The Apache project has announced that with the release of Apache web server version 2.0.65, it will no longer support or maintain version 2.0. They are urging users to upgrade to the current version series 2.2 or 2.4 editions as soon as possible; version 2.4 was released in February 2012.

Version 2.0 has been around since its release 11 years ago. Among the issues that have been fixed in this final release are six CVE-numbered security holes – including a bug in the logging feature that potentially allowed attackers to gain control of the server. However, the developers of the web server point out that it remains possible to exhaust all memory using a carefully crafted .htaccess rule. The issue will remain unresolved in version series 2.0, which was released in parallel with 2.0.65, has been modified to minimize this risk. This version also fixes the previously mentioned security hole in the logging feature.