HP-UX 11i Version 2 March 2004 Release Notes

Internet and Networking

HP-UX Web Server Suite

Chapter 7

HP-UX Apache-based Web Server

HP-UX Apache-based Web Server combines Apache with numerous popular modules

from other Open Source projects and provides HP value-added features for the HP-UX

platform:

• Scripting capabilities: PHP, mod_perl, CGI

• Content management: WebDAV

• Security: authentication through an LDAP server, Chrooted environment, SSL and

TLS support

Summary of Change

HP-UX Apache-based Web Server v.1.0.10.03 is primarily a security and bug fix release

which addresses the following vulnerabilities and problems:

• Apache upgraded to 2.0.48

All users are urged to upgrade immediately to Apache 2.0.48, which is a cumulative

release that addresses and fixes the security vulnerabilities described at

http://cve.mitre.org/ (CAN-2003-0789, CAN-2003-0542), including all

previously reported problems such as those described at http://cve.mitre.org/

(CAN-2003-0192, CAN-2003-0253, CAN-2003-0254) and at

http://nagoya.apache.org/bugzilla/index.html (PR19849, PR21370,

PR19753).

• OpenSSL upgraded to 0.9.7.c

All users are urged to upgrade immediately to Apache 2.0.48, which is a cumulative

release that addresses and fixes the security vulnerabilities described at

http://cve.mitre.org/ (CAN-2003-0543, CAN-2003-0544).

Impact

See “Installation” on page 86.

Compatibility

This release is binary-compatible with Apache 2.0.42 and greater. All the modules

compiled with Apache 2.0.42 or greater will continue to work with this version since the

Apache API has not changed.

Performance

Performance is similar to previous HP Apache-based Web Server releases.

Documentation

See “Documentation” on page 87.

Obsolescence

Not applicable.