{"id":115053,"date":"2024-04-14T14:30:16","date_gmt":"2024-04-14T12:30:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-http-serverov-lighttpd-1-4-76-i-apache-httpd-2-4-59"},"modified":"2024-04-14T14:30:16","modified_gmt":"2024-04-14T12:30:16","slug":"reliz-http-serverov-lighttpd-1-4-76-i-apache-httpd-2-4-59","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/reliz-http-serverov-lighttpd-1-4-76-i-apache-httpd-2-4-59","title":{"rendered":"Release dei server http Lighttpd 1.4.76 e Apache httpd 2.4.59","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Pubblicato il rilascio del server http leggero lighttpd 1.4.76, progettato per combinare alta performance, sicurezza, conformit\u00e0 agli standard e flessibilit\u00e0 di configurazione. Lighttpd \u00e8 adatto per applicazioni su sistemi ad alta richiesta e punta a un basso consumo di memoria e risorse CPU. Il codice del progetto \u00e8 scritto in C ed \u00e8 distribuito sotto licenza BSD.  <\/p>\n<p>Nella nuova versione:  <\/p>\n<ul>\n<li class=\"l\"> \u00c8 stata garantita l'individuazione di un attacco \"Continuation flood\" realizzato attraverso l'invio a <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/it\/server\/\"   title=\"server\" data-wpil-keyword-link=\"linked\">server<\/a> HTTP\/2 di un flusso continuo di frame CONTINUATION senza impostare il flag END_HEADERS. Si sostiene che questo attacco non porti a un diniego di servizio per lighttpd, ma per precauzione \u00e8 stata aggiunta la rilevazione e l'invio della risposta GO_AWAY.\n<li class=\"l\"> \u00c8 stato registrato un incidente relativo all'inserimento di un backdoor nel pacchetto xz. Quando si creano rilasci per la raccolta delle dipendenze, ora si utilizza il recupero del codice da Git con il comando \"git archive\" con verifica dei tag di rilascio e senza scaricare archivi pronti con il codice.\n<li class=\"l\"> Per impostazione predefinita \u00e8 fornito un file incorporato mimetype.assign.\n<li class=\"l\"> Aggiunta la supporto per l'estensione MPTCP (MultiPath TCP), che non \u00e8 attivata per impostazione predefinita.\n<li class=\"l\"> Migliorato il supporto per le piattaforme GNU\/Hurd e NetBSD 10.\n<li class=\"l\"> Ridotto il numero di chiamate di sistema effettuate durante le connessioni al backend.\n<li class=\"l\"> Nei prossimi rilascio si prevede di impostare TLSv1.3 come versione minima supportata di default per il protocollo TLS (attualmente il parametro MinProtocol \u00e8 impostato su TLSv1.2). In futuro, il gestore server.error-handler-404 sar\u00e0 limitato solo alla gestione degli errori 404 (attualmente gestisce sia 404 che 403).    <\/ul>\n<p>Va inoltre segnalato il rilascio del server HTTP Apache 2.4.59, che presenta 21 modifiche e corregge tre vulnerabilit\u00e0:     <\/p>\n<ul>\n<li class=\"l\">CVE-2024-27316 \u2014 una vulnerabilit\u00e0 che porta all'esaurimento della memoria libera durante un attacco \"Continuation flood\".\n<li class=\"l\"> CVE-2024-24795, CVE-2023-38709 \u2014 possibilit\u00e0 di effettuare un attacco mediante la separazione delle risposte HTTP nei sistemi frontend-backend, consentendo di inserire intestazioni di risposta aggiuntive o frazionare le risposte per intervenire nel contenuto delle risposte ad altri utenti, elaborate nello stesso flusso tra frontend e backend.\n<li class=\"l\"> Nel modulo mod_cgi \u00e8 stato aggiunto il parametro CGIScriptTimeout per impostare un timeout per l'esecuzione dello script.\n<li class=\"l\"> Nel mod_xml2enc \u00e8 stata garantita la compatibilit\u00e0 con libxml2 2.12.0 e versioni successive.\n<li class=\"l\"> In mod_ssl, per la composizione delle liste dei nomi delle autorit\u00e0 di certificazione durante l'elaborazione delle direttive SSLCACertificatePath e SSLCADNRequestPath sono state utilizzate le funzioni standard di OpenSSL.\n<li class=\"l\"> In mod_xml2enc \u00e8 garantita la gestione di XML per tutti i tipi MIME text\/* e XML per escludere la corruzione dei dati nei formati Microsoft OOXML.\n<li class=\"l\"> Nell'utilit\u00e0 htcacheclean \u00e8 stata implementata l'iterazione di tutti i file per ciascuna sottodirectory quando vengono specificate le opzioni -a\/-A.\n<li class=\"l\"> In mod_ssl, nelle direttive SSLProxyMachineCertificateFile\/Path \u00e8 consentito fare riferimento a file che contengono certificati delle autorit\u00e0 di certificazione.\n<li class=\"l\"> Nella documentazione delle utility htpasswd, htdbm e dbmmanage \u00e8 stato precisato che utilizzano l'hashing e non la crittografia delle password.\n<li class=\"l\"> In htpasswd \u00e8 stata aggiunta la supporto per la gestione degli hash delle password utilizzando l'algoritmo SHA-2.\n<li class=\"l\"> In mod_env \u00e8 consentita la ridefinizione delle variabili di ambiente di sistema.