Changes with Apache 1.3.42 *) SECURITY: CVE-2010-0010 (cve.mitre.org) mod_proxy: Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long). Reported by Adam Zabrocki. [Colm MacCárthaigh] *) IMPORTANT: This is the final release of Apache httpd 1.3. Apache httpd 1.3 has reached end of life, as of January 2010. No further releases of this software will be made, although critical security updates may be made available as patches from the following website: http://www.apache.org/dist/httpd/patches/ Apache 1.3.x users who wish to avail of security releases, bug-fixes and community support are advised to use Apache 2.2 or higher. Information on upgrading is available from the following website: http://httpd.apache.org/docs/2.2/upgrading.html Thank you to everyone who helped make Apache 1.3.x the most successful, and most used, webserver software on the planet! [Apache httpd group] *) Protect logresolve from mismanaged DNS records that return blank/null hostnames. [Jim Jagielski]