2010 19:17 |
This release fixes a number of issues and contains the latest Core Rules. I must note that due to the old version of pcre supplied with Apache, mod_security has outgrown it and now includes pcre 8.0 so you will now find pcre.dll in the bin folder inside the archive file. Like libxml2.dll, pcre.dll will need to be included in your Apache's /bin folder as well.
Builds for Apache 2.2.9+ and Apache 2.0.63 are available on our Download page. |
|
Written by Gregg
|
|
Saturday, 30 January 2010 06:47 |
|
What started it all for us folks on Windows is about to come it's final release. What am I talking about you ask? Apache 1.3 is what.
That's right, on June 6, 1998 Apache 1.3.0 was release and was the first version of Apache to support the Windows Platform. It's been a wonderful 11 and a half years and I wish it would never end. Well not really, all things must end and I stopped using Apache 1.3 in mid 2007.
Soon to be released is it's final release, Apache 1.3.42. Farewell good friend and may you rest in peace. |
|
Last Updated on Saturday, 30 January 2010 06:51 |
|
|
Mod fcgid 2.3.5 has been released. Available at the Apache Haus |
 |
 |
|
|
Written by Mario
|
|
Saturday, 30 January 2010 08:37 |
We proudly present Mod_fcgid 2.3.5
fcgid is known to bring stability to Apache when you use PHP. This is the first release of fcgid since mod_fcgid has moved to Apache Software Foundation (ASF).
With the new 2.3 there are some new features and new directives. Thank you guys from ASF. So if you already use fcgid and upgrade your existing fcgid you should also upgrade the directives. The old directives are still available but you should upgrade soon.
Even if you upgrade or install fcgid at the first time read the readfirst_apachehaus.html from our package.
This release works with apache 2.2.9 or newer and it requires the Visual C++ 2008 Redistributable Package. The link is in the readfirst_apachehaus.html
See our Download page. |
|
Last Updated on Sunday, 31 January 2010 01:31 |
|
We've Moved ... to a new server |
|
|
|
|
Written by Gregg
|
|
Wednesday, 16 December 2009 06:08 |
|
I cannot speak for everyone but I can say that for me, the new server is much faster and much more responsive among other things. It went rather well all in all and i for one am happy with the result. Thank you Mika. |
|
Last Updated on Wednesday, 16 December 2009 06:20 |
|
|
|
|
