About:
Apache is the world's most popular HTTP server, being quite possibly the best around in terms of functionality, efficiency, security and speed.

Release focus: Minor security fixes

Changes:
A flaw was found in the mod_proxy_balancer module that permitted a cross-site scripting attack against an authorized user. A flaw was found in the mod_proxy_balancer module that allowed an authorized user to send a carefully crafted request that would cause the Apache child process handling that request to crash. A flaw was found in the mod_status module that allowed a cross-site scripting attack. A flaw was found in the mod_imap module. On sites where mod_imap is enabled and an imagemap file is publically available, a cross-site scripting attack was possible.

Author:
Apache Software Foundation <dev [at] httpd [dot] apache [dot] org> [contact developer]

Rating:	reset 1 2 3 4 5 6 7 8 9 10
9.34/10.00 (274 votes)

Homepage:
http://httpd.apache.org/
Tar/GZ:
http://httpd.apache.org/download.cgi
Tar/BZ2:
http://httpd.apache.org/download.cgi
Zip:
http://httpd.apache.org/download.cgi
Changelog:
http://httpd.apache.org/docs/2.2/new_features_2_2.html
CVS tree (cvsweb):
http://svn.apache.org/viewcvs.cgi/httpd/httpd/
Bug tracker:
http://httpd.apache.org/bug_report.html
Mailing list archive:
http://mail-archives.apache.org/mod_mbox/httpd-dev/
Mirror site:
http://httpd.apache.org/download.cgi

Trove categories: [change]

[Development Status]		5 - Production/Stable
[Environment]		No Input/Output (Daemon)
[Intended Audience]		Developers, End Users/Desktop, System Administrators
[License]		OSI Approved :: BSD License (original), The Apache License, The Apache License 2.0
[Operating System]		Microsoft :: Windows :: Windows 95/98/ME, Microsoft :: Windows :: Windows NT/2000/XP, POSIX, POSIX :: BSD, POSIX :: Linux, POSIX :: SunOS/Solaris
[Programming Language]		C
[Topic]		Internet :: WWW/HTTP :: HTTP Servers

Dependencies: [change]
No dependencies filed

 Branches

Branch	Version	Last release	License	URLs
Stable (2.2.x)	2.2.9	16-Jun-2008	The Apache License 2.0
1.3 The 1.3 series, which is still maintained	1.3.41	21-Jan-2008	The Apache License
Stable (2.0.x) The stable series of Apache, suitable for production use.	2.0.63	21-Jan-2008	The Apache License 2.0

 Releases

Version	Focus	Date
2.2.9	Minor security fixes	16-Jun-2008 14:34
2.2.8	Minor security fixes	21-Jan-2008 00:59
2.2.6	Major security fixes	11-Sep-2007 10:45
2.2.3	Minor security fixes	24-Aug-2006 21:29
2.2.2	Minor security fixes	02-May-2006 11:33
2.2.0	N/A	04-Dec-2005 13:19

 Articles referencing this project

SuSE: New Apache and Apache2 packages fix cross site scripting problems by Patrick Lenz , in Security Mon, Apr 7th 2008 04:07 Red Hat: Updated Apache httpd packages fix several security issues by Patrick Lenz , in Security Sun, Jan 20th 2008 08:59 SuSE: New apache packages fix remote denial of service by Patrick Lenz , in Security Sun, Nov 25th 2007 05:55 Red Hat: Updated httpd packages fix a security issue by Patrick Lenz , in Security Sun, Nov 18th 2007 13:19 Red Hat: Updated httpd packages fix a security issue by Patrick Lenz , in Security Sun, Nov 11th 2007 01:02

Red Hat: Updated httpd packages fix two security issues by Patrick Lenz , in Security Sun, Oct 28th 2007 08:04 Red Hat: Updated Apache httpd packages correct a security issue by Patrick Lenz , in Security Sun, Jul 15th 2007 10:26 Red Hat: Updated Apache httpd packages correct three security issues by Patrick Lenz , in Security Sun, Jul 1st 2007 13:48 Enigform: The OpenPGP Firefox Extension by Arturo Busleiman , in Editorials Sat, Apr 14th 2007 00:00 [more articles]

 Comments

[»] Mod Rewrite Rules!
by Rob - Nov 23rd 2007 07:26:35

Apache is great. I don't think I could live without mod rewrite. I get so much use out of it and will never switch to IIS

[reply] [top]

[»] mod_rewrite
by phiro - Oct 7th 2007 05:11:12

@ manuel: yes, you can use it in windows. It works also in a package like xampp for example.

