Re: PATCH: apache 1.3.24 chunk size thingy - cert_vucert944335_1.3.24

2002-06-20 Thread Florian Weimer
Matthew Grant [EMAIL PROTECTED] writes: Here is a rehashed version of the patch cert_vucert944335 chunk fix patch used in apache_1.3.9-14.1 for potato which works for apache in woody and sid. The German publish Heise claims that this patch does not fix the vulnerability, see:

Re: PATCH: apache 1.3.24 chunk size thingy - cert_vucert944335_1.3.24

2002-06-20 Thread SDiZ \(UHome\)
The German publish Heise claims that this patch does not fix the vulnerability, see: http://www.heise.de/newsticker/data/pab-20.06.02-000/ But I hope this is an editorial error. :-/ Do you means the one-line patch from ISS ? That patch don't work. The one in apache offical 1.3.26

Re: PATCH: apache 1.3.24 chunk size thingy - cert_vucert944335_1.3.24

2002-06-20 Thread Florian Weimer
SDiZ \(UHome\) [EMAIL PROTECTED] writes: The German publish Heise claims that this patch does not fix the vulnerability, see: http://www.heise.de/newsticker/data/pab-20.06.02-000/ But I hope this is an editorial error. :-/ Do you means the one-line patch from ISS ? That patch don't