[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] Apache worm that uses the chunk vulnerability - in the wild



Hi Rick,

> Last week we added blow_chunks.c to our apaches using apxs.  Do you see any
> problem with this being the case?  Any need to remove blow_chunks from the
> current server prior to doing the upgrade.

No, you can leave it in. It doesn't cause any problems on the four RaQ4's 
where I applied the new Apache.PKG so far. Also, those who have upgraded PHP 
on their own or through third parties do not need to worry. PHP continues to 
run fine after the new official Apache-PKG has been applied.

-- 

Mit freundlichen Grüßen / With best regards

Michael Stauber
mstauber@xxxxxxxxxxxxxx
Unix/Linux Support Engineer