Fwd: [ANNOUNCEMENT] Apache HTTP Server 2.4.53 Released

[Paul Smedley]

Hi All,

OS/2 builds at:
https://smedley.id.au/tmp/httpd-2.4.53-os2-20220318.zip &
https://smedley.id.au/tmp/httpd-2.4.53-os2-debug-20220318.zip

OpenSSL updated to 1.1.1n, no additional OS/2 specific changes over
what's been posted previously.

Cheers,

Paul

-------- Forwarded Message --------
Subject: [ANNOUNCEMENT] Apache HTTP Server 2.4.53 Released
Date: Mon, 14 Mar 2022 10:53:04 +0100
From: icing <ic...@apache.org>
Reply-To: d...@httpd.apache.org
To: anno...@httpd.apache.org

Apache HTTP Server 2.4.53 Released

March 14, 2022

The Apache Software Foundation and the Apache HTTP Server Project
are pleased to announce the release of version 2.4.53 of the Apache
HTTP Server ("Apache"). This version of Apache is our latest GA
release of the new generation 2.4.x branch of Apache HTTPD and
represents fifteen years of innovation by the project, and is
recommended over all previous releases. This release of Apache is
a security, feature and bug fix release.

We consider this release to be the best version of Apache available, and
encourage users of all prior versions to upgrade.

Apache HTTP Server 2.4.53 is available for download from:

https://httpd.apache.org/download.cgi

Apache 2.4 offers numerous enhancements, improvements, and performance
boosts over the 2.2 codebase. For an overview of new features
introduced since 2.4 please see:

https://httpd.apache.org/docs/trunk/new_features_2_4.html

Please see the CHANGES_2.4 file, linked from the download page, for a
full list of changes. A condensed list, CHANGES_2.4.53 includes only
those changes introduced since the prior 2.4 release. A summary of
all of the security vulnerabilities addressed in this and earlier
releases is available:

https://httpd.apache.org/security/vulnerabilities_24.html

This release requires the Apache Portable Runtime (APR), minimum
version 1.5.x, and APR-Util, minimum version 1.5.x. Some features may
require the 1.6.x version of both APR and APR-Util. The APR libraries
must be upgraded for all features of httpd to operate correctly.

This release builds on and extends the Apache 2.2 API. Modules written
for Apache 2.2 will need to be recompiled in order to run with Apache
2.4, and require minimal or no source code changes.

https://svn.apache.org/repos/asf/httpd/httpd/trunk/VERSIONING

When upgrading or installing this version of Apache, please bear in mind
that if you intend to use Apache with one of the threaded MPMs (other
than the Prefork MPM), you must ensure that any modules you will be
using (and the libraries they depend on) are thread-safe.

Please note the 2.2.x branch has now passed the end of life at the
Apache
HTTP Server project and no further activity will occur including
security
patches. Users must promptly complete their transitions to this 2.4.x
release of httpd to benefit from further bug fixes or new features.

[David McKenna]

 Hi Paul,

  Loaded it up and it seems to work great. One thing I immediately notice is: Apache/2.4.53 (OS/2) OpenSSL/1.1.1m PHP/8.1.4 shows OpenSSL still at 1.1.1m FWIW. Thanks!

Regards,

[Steven Levine]

In <1d0fe452-51c8-4d1b...@googlegroups.com>, on 03/18/22
at 03:58 AM, David McKenna <davidmc...@gmail.com> said:

Hi David,

> Loaded it up and it seems to work great. One thing I immediately notice
> is: Apache/2.4.53 (OS/2) OpenSSL/1.1.1m PHP/8.1.4 shows OpenSSL still at
> 1.1.1m FWIW.

This is most likely a typo.

https://www.openssl.org/source/

and

https://www.openssl.org/news/changelog.html#openssl-111

indicate that 1.1.1m is the most recent public release.

Steven

--
----------------------------------------------------------------------
"Steven Levine" <ste...@earthlink.net> Warp/DIY/BlueLion etc.
www.scoug.com www.arcanoae.com www.warpcave.com
----------------------------------------------------------------------

[Paul Smedley]

Hi Dave,

On 18/3/22 21:28, David McKenna wrote:
>  Hi Paul,
>
>   Loaded it up and it seems to work great. One thing I immediately
> notice is: Apache/2.4.53 (OS/2) OpenSSL/1.1.1m PHP/8.1.4 shows OpenSSL
> still at 1.1.1m FWIW. Thanks!

Oops - forgot to re-run makeomflibs.cmd so the old crypto.lib was being
used, not the new crypto.a - rebuilding now.

Cheers,

Paul

[Paul Smedley]

With OpenSSL 1.1.1n this time L)

https://smedley.id.au/tmp/httpd-2.4.53-os2-20220319.zip
https://smedley.id.au/tmp/httpd-2.4.53-os2-debug-20220319.zip

Cheers,

Paul

[David McKenna]

 Thanks again, Paul... this one looks good.

Regards,