Apache HTTP Server 2.2.20 is now available for download. What’s new in Apache HTTP Server 2.2.20.
Fix handling of byte-range requests to use less memory, to avoid denial of service. If the sum of all ranges in a request is larger than the original file, ignore the ranges and send the complete file. This release includes the Apache Portable Runtime (APR) version 1.4.5 and APR Utility Library (APR-util) version 1.3.12, bundled with the tar and zip distributions.
Download Apache HTTP Server 2.2.20
