Everyone's racing to patch Apache httpd for the "HTTP/2 Bomb" (CVE-2026-49975).
While you're at it: the same 2.4.68 release quietly shipped 4 MORE security fixes — and not one of them got a CVE. 🧵
#2 mod_file_cache.
Under threaded MPMs, concurrent requests for one cached file race on a shared mmap → use-after-free. Remotely triggerable, no auth, no crafted payload.
Shipped as "Fix crashes." No CVE.
13 bugs in 2.4.68 got CVEs. 4 didn't.
Watch only CVE feeds and you'd patch the bomb — and ship these blind.
On httpd? Treat 2.4.68 as a security release. 🔖 Bookmark for your next bump.
Should silent fixes like these get CVEs? 👇
🦅 PatchHawk
#httpd#infosec
I have a few tasks in my #relayd and #httpd backlog. However, I’d be interested to know what you think is missing or what isn’t working properly? Please only reply if you’ve used it or are currently using it. If you’ve used it before, why not?
🟠 Just deployed my portfolio website on an #AWS EC2 instance! 🚀 Started with IAM setup, launched a RHEL instance, cloned my site from GitHub, and used #httpd to serve it live! #DevOps#CloudComputing
Discovering cool stuff. 💡I didn't know #Nginx supports any type of network traffic (http, udp, tcp). You can literally set up a load balancer or reverse proxy for any network service unlike Apache #httpd.
The website of the Institute of Freshwater Biology, Nagano University is now IPv6 compliant. You can access the site via IPv6, for example:
curl -6
Note: IPv6 transport DNS is not yet supported due to registrar restrictions.
#OpenBSD#httpd
Dando continuidade ao Guia do Apache HTTP Server para Devs - Proxy Reverso
O que é, como funciona e como configurar um (ou vários) usando o Apache HTTP Server
#apache#httpd#guia#itexto (favor RT!)
Le serveur web apache httpd, c'est vraiment de la balle.
La config en mode reverse proxy avec destion des websocket est simple ! On peut mutualiser la conf sans avoir besoin d'un haproxy ou autre, c'est top !
#apache#httpd#proxy#reverseproxy#sysadmin
@DarioMaiocchi@MyClojureStatus Apache #httpd originally solved a number of practical and philosophical real life problems in a quite simple way and with proven efficiency. Then threads became a thing. Serverless is now the glorified scaled CGI. Such things as #KNative or #Skaffold are shaping the future IMHO.
I am looking to organize an @apache_httpd track for next year's @ApacheCon event. 2020 will be #httpd's 25th anniversary. So put on your thinking caps and watch this space. \c @TheASF
Estou republicando e atualizando o Guia do Apache HTTP Server para Devs no site da @itexto
Acabo de publicar o primeiro post: será pelo menos um a cada dois dias.
(favor RT!) #apache#httpd#devs