[reply] [top]

[»] Nice Features
by patti - Apr 25th 2007 06:59:22

Agree with comments below...

If you think of the many helpful features of Apache that are available by default (i.e. mod-rewrite) it's just a great project. To realise similar things within other software can be ver complicated.

[reply] [top]

[»] Re: Nice Features
by manuel - May 17th 2007 08:31:07

yea mod-rewrite is a awesome mod. do you know if its possible to use it on a windows / apache system?

[reply] [top]

---

[»] Re: Nice Features
by John Cotono - Oct 23rd 2007 04:02:43


> yea mod-rewrite is a awesome mod. do you

> know if its possible to use it on a

> windows / apache system?

You should check out http://www.wampserver.com/en/, their install comes with mod-rewrite!

[reply] [top]

---

[»] Re: Nice Features
by bpeh - May 19th 2007 07:39:03

i agree completely. apache is programming style is also good.

[reply] [top]

---

[»] The reasons why I use Apache
by fanatt - Apr 22nd 2007 14:56:29

I use Apache because it can be very simply to configure, and provides much functionality. IIS is very poor product. Thanks.

[reply] [top]

[»] Re: The reasons why I use Apache
by alex07 - Apr 23rd 2007 17:00:30

Yeah, Apache is obviously much better than IIS.

[reply] [top]

---

[»] Re: The reasons why I use Apache
by CoderGuy - Jun 8th 2007 22:27:12


> Yeah, Apache is obviously much better

> than IIS.

That's a good call, didn't mess around with IIS too much but there is definitely a reason for that~

--
"Suicide Hotline, please hold" Translation = You're hosed~

[reply] [top]

---

[»] Re: The reasons why I use Apache
by VKT - Jul 3rd 2007 11:36:55


> Yeah, Apache is obviously much better

> than IIS.

Don't you think, that there should be some competition. When one is an absolut leader, this may stop development of the project. So, we even should support those, who want to make something better! :-)

--
That's all...

[reply] [top]

---

[»] Stop IIS
by Marcus Moll - Sep 30th 2006 19:27:11

Stop IIS and use Apache ;-)

[reply] [top]

[»] Re: Stop IIS
by mobytech - Mar 19th 2007 11:02:04


> Stop IIS and use Apache ;-)

Use Apache to avoid many problems +1

[reply] [top]

---

[»] ApacheCon 2006
by Thomas M. - Aug 18th 2006 16:37:29

I was lucky enough to attend this years ApacheCon (the official European conference of the Apache Software Foundation) and it was a great experience. There were many great speakers and Dublin was definatly worth the trip! Tom

[reply] [top]

[»] Great for Testing
by jon davis - Aug 10th 2006 17:37:57

Easy Enough to Learn and fun to play around with.
Just Great

[reply] [top]

[»] Versions update
by AltBlue - Jul 18th 2006 02:23:18

2006-04-29, 2.0: 2.0.58
2006-05-17, 1.3: 1.3.36

Unluckily, project's admins seem to have lost interest in updating freshmeat info for "old" httpd branches :(

--
-- altblue

[reply] [top]

[»] Coolest Webserver Ever
by GuitarFan - May 30th 2006 12:33:43

I love this webserver. Apache, you make my life happy!

[reply] [top]

[»] I use Apache since 3 years
by Philippe F. - Dec 6th 2005 20:09:22

I use Apache since 3 years for one of my website. I just want to thank you for making this software free. It is definitely the best web server available now. Two thumbs up.

--
-- Philippe

[reply] [top]

[»] Apache debian maintainer
by DavidWebb - Sep 6th 2005 18:49:55

Anyone know the email of the person who maintains the debian package?

[reply] [top]

[»] Re: Apache debian maintainer
by vint - Jan 31st 2006 01:08:09


> Anyone know the email of the person who

> maintains the debian package?

Hello David,
You can try to use this URL: mentors.debian.net
Ivan

[reply] [top]

---

[»] Re: Debian-Apache maintainer
by Melvin - Apr 5th 2007 21:56:50


> Anyone know the email of the person who
> maintains the debian package?

For bugs reports about Apache direct here, if you need support you'll have to find third partie help since Apache Fundation developers don't offer that, perhaps in user groups or some well known forums you might get your answers.

