The Apache web server version 2.0.55 was released today. The previous 2.0 release was made back in April of this year. 2.0.55 fixes a flaw that was discussed on Slashdot in July. It’s mentioned in their official 2.0.55 announcement.
If a request contains both Transfer-Encoding and Content-Length headers, remove the Content-Length.
proxy_http: Correctly handle the Transfer-Encoding and Content-Length request headers. Discard the request Content-Length whenever chunked T-E is used, always passing one of either C-L or T-E chunked whenever the request includes a request body.
Well, now what?
Work with Me
I'm available for hire and always taking new clients, big and small. Got a project or an idea you'd like to discuss? Startup plan but no developer to make it happen? Just get in touch, I'd love to see if I can help you out!