Hi. It just has been released the new version of apache web server that fixs the chunk bug.. From the web... ----------- "In most cases the outcome of the invalid request is that the child process dealing with the request will terminate. At the least, this could help a remote attacker launch a denial of service attack as the parent process will eventually have to replace the terminated child process, and starting new children uses non-trivial amounts of resources. We were also notified today by ISS that they had published the same issue which has forced the early release of this advisory. Please note that the patch provided by ISS does not correct this vulnerability. The Apache Software Foundation has released versions 1.3.26 and 2.0.39 to address and fix this issue. These version are available for download; see below." -------- So, the ISS patch doesn't work... What about trying the 1.3.26 ? Slt... Thx ;) PS: excuseme Carpaski and woodchip, but you are who better know the BIGGG apache ebuild.
