The Apache Software Foundation has fixed two vulnerabilities in its ubiquitous Web server, including a cross-site scripting bug that could enable an attacker to upload files to a remote server. The new version of the Apache HTTP Server also includes updates that resolve dozens of other, non-security related bugs. Apache is the most widely used Web server on the Internet and still has roughly 60 percent of the market share right now. The latest release, version 2.4.3, also includes a fix for a known issue with Apache running on Windows that would cause SSL connections to fail.
Source: https://threatpost.com/apache-fixes-two-security-flaws-version-243-082112/76933/

