Apache httpd 2.4.1 Released

The Apache HTTP Server Project is pleased to announce the release of version 2.4.1 of the Apache HTTP Server ("Apache" and "httpd"). This version of Apache is our first GA release of the new generation 2.4.x branch of Apache HTTPD.

This version of httpd is a major release of the 2.4 stable branch, and represents the best available version of Apache HTTP Server. New features include Loadable MPMs, major improvements to OSCP support, mod_lua, Dynamic Reverse Proxy configuration, Improved Authentication/Authorization, FastCGI Proxy, New Expression Parser, and a Small Object Caching API.

Download | New Features in httpd 2.4 | Complete ChangeLog for 2.4 | ChangeLog for just 2.4.1

The Apache Software Foundation and the Apache HTTP Server Project are pleased to announce the GA release of version 2.4.1 of the Apache HTTP Server. This version of Apache HTTP Server is the first GA release of the new 2.4.x branch.

Apache HTTP Server 2.4 provides a number of improvements and enhancements over the 2.2 version. A listing and description of these features is available via:

http://httpd.apache.org/docs/2.4/new_features_2_4.html

Please see the CHANGES_2.4 file, linked from the download page, for a full list of changes.

We consider this release to be the best version of Apache HTTP Server available, and encourage users of all prior versions to upgrade. Apache HTTP Server 2.4.1 is available for download from:

http://httpd.apache.org/download.cgi

This release requires the Apache Portable Runtime (APR) version 1.4.x and APR-Util version 1.4.x. The APR libraries must be upgraded for all features of httpd to operate correctly.

This release builds on and extends the Apache 2.2 API. Modules written for Apache 2.2 will need to be recompiled in order to run with Apache 2.4, and may require minimal source code changes.

http://httpd.apache.org/docs/2.4/developer/new_api_2_4.html

A summary of all of the security vulnerabilities addressed in this and earlier releases is available:

http://httpd.apache.org/security/vulnerabilities_24.html

Important: Windows users: AcceptFilter Nonehas replaced Win32DisableAcceptExand the feature appears to have interoperability issues with mod_ssl. Apache 2.4.1 may not yet be suitable for all Windows servers. There is not yet a Windows binary distribution of httpd 2.4, but this is expected to be remedied soon as various dependencies graduate from beta to GA.