To contact the current maintainer of the Debian package you may ask support [at] mentors.debian.net.

Mel

[reply] [top]

---

[»] Apache
by Thomas M. - Apr 24th 2005 05:13:04

The Apache web server is one of the most important open source projects. Not only is it the world's most popular HTTP server but more importantly it is the reason that the server side of the Web is not dominated by Microsoft. We all know about Microsoft's strategy of 'extending' the 'commodity protocols' on which open source projects depend, as a way of denying open source an entry into the market (The Halloween Documents). If Apache wouldn't have been people probably would have had to develop one version of their web pages for Netscape servers and one for Microsoft servers. Eventually Microsoft would have won the 'server war' as it won the 'browser war' but luckily this did not happen. Instead Apache changed the rules on the server side. Tom

[reply] [top]

[»] where would i be without apache
by Glen - Apr 2nd 2005 16:05:20

Never been much of a tech savy person but I have managed to grasp the innerworkings of apache. Great support and documenations. For those in search for a good resource visit http://apachefreaks.com/

[reply] [top]

[»] Old versions
by Ulf Harnhammar - Oct 15th 2004 06:33:52

Freshmeat is falling behind on Apache versions. The current ones are 2.0.52 and 1.3.31.

[reply] [top]

[»] Re: Old versions
by D-Man - Dec 21st 2006 04:35:13


> Freshmeat is falling behind on Apache

> versions. The current ones are 2.0.52

> and 1.3.31.

>

There are new versions now :)

[reply] [top]

---

[»] Easy to use and well documented!
by MikeLowery - Sep 26th 2004 09:10:25

I am a total newbie but thanks to the great documentation I have been able to get stuff going!
Thanks for such a great webserver!!

[reply] [top]

[»] Awesome!
by Nicole Jackson - Aug 25th 2004 18:33:37

Where would we be without Apache! Great work!!

[reply] [top]

[»] Congratulations!
by Douglas Macedo - Aug 4th 2004 13:03:57

Congratulations for the excelent Web Server. =)

--
Douglas Macedo

[reply] [top]

[»] Very Robust
by Plutoid - May 22nd 2004 11:12:03

Thanks for the Great Web Server. Keep up the Great work! Jake the Jeweler

[reply] [top]

[»] Why use anything else???
by Plutoid - Jul 9th 2003 17:01:15

Some of my friends are paying tons of $$ for ISS and I just laugh while I am running Apache,php, and mysql for free. Praise to the programmers!!! Jake@plutoid.com

[reply] [top]

[»] 1.3.13?
by xercist - Oct 13th 2000 13:46:33

Don't get me wrong, I love the apache server, but what happened to 1.3.13? Are they really trying to avoid releasing a .13 on Oct, Friday the 13th? I think the coincidence would be quite nice ;)

[reply] [top]

[»] Re: 1.3.13?
by Joel A. Chornik - Jan 31st 2001 07:42:03

It was released.. just for a few secs, before 1.3.14 was released due to a lust minute bug fix. it would have been a nice coincidence, though.
> Don't get me wrong, I love the apache
> server, but what happened to 1.3.13? Are
> they really trying to avoid releasing a
> .13 on Oct, Friday the 13th? I think the
> coincidence would be quite nice ;)

[reply] [top]

---

[»] Why Apache?
by Jeff Johnson ... 'TrN' - Aug 17th 1999 12:31:18

We've considered using Roxen-SSL, WN, and other servers.
However, many of the features that we rely on are only available
for the Apache server, for example, we use FastCGI, PHP, DAV,
FrontPage 2000, SSL, Java Servlets, CORBA, and Netscape Roaming
Access, and I have yet to find a web server that is under a
non-restrictive license that will satisfy the requirements.

On the other hand, "Zues-SSL" looks like an excellent server,
claiming to support for FastCGI, SecureCGI, Servlets, CORBA,
FrontPage support, and DAV support for Netscape Publishing,
and even has Apache compatibility with logs and .htaccess and
internal bandwith management, however, $1600 is a little too
much to pay.

[reply] [top]

[»] Re: Why Apache?
by planetandrea - Aug 25th 2005 16:15:06

Just switched to apache2 and wow what a great improvement! I love how you can up the maxprocs on the fly... just great!

--
Andrea planetandrea.com

[reply] [top]

---