\n<li class=\"l\"> In mod_ldap \u00e8 stata implementata la codifica HTML dei dati nell'intestazione ldap-status.\n<li class=\"l\"> In mod_ssl \u00e8 stata migliorata la compatibilit\u00e0 con OpenSSL 3 e garantito il ritorno della memoria liberata al sistema.\n<li class=\"l\"> In mod_proxy \u00e8 consentita la configurazione della TTL per impostare il tempo di vita delle voci nella cache delle risposte DNS.\n<li class=\"l\"> In mod_proxy \u00e8 stata aggiunta la supporto per il terzo argomento nel parametro ProxyRemote, attraverso il quale \u00e8 possibile configurare le credenziali di autenticazione di Base da trasmettere al proxy esterno.    <\/ul>\n<p>Fonte: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60990\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u043b\u0435\u0433\u043a\u043e\u0432\u0435\u0441\u043d\u043e\u0433\u043e http-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 lighttpd 1.4.76, \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430\u043c \u0438 \u0433\u0438\u0431\u043a\u043e\u0441\u0442\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438. Lighttpd \u043f\u0440\u0438\u0433\u043e\u0434\u0435\u043d \u0434\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u043d\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u043d\u0438\u0437\u043a\u043e\u0435 \u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 CPU. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 BSD. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438: \u041e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 &#171;Continuation flood&#187;, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u043e\u0439 \u0447\u0435\u0440\u0435\u0437 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115053","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u043b\u0435\u0433\u043a\u043e\u0432\u0435\u0441\u043d\u043e\u0433\u043e http-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 lighttpd 1.4.76, \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430\u043c \u0438 \u0433\u0438\u0431\u043a\u043e\u0441\u0442\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/news\/reliz-http-serverov-lighttpd-1-4-76-i-apache-httpd-2-4-59\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 http-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Lighttpd 1.4.76 \u0438 Apache httpd 2.4.59 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u043b\u0435\u0433\u043a\u043e\u0432\u0435\u0441\u043d\u043e\u0433\u043e http-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 lighttpd 1.4.76, \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430\u043c \u0438 \u0433\u0438\u0431\u043a\u043e\u0441\u0442\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/news\/reliz-http-serverov-lighttpd-1-4-76-i-apache-httpd-2-4-59\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-04-14T12:30:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-04-14T12:30:16+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Release del server http Lighttpd 1.4.76 e Apache httpd 2.4.59 | ProHoster","description":"\u00c8 stata annunciata la release del server http leggero lighttpd 1.4.76, orientato a combinare alte prestazioni, sicurezza, conformit\u00e0 agli standard e flessibilit\u00e0 nella configurazione.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/reliz-http-serverov-lighttpd-1-4-76-i-apache-httpd-2-4-59","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 http-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Lighttpd 1.4.76 \u0438 Apache httpd 2.4.59 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u043b\u0435\u0433\u043a\u043e\u0432\u0435\u0441\u043d\u043e\u0433\u043e http-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 lighttpd 1.4.76, \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430\u043c \u0438 \u0433\u0438\u0431\u043a\u043e\u0441\u0442\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/reliz-http-serverov-lighttpd-1-4-76-i-apache-httpd-2-4-59","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-04-14T12:30:16+00:00","article:modified_time":"2024-04-14T12:30:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115053","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 22:14:52","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-22 22:14:52","updated":"2026-01-22 22:14:52","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/115053","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=115053"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/115053\/revisions"}],"predecessor-version":[{"id":172909,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/115053\/revisions\/172909"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=115053"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=115053"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=115053"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}