apache2 - The 2.x version of the Apache HTTP server HOWTO

ChangeLog


2024-07-17	- 2.4.60 -> 2.4.62
		- CVE-2024-40898 CVE-2024-40725
		  https://httpd.apache.org/security/vulnerabilities_24.html
2024-07-01	- 2.4.59 -> 2.4.60
2024-04-04	- 2.4.58 -> 2.4.59
		- Added a link to LibreSSL
2023-12-07	- 2.4.57 -> 2.4.58
2023-09-23	- Added note about OpenSSL 1.1.1 and 3.0
2023-04-09	- 2.4.56 -> 2.4.57
2023-03-18	- 2.4.55 -> 2.4.56
		- Use sha512sum, add note about openssl alternative
2023-01-17	- 2.4.54 -> 2.4.55
		- Tweaked note about "Apache" -> "Apache HTTPD" near the top
2022-06-10	- 2.4.53 -> 2.4.54
2022-03-20	- 2.4.51 -> 2.4.53
		- Added package version for Slackware 15.0,
		  removed 13.37
		- Updated prerequisite from pcre to pcre2
2021-10-21	- Added note about mod_cgid
2021-10-07	- 2.4.50 -> 2.4.51
		- Added note clarifying the 'apache2' HOWTO name
		- Changed Brotli link to HOWTO
2021-10-05	- 2.4.49 -> 2.4.50
2021-09-16	- 2.4.48 -> 2.4.49
2021-08-02	- 2.4.46 -> 2.4.48
2020-12-09	- 2.4.43 -> 2.4.46
2020-04-22	- 2.4.41 -> 2.4.43
		- Use https for httpd.apache.org links
2019-08-21	- 2.4.39 -> 2.4.41
2019-04-04	- 2.4.38 -> 2.4.39
2019-01-22	- 2.4.37 -> 2.4.38
2018-11-18	- 2.4.35 -> 2.4.37
2018-10-18	- 2.4.34 -> 2.4.35
2018-07-31	- 2.4.33 -> 2.4.34
		- Added reposotory, Wikipedia links
2018-07-05	- 2.4.27 -> 2.4.33
2017-07-13	- 2.4.23 -> 2.4.27
2016-11-03	- 2.4.2 -> 2.4.23
		- Updated Slackware package note for 14.1 and 14.2, removed
		  older than 13.37
		- Added prerequisite link for PCRE
		- Added prerequisite link for nghttp2
		- Added note about user/group ownership of files
		  (apache vs daemon)
		- Split off PHP into it's own
2013-05-07	- Removed link to Apache Tomcat howto that was never
		  uploaded so I don't have to see logs about it not existing
		  when search engines try to grab it
		- Split off mod_perl to it's own howto
		- Updated Slackware link for 14.0, removed older than 13.0
		- httpd 2.4.2 -> 2.4.6
2013-04-26	- Corrected link to Apache 1.x howto
		- Removed duplicated SNMP link
2012-05-07	- Apache 2.4.1 -> 2.4.2
		- mod_perl 2.0.6-rc2 -> 2.0.6, note about how it doesn't
		  work with Apache 2.4.x
		- PHP 5.4.0 -> 5.4.2
2012-03-10	- Apache 2.2.16 -> 2.4.1
		- Updated Slackware note for 13.37
		- mod_perl 2.0.5 -> 2.0.6-rc2, notes about build trouble
		- Pass MP_APR_CONFIG so it looks for apr-1-config instead
		  of apr-config
		- PHP 5.3.3 -> 5.4.0
		- Added re2c, Kerberos, sqlite, enchant, mhash
		  to PHP prerequisites list
		- Removed fam from PHP prerequisites list
2010-10-05	- Apache 2.2.15 -> 2.2.16
		- Updated Slackware note for 13.0 and 13.1
		- PHP 5.3.2 -> 5.3.3
2010-03-17	- Apache 2.2.14 -> 2.2.15
		- PHP 5.3.1 -> 5.3.2
2010-01-10	- Apache 2.2.11 -> 2.2.14
		- PHP 5.3.0 -> 5.3.1
2009-07-09	- PHP 5.2.9 -> 5.3.0
2009-03-31	- PHP 5.2.8 -> 5.2.9
		- Back up existing php.ini as php.ini.old and
		  /root/backup/php.ini-yyyymmdd
2009-03-08	- Added removing the Slackware package
2009-02-26	- Apache 2.2.9 -> 2.2.11
		- PHP 5.2.6 -> 5.2.8
2008-07-04	- Create /etc/profile.d/apache2.sh which sets
		  /usr/local/apache2/bin in PATH and /usr/local/apache2/man
		  in MANPATH
2008-07-03	- Apache 2.2.6 -> 2.2.9
		- mod_perl 2.0.3 -> 2.0.4
		- PHP 5.2.5 -> 5.2.6
2007-12-07	- Added a link to the new Apache Tomcat howto
2007-11-20	- Removed the note about the mod_perl md5sum coming from
		  my gpg-verified tarball, I found a release announcement
		  among the 575 messages in my INBOX
2007-11-12	- Apache 2.2.3 -> 2.2.6
		- mod_perl 2.0.2 -> 2.0.3
		- PHP 5.1.5 -> 5.2.5
		- Removed --with-dom for PHP, it's a default now
		- Added a link to mod_ssl docs
		- Removed gawk, grep, sed links (now at the top)
Aug 19, 2006	- Apache 2.2.0 -> 2.2.3
		- PHP 5.1.3 -> 5.1.5
May 3, 2006	- PHP 5.0.5 -> 5.1.3
Apr 28, 2006	- Apache 2.0.55 -> 2.2.0
		- Changed to using nobody group to daemon group, which the
		  default config file now has set
Oct 25, 2005	- mod_perl 2.0.1 -> 2.0.2
Oct 18, 2005	- Apache 2.0.54 -> 2.0.55
		  Fixes these security issues:
		  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2088">CAN-2005-2088</a>
		  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2700">CAN-2005-2700</a>
		  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2491">CAN-2005-2491</a>
		- Fix ownership of files after 'make install' is run
		  (it creates at least one file that is owned by root,
		  preventing your non-root user from deleting the dir later)
