Apache httpd 2.4.63 is released as GA.

07 February 2025 Update, see Httpd 2.4.63 crash with Window 7 https://www.apachelounge.com/viewtopic.php?t=9348

ASF and Apachelounge changes : https://www.apachelounge.com/Changelog-2.4.html

Important : NO security vulnerabilities fixed in 2.4.63, see https://httpd.apache.org/security/vulnerabilities_24.html .

VS17 Win32
The Win32 version is available again, see also discussion https://www.apachelounge.com/viewtopic.php?p=42099
Only build the with the standard Apache modules.
For non-standard modules (like mod_fcgid) use the VS16 Win32 ones at https://www.apachelounge.com/download/VS16/

Documentation: http://httpd.apache.org/docs/2.4/

Build with dependencies:

• openssl 3.3.2
• nghttp2 1.64.1
• jansson 2.14
• curl 8.11.1
• apr 1.7.5
• apr-util 1.6.3
• apr-iconv 1.2.2
• zlib 1.3.1
• brotli 1.1.0
• pcre2 10.44
• libxml2 2.13.5
• lua 5.4.7
• expat 2.6.2

Notes VS17 OpenSSL 3.x.x:

• Only PHP 8.2 and 8.1 (build with 3.x.x) is running as module.
  Running with mod_fcgid no issues seen.

For running as module, See also the post from user Otomatic and notes at https://www.apachelounge.com/viewtopic.php?t=8969
and https://www.apachelounge.com/viewtopic.php?t=8938

• With too weak certificates/ciphers Apache does not start, see https://www.apachelounge.com/viewtopic.php?t=8819

Changelog

• Added build provenance attestation so you can also now download and verify phar files from GitHub releases:

  gh release --repo composer/composer download --pattern composer.phar
  gh attestation verify --repo composer/composer composer.phar

• Fixed unsupported funding values causing parse errors in packages (#12247)

• Fixed support for a few newer funding formats (#12257)

• Fixed InstalledVersions regression from 2.8.4 when reload() is used (#12269)

• Fixed psr-0/psr-4 rules having unstable order in vendor/composer/autoload*.php (#12263)

• Fixed a few warnings happening incorrectly in edge cases (#12284, #12268, #12283)

Git 2.47.1