Apache HTTP Server 2.4.66 released
The Apache Software Foundation has announced the general availability of its famous HTTP server, version 2.4.66. This is a notable update for a project that's been around for more than fifteen years.
Apache 2.4.66 isn't just another minor point release; it's substantial, featuring security fixes and important new features since joining the ongoing development of the 2.4 branch. The team put considerable effort into solidifying this version's stability and security by tackling multiple vulnerabilities and introducing meaningful enhancements.
Users can get Apache 2.4.66 from the official download page. If you're moving from earlier versions, especially those on the now outdated 2.2.x branch, know that this release brings performance improvements and other refinements. The project's website also offers background information about features added since the Apache 2.4 series began.
Be aware when installing or upgrading: key functions might depend on updated versions of the APR and APR-Util libraries, so verify if those need changing too. If you use a threaded MPM setup besides prefork, double-check that your modules are compatible; they should be thread-safe.
Given that the older Apache 2.2 code won't receive any more security updates or support from the team now that it's reached the end of its life, it makes sense to consider upgrading to 2.4.66 soon. This newer release receives bug fixes and introduces new capabilities you might miss out on otherwise.
For a quick rundown of changes in this specific version, look at the CHANGES_2.4.66 file linked from the download page. You can also obtain detailed information about addressed security flaws across all 2.4 releases on this page.
When upgrading or compiling Apache 2.4.66, remember that modules built for previous major versions likely need recompilation with minimal changes, if any at all. More specifics on how the APIs between versions 2.2 and 2.4 line up can be found in the official documentation.
Release Apache HTTPd 2.4.66
2.4.66
