ChangeLog
2024-07-17 - 2.4.60 -> 2.4.62
- CVE-2024-40898 CVE-2024-40725
https://httpd.apache.org/security/vulnerabilities_24.html
2024-07-01 - 2.4.59 -> 2.4.60
2024-04-04 - 2.4.58 -> 2.4.59
- Added a link to LibreSSL
2023-12-07 - 2.4.57 -> 2.4.58
2023-09-23 - Added note about OpenSSL 1.1.1 and 3.0
2023-04-09 - 2.4.56 -> 2.4.57
2023-03-18 - 2.4.55 -> 2.4.56
- Use sha512sum, add note about openssl alternative
2023-01-17 - 2.4.54 -> 2.4.55
- Tweaked note about "Apache" -> "Apache HTTPD" near the top
2022-06-10 - 2.4.53 -> 2.4.54
2022-03-20 - 2.4.51 -> 2.4.53
- Added package version for Slackware 15.0,
removed 13.37
- Updated prerequisite from pcre to pcre2
2021-10-21 - Added note about mod_cgid
2021-10-07 - 2.4.50 -> 2.4.51
- Added note clarifying the 'apache2' HOWTO name
- Changed Brotli link to HOWTO
2021-10-05 - 2.4.49 -> 2.4.50
2021-09-16 - 2.4.48 -> 2.4.49
2021-08-02 - 2.4.46 -> 2.4.48
2020-12-09 - 2.4.43 -> 2.4.46
2020-04-22 - 2.4.41 -> 2.4.43
- Use https for httpd.apache.org links
2019-08-21 - 2.4.39 -> 2.4.41
2019-04-04 - 2.4.38 -> 2.4.39
2019-01-22 - 2.4.37 -> 2.4.38
2018-11-18 - 2.4.35 -> 2.4.37
2018-10-18 - 2.4.34 -> 2.4.35
2018-07-31 - 2.4.33 -> 2.4.34
- Added reposotory, Wikipedia links
2018-07-05 - 2.4.27 -> 2.4.33
2017-07-13 - 2.4.23 -> 2.4.27
2016-11-03 - 2.4.2 -> 2.4.23
- Updated Slackware package note for 14.1 and 14.2, removed
older than 13.37
- Added prerequisite link for PCRE
- Added prerequisite link for nghttp2
- Added note about user/group ownership of files
(apache vs daemon)
- Split off PHP into it's own
2013-05-07 - Removed link to Apache Tomcat howto that was never
uploaded so I don't have to see logs about it not existing
when search engines try to grab it
- Split off mod_perl to it's own howto
- Updated Slackware link for 14.0, removed older than 13.0
- httpd 2.4.2 -> 2.4.6
2013-04-26 - Corrected link to Apache 1.x howto
- Removed duplicated SNMP link
2012-05-07 - Apache 2.4.1 -> 2.4.2
- mod_perl 2.0.6-rc2 -> 2.0.6, note about how it doesn't
work with Apache 2.4.x
- PHP 5.4.0 -> 5.4.2
2012-03-10 - Apache 2.2.16 -> 2.4.1
- Updated Slackware note for 13.37
- mod_perl 2.0.5 -> 2.0.6-rc2, notes about build trouble
- Pass MP_APR_CONFIG so it looks for apr-1-config instead
of apr-config
- PHP 5.3.3 -> 5.4.0
- Added re2c, Kerberos, sqlite, enchant, mhash
to PHP prerequisites list
- Removed fam from PHP prerequisites list
2010-10-05 - Apache 2.2.15 -> 2.2.16
- Updated Slackware note for 13.0 and 13.1
- PHP 5.3.2 -> 5.3.3
2010-03-17 - Apache 2.2.14 -> 2.2.15
- PHP 5.3.1 -> 5.3.2
2010-01-10 - Apache 2.2.11 -> 2.2.14
- PHP 5.3.0 -> 5.3.1
2009-07-09 - PHP 5.2.9 -> 5.3.0
2009-03-31 - PHP 5.2.8 -> 5.2.9
- Back up existing php.ini as php.ini.old and
/root/backup/php.ini-yyyymmdd
2009-03-08 - Added removing the Slackware package
2009-02-26 - Apache 2.2.9 -> 2.2.11
- PHP 5.2.6 -> 5.2.8
2008-07-04 - Create /etc/profile.d/apache2.sh which sets
/usr/local/apache2/bin in PATH and /usr/local/apache2/man
in MANPATH
2008-07-03 - Apache 2.2.6 -> 2.2.9
- mod_perl 2.0.3 -> 2.0.4
- PHP 5.2.5 -> 5.2.6
2007-12-07 - Added a link to the new Apache Tomcat howto
2007-11-20 - Removed the note about the mod_perl md5sum coming from
my gpg-verified tarball, I found a release announcement
among the 575 messages in my INBOX
2007-11-12 - Apache 2.2.3 -> 2.2.6
- mod_perl 2.0.2 -> 2.0.3
- PHP 5.1.5 -> 5.2.5
- Removed --with-dom for PHP, it's a default now
- Added a link to mod_ssl docs
- Removed gawk, grep, sed links (now at the top)
Aug 19, 2006 - Apache 2.2.0 -> 2.2.3
- PHP 5.1.3 -> 5.1.5
May 3, 2006 - PHP 5.0.5 -> 5.1.3
Apr 28, 2006 - Apache 2.0.55 -> 2.2.0
- Changed to using nobody group to daemon group, which the
default config file now has set
Oct 25, 2005 - mod_perl 2.0.1 -> 2.0.2
Oct 18, 2005 - Apache 2.0.54 -> 2.0.55
Fixes these security issues:
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2088">CAN-2005-2088</a>
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2700">CAN-2005-2700</a>
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2491">CAN-2005-2491</a>
- Fix ownership of files after 'make install' is run
(it creates at least one file that is owned by root,
