Apache Releases v2.2.22 for Apache HTTP Server

The release of Apache HTTP Server v2.2.22 has just been announced by both the Apache Software Foundation and the Apache HTTP Server Project. The Apache HTTP Server Project has stated that this release is definitely the best version of Apache HTTP Server released so far and is encouraging all of its users to to upgrade as soon as possible.

Version 2.2.22 of Apache HTTP Server 2.2.22 is mainly an update that fixes security issues and bugs. However, there are a number of significant security fixes that are included in v2.2.22. These include:

• Reject requests when the request-URL doesn't match HTTP specification.


• Fix integer overflow in ap_pregsaub().


• Resolve additional cases of URL rewriting with ProxyPassMatch or RewriteRule.


• Fix segfault when the '%{cookiename}C' log format string is in use and a client sends a nameles, valueless cookiee, causing a DoS.


• Fix scoreboard issue which could allow an unprivileged child process to cause the parent process to crash and shutdown in stead of terminating cleanly.


• Fixed an issue in error responses that could expose "httpOnly" cookies when no custom ErrorDocument is specified for status code 400.

Version 2.2.22 of Apache HTTP Server is currently available for download if you want it. The CHANGES_2.2 file, which is found on the download page, has the entire list of everything that is changed in v2.2.22 and a condensed list, known as CHANGES_2.2.22, includes only those changes since the prior release of v2.2. If you want to, you can also view an entire summary of all the security vulnerabilities addressed in this release, as well as earlier releases.

The summary includes version 1.4.5 of Apache Portable Runtime (APR) as well as APR Utility Library (APR-util) version 1.4.2, which is also paired with the tar and zip distributions. The Apache Portable Runtime libraries libapr and libaprutil, as well as Win32, libapriconv v.1.2.1, must all be updated for binary compatibility and to address a lot of known security and platform bugs.

Whenever you do decide to upgrade or install v2.2.22, keep in mind that if you are going to be using Apache HTTP Server with a threaded MPM other than the Prefork MPM, you need to ensure that all modules you will be using, as well as their libraries, are thread-safe.

Source: Connectwww.com - Apache HTTP Server 2.2.22 Released
Server Watch - Apache HTTP Server 2.2.22 Released

Find out what is going on in the Tech Army World.



What are the Top 10 Money Making Missions?

What other companies have joined and what do they do?

How do I join the
Tech Army Organization ?

5 Awesome and Free Server Tools

Servers are one of the most important things for any company, but what is more important is making sure that your server is running as it should. In order to do so, however, you need two things: a good IT tech and the right tools. A good IT Tech isn't really hard to come by, especially in today's business field where it seems like everybody and their mother are going to school to learn about computers. Tools, on the other hand, are a different story. While the tools themselves may not be hard to come by, knowing which ones to get can be.

There are many different types of tools you can download off of the internet in order to help with your server management. Some are good, some are bad, but the best ones may even be free. Take a look at some great server tools your company needs that are completely and utterly free.

Nagios
Nagios is an enterprise infrastructure monitoring suite. Besides being free, Nagios is also mature and commercially supported all around. The tool has grown from being a simple software project to a major contender in the contemporary network management field. Companies like Domino's Pizza, Ericsson, ADP, Wells Fargo, Citrix and even the United States Army are all avid users of Nagios.

Apache
If you think the Apache project is just simply a web server, then you are wrong. The project, which goes by the formal name of the Apache Software Foundation (ASF), consists of nearly 100 unique projects which are contained under Apache.

PSTools
If you want a suite of very useful command-line Windows tools which are considered essential to survival in a Windows-infested network by IT professionals, then PSTools is the tool for you. PSTools provides incredible automation tools, not to mention that it is considered to be the single best free toolset for Windows available. You can grab this handy tool for free directly from Windows.

Wireshark
Wireshark is a must have tool for anybody who runs a network, regardless of size. Wireshark is a network packet capture and analysis program that is here to assist you in achieving a trouble-free network. Network problems will not be prevented by Wireshark, but the tool will allow you to analyze your problems in real time and, hopefully, avoid future problems.

SharEnum
Most people will consider SharEnum a little obscure, but for those who use it the tool is very useful. SharEnum shows you all the file shares on your network as well as their associated security information. This tool is a very valuable security tool and is also free from Microsoft.

So there you have it, five incredibly useful and incredibly affordable (come on, they're free) tools that every person should have for their servers. IT professionals from all over use these tools and ones like them every day in order to keep their servers working as well as possible, so why shouldn't you? If you are in need of some good server tools, then start downloading these five freebies now!

SMBnow.com is news of, for and by SMBs!
SMBnow.com... The Small & Medium Business Magazine!