我了解到后续版本解决了安全漏洞:
http://httpd.apache.org/security/vulnerabilities_22.html
据说,http://httpd.apache.org/download.html完整变更列表位于http://httpd.apache.org/[首选]/httpd/CHANGES_2.2,但 apache.org 似乎不再有可用的 CHANGES_2.2 文件。
无论如何,在没有仔细研究发行说明的情况下,是否有人曾经处理过这种升级,知道哪些配置差异会影响 CentOS httpd 版本 2.2.3-22.el5.centos 和 CentOS httpd 版本 2.2.15-39.el6 之间的变化?
答案1
那么,结果搜索 inurl:“httpd/CHANGES_2.2”Apache Web 服务器的 CHANGES_2.2 似乎已经出现在其他一些网站上:
http://supergsego.com/apache/httpd/CHANGES_2.2
看起来这些变化大部分是为了修复错误、添加新指令或消除安全问题。
从 CentOS 5 中的 Apache(httpd-2.2.3-22.el5.centos)到 CentOS 6 中的 Apache(httpd-2.2.15-39.el6)的变更并非错误修正或安全补丁,而似乎确实需要注意从版本到版本之间的变更的配置,如下所示:
*) mod_proxy: Complete ProxyPassReverse to handle balancer URL's. Given;
BalancerMember balancer://alias http://example.com/foo
ProxyPassReverse /bash balancer://alias/bar
backend url http://example.com/foo/bar/that is now translated /bash/that
[William Rowe]
*) core/utils: Enhance ap_escape_html API to support escaping non-ASCII
chars [Nick Kew]
*) Output -M and -S dumps (modules and vhosts) to stdout instead of stderr.
PR 42571 and PR 44266 (dup). [Dan Poirier <poirier pobox.com>]
*) Linux 2.0: remove support for threaded MPM's due to linuxthreads use
of SIGUSR1 clashing with graceful restart signal. [Colm MacCarthaigh]
*) Change the default (when not present in the config file) setting
for UseCanonicalName to Off.
[Joshua Slive]
*) mod_userdir: The module no longer does any remapping unless the
UserDir directive is present in the config file.
[Joshua Slive]
2.1.4
*) Massively simplify the distributed httpd.conf by removing
many features and many directives that are at their default
setting. Add a selection of example config excerpts for adding
extra features in the conf/extra/ directory. Install the
distributed config and the extra config examples in the
conf/original/ directory during make install.
[Joshua Slive, Justin Erenkrantz]