Re: i5 Apache version

[bdietz400@xxxxxxxxx]

I just checked a V6.1 system:

Apache/2.2.11 (i5)

Not sure if IBM will update the V5R4 version to that.

I found V5R4 PTF SI35432 - IBM HTTP Server for i5/OS
<snip>
Update IBM HTTP Server for i to latest levels
(2.0.63) from Apache Software Foundation and
include a fix for security vulnerability
CVE-2008-2939 (mod_proxy_ftp globbing XSS) for
PCI compliance.</snip>

Bryan


On Jul 24, 2009 10:13am, "Haas, Matt (CL Tech Sv)" <matt.haas@xxxxxxxxxxx>  
wrote:
> Mike,



> I'm pretty sure 2.0.58 is much more recent than 2006. There have been a  
> couple of additional release since then (2.0.63 is the current) and you  
> can read about the changes at  
> http://apache.mirror.facebook.net/httpd/CHANGES_2.0. Most of the fixes  
> were either to Windows stuff or mod_ssl which are not concerns for the i.



> 2.2 is a different version. I just took a look at the differences between  
> 2.0 and 2.2 and it doesn't seem like they're a big deal  
> (http://httpd.apache.org/docs/2.2/new_features_2_2.html).



> 2.0 does seem to be actively maintained as is the 1.3 version.



> If you really want 2.2, there's nothing to stop you from downloading it  
> and building it yourself.



> Matt



> -----Original Message-----

> From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On  
> Behalf Of Mike Cunningham

> Sent: Thursday, July 23, 2009 10:24 PM

> To: Web Enabling the AS400 / iSeries

> Subject: [WEB400] i5 Apache version



> The Apache project is currently up to version 2.2.11. V5R4 with the  
> latest patches is Apache version 2.0.58 dated Jul 2006. Does anyone know  
> if IBM has any plans to bring i5 HTTP up to the latest Apache version?  
> 2.0 is working OK, my concern is in staying current for any possible  
> security issues.

> --

> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list

> To post a message email: WEB400@xxxxxxxxxxxx

> To subscribe, unsubscribe, or change list options,

> visit: http://lists.midrange.com/mailman/listinfo/web400

> or email: WEB400-request@xxxxxxxxxxxx

> Before posting, please take a moment to review the archives

> at http://archive.midrange.com/web400.





> --

> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list

> To post a message email: WEB400@xxxxxxxxxxxx

> To subscribe, unsubscribe, or change list options,

> visit: http://lists.midrange.com/mailman/listinfo/web400

> or email: WEB400-request@xxxxxxxxxxxx

> Before posting, please take a moment to review the archives

> at http://archive.midrange.com/web400.