The Apache HTTP Server Project announced the fourth public release of Apache 2.0. Apache 2.0 has been running on the apache.org website since December of 2000 and has proven to be very reliable.

This version of Apache is primarily a security and bug fix release. Of particular note, 2.0.40 is designed to fix the serious vulnerability noted in CAN-2002-0661 and the pair of path exposures in CAN-2002-0654 (mitre.org).

Apache 2.0 offers numerous enhancements, improvements and performance boosts over the 1.3 codebase. The most visible and noteworthy addition is the ability to run Apache in a hybrid thread/process mode on any platform that supports both threads and processes. This has shown to improve the scalability of the Apache HTTP Server significantly in testing. Apache 2.0 also includes support for filtered I/O. This should allow modules to modify the output of other modules before it is sent to the client. The version includes support for IPv6 on any platform that supports IPv6.

Version 2.0.40 is known to work on many versions of Unix, BeOS, OS/2, Windows, and Netware. Because of many of the advancements in Apache 2.0, the initial release of Apache is expected to perform equally well on all supported platforms.

PGP Flaw Leaves E-mails Vulnerable
Serious Vulnerability Uncovered in Apache 2.0