Hello, Is there a patch for earlier versions of Apache that fix the chunked Transfer-Encoding security hole, but nothing else? I know OpenBSD, for example, has an Apache 1.3.24 in ports that has the chunked Transfer-Encoding fixed. That would certainly be a good short term solution for this guy--it doesn't sound like it's a good idea for him to wait for 1.3.27!
Humbly, Andrew ---------------------------------------------------------------------- Andrew Ho http://www.tellme.com/ [EMAIL PROTECTED] Engineer [EMAIL PROTECTED] Voice 650-930-9062 Tellme Networks, Inc. 1-800-555-TELL Fax 650-930-9101 ----------------------------------------------------------------------