		- Removed OpenSSL 0.9.8 patch, shouldn't be necessary any
		  more
		- Instead of creating ~/backup/apache in each place that might
		  need it, just create it at the top
		- Replaced most of the instructions for creating SSL certs
		  with a link to the OpenSSL howto, which already has most of
		  it covered, moved a few other things around
Sep 15, 2005	- Added note about subversion
Sep 13, 2005	- Apache 2.0.53 -> 2.0.54
		- Moved source directory (see note <a href="howtos.php?msd">here</a>)
		- Rearranged options to shut up new version of find
		- Run chown -R root:root when $UID = 0
		- Change md5sum verification to output OK (or not)
		- Removed make, gcc, binutils, and fileutils/coreutils links
		- Updated a few miscellaneous notes
		- mod_perl 2.0.0-RC4 (1.999_21) -> 2.0.1
		- Removed the mod_perl note about MP_INST_APACHE2, it's no
		  longer supported
		- PHP 5.0.3 -> 5.0.5
Feb 21, 2005	- Apache 2.0.52 -> 2.0.53
		- Added missing source directory cleanup (apache)
		- mod_perl 2.0.0-RC1 -> RC4
Dec 22, 2004	- Apache 2.0.50 -> 2.0.52:
		  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0811">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0811</a>
		- Changed from tar.gz to tar.bz2 for the Apache tarball
		- Fixed a typo in the part that creates /etc/rc.d/rc.httpd
		- mod_perl 1.99_14 -> 2.0.0-RC1
		- Changed the parts that verify that all is well after
		  installing mod_perl and PHP to dump the header (without
		  chopping it's width at 80 characters) with lynx, then grep
		  the one line we want to look at (why not &lt;g&gt;)
		- Added md5sum verification of the tarball for mod_perl
		  for those that don't have gpg installed
		- PHP 4.3.8 -> 5.0.3
		- Removed the PHP configure flag --with-mime-magic (see
		  ext/mime_magic/DEPRECATED)
		- Added the PHP configure flag --disable-ipv6, I don't use it
		- Updated PHP prerequisites
Dec 21, 2004	- Changed bdb link to point to my howto
Jul 17, 2004	- Replaced &lt; and &gt; in a few places with &amp;lt; and
		  &amp;gt;, everything in between them was being interpreted as HTML
		  tags
Jul 14, 2004	- Apache 2.0.49 -> 2.0.50
		  This is a bug fix release including fixes for the following
		  security vulnerabilities:
		  <a href="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0493">http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0493</a>
		  <a href="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0488">http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0488</a>
		- Added note about how to list modules in an old httpd
		- Added --with-ldap to the configure line (in addition to
		  --enable-ldap and --enable-auth-ldap).  --with-ldap is for
		  LDAP library linking in apr-util, --enable-ldap is for the
		  LDAP caching module, and --enable-auth-ldap enables building
		  the actual Apache module.
		- Updated misc notes throughout, all minor, too many to
		  individually list here
		- mod_perl 1.99_13 -> 1.99_14
		- PHP 4.3.6 -> 4.3.8
		  <a href="http://security.e-matters.de/advisories/122004.html">http://security.e-matters.de/advisories/122004.html</a>
		  <a href="http://security.e-matters.de/advisories/112004.html">http://security.e-matters.de/advisories/112004.html</a>
May 6, 2004	- Added a link to the mod_perl home page
		- Added a link to the PHP home page
		- PHP 4.3.4 -> 4.3.6
		- Fixed the sleepycat.org link to sleepycat.com
Mar 23, 2004	- 2.0.48 -> 2.0.49
		  Included in the bug fixes are three security
		  vulnerabilities:
		  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0174">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0174</a>
		  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0020">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0020</a>
		  <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0113">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0113</a>
		- Changed md5sum -&gt; textutils link to point to coreutils
		- Added " or coreutils" to the fileutils prerequisite
		- Added section that covers setting up mod_ssl and SSL
		  certificates
		- Fixed a typo that caused two &lt;s to be interpreted as
		  HTML, screwing up the output (the part that creates
		  rc.httpd)
		- Added section that covers setting up mod_perl
		- Added section that covers setting up PHP
Nov 3, 2003	- First entry

List of HOWTOs

Web page itself last updated: 2023-12-20 8:06pm (EST -0500)
Copyright © 2001-2024 Jason Englander. All Rights reserved.
[HTML5]