Re: PATCH: apache 1.3.24 chunk size thingy - cert_vucert944335_1.3.24

[Florian Weimer <Weimer@CERT.Uni-Stuttgart.DE>]

Matthew Grant <grantma@anathoth.gen.nz> writes:

> Here is a rehashed version of the patch cert_vucert944335 chunk fix
> patch used in apache_1.3.9-14.1 for potato which works for apache in
> woody and sid. 

The German publish Heise claims that this patch does not fix the
vulnerability, see: 

http://www.heise.de/newsticker/data/pab-20.06.02-000/

But I hope this is an editorial error. :-/

-- 
Florian Weimer 	                  Weimer@CERT.Uni-Stuttgart.DE
University of Stuttgart           http://CERT.Uni-Stuttgart.DE/people/fw/
RUS-CERT                          fax +49-711-685-5898


-- 
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org