Вышла очередная версия апача - 2.0.52. Его можно рассматривать как bugfix: основная цель появления этой версии - это латание дыр, в частности исправлена ошибка в обработке директивы Satisfy (доступ к ресурсам, требующим аутенфикации)
http://www.apache.org/dist/httpd/Announcement2.htmlChanges with Apache 2.0.52 *)
---------------------------------------------------------------------------------
for error pages. PR 30732 [Andr? Malo] *) Fix the global mutex crash when the global mutex is never allocated due to disabled/empty caches. [Jess Holle ] *) Fix a segfault in the LDAP cache when it is configured switched off. [Jess Holle ] *) SECURITY: CAN-2004-0811 (cve.mitre.org) Fix merging of the Satisfy directive, which was applied to the surrounding context and could allow access despite configured authentication. PR 31315. [Rici Lake ] *) Fix the handling of URIs containing %2F when AllowEncodedSlashes is enabled. Previously, such urls would still be rejected. [Jeff Trawick, Bill Stoddard] *) mod_mem_cache: Fixed race condition causing segfault because of memory being freed twice, or reused after being freed. [J. Clar, W. Stoddard, G. Ames] *) Add -l option to rotatelogs to let it use local time rather than UTC. PR 24417. [Ken Coar, Uli Zappe ] *) mod_log_config: Fix a bug which prevented request completion time from being logged for I_INSIST_ON_EXTRA_CYCLES_FOR_CLF_COMPLIANCE processing. PR 29696. [Alois Treindl ]