preventing your non-root user from deleting the dir later)
- Removed OpenSSL 0.9.8 patch, shouldn't be necessary any
more
- Instead of creating ~/backup/apache in each place that might
need it, just create it at the top
- Replaced most of the instructions for creating SSL certs
with a link to the OpenSSL howto, which already has most of
it covered, moved a few other things around
Sep 15, 2005 - Added note about subversion
Sep 13, 2005 - Apache 2.0.53 -> 2.0.54
- Moved source directory (see note <a href="howtos.php?msd">here</a>)
- Rearranged options to shut up new version of find
- Run chown -R root:root when $UID = 0
- Change md5sum verification to output OK (or not)
- Removed make, gcc, binutils, and fileutils/coreutils links
- Updated a few miscellaneous notes
- mod_perl 2.0.0-RC4 (1.999_21) -> 2.0.1
- Removed the mod_perl note about MP_INST_APACHE2, it's no
longer supported
- PHP 5.0.3 -> 5.0.5
Feb 21, 2005 - Apache 2.0.52 -> 2.0.53
- Added missing source directory cleanup (apache)
- mod_perl 2.0.0-RC1 -> RC4
Dec 22, 2004 - Apache 2.0.50 -> 2.0.52:
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0811">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0811</a>
- Changed from tar.gz to tar.bz2 for the Apache tarball
- Fixed a typo in the part that creates /etc/rc.d/rc.httpd
- mod_perl 1.99_14 -> 2.0.0-RC1
- Changed the parts that verify that all is well after
installing mod_perl and PHP to dump the header (without
chopping it's width at 80 characters) with lynx, then grep
the one line we want to look at (why not <g>)
- Added md5sum verification of the tarball for mod_perl
for those that don't have gpg installed
- PHP 4.3.8 -> 5.0.3
- Removed the PHP configure flag --with-mime-magic (see
ext/mime_magic/DEPRECATED)
- Added the PHP configure flag --disable-ipv6, I don't use it
- Updated PHP prerequisites
Dec 21, 2004 - Changed bdb link to point to my howto
Jul 17, 2004 - Replaced < and > in a few places with &lt; and
&gt;, everything in between them was being interpreted as HTML
tags
Jul 14, 2004 - Apache 2.0.49 -> 2.0.50
This is a bug fix release including fixes for the following
security vulnerabilities:
<a href="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0493">http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0493</a>
<a href="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0488">http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0488</a>
- Added note about how to list modules in an old httpd
- Added --with-ldap to the configure line (in addition to
--enable-ldap and --enable-auth-ldap). --with-ldap is for
LDAP library linking in apr-util, --enable-ldap is for the
LDAP caching module, and --enable-auth-ldap enables building
the actual Apache module.
- Updated misc notes throughout, all minor, too many to
individually list here
- mod_perl 1.99_13 -> 1.99_14
- PHP 4.3.6 -> 4.3.8
<a href="http://security.e-matters.de/advisories/122004.html">http://security.e-matters.de/advisories/122004.html</a>
<a href="http://security.e-matters.de/advisories/112004.html">http://security.e-matters.de/advisories/112004.html</a>
May 6, 2004 - Added a link to the mod_perl home page
- Added a link to the PHP home page
- PHP 4.3.4 -> 4.3.6
- Fixed the sleepycat.org link to sleepycat.com
Mar 23, 2004 - 2.0.48 -> 2.0.49
Included in the bug fixes are three security
vulnerabilities:
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0174">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0174</a>
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0020">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0020</a>
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0113">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0113</a>
- Changed md5sum -> textutils link to point to coreutils
- Added " or coreutils" to the fileutils prerequisite
- Added section that covers setting up mod_ssl and SSL
certificates
- Fixed a typo that caused two <s to be interpreted as
HTML, screwing up the output (the part that creates
rc.httpd)
- Added section that covers setting up mod_perl
- Added section that covers setting up PHP
Nov 3, 2003 - First entry