Product apache version v1_3_37 has been released as test for flavors Linux+2.4-2.3.2, Linux+2.6-2.3.4, SunOS+5 The following changes have been made since v1_3_31: * Removed older log modules (LogReferer, etc) per security recommendations. NOTE: This means you need to remove any LogReferer directives you have in your httpd.conf files before upgrading to this release! You can replace them with CustomLog directives if you want to maintain that logging. * Apache fixes: see: http://www.apache.org/dist/httpd/Announcement1.3.html * mod_ssl built against latest openssl-0.9.8c * built with gcc 4_1_1 w/stack-smash-defending code generator. * Added mod_security, and mod_dos_evasive, per security baseline recommendations * improved default server configurations built by "ups tailor" * logging in tailor-generated configurations now will log to syslog and log files, you can get examples from: $APACHE_DIR/samples/conf/httpd.conf to update existing server configurations.