RE: [cobalt-users] Apache Exploit problem - what have you done?

["Peter Masloch" <peter@xxxxxxxxxxx>]

There only is one solution: upgrading Apache. However, there are
several ways to acomplish this. You can upgrad Apache from the Apache
source
or you wait a couple more days until Cobalt has released the new .pkg
I believe the release date will be 06/28/2002
If you don't feel comfortable upgrading from the source, you should
wait.
Somebody made an instruction sheet about how to upgrade from the Apache
source.
I forgot the URL but you may find it in the Archive.
Peter


>Hi all,
>
>I have been sitting on the wall, following the apache problem 
>for the last 
>few days or so and wondered if there was a general consensus 
>on what should 
>be done? ( the posts mention many ideas and solutions but no 
>feeling of the 
>masses saying - yay! that worked for me )
>
>Is it possible to get a <cobalt>professional</cobalt> opinion 
>on the best 
>course of action to take.
>
>1) If you have updated apache, how and with what did you do this.
>( red hat updates, apache updates ?? )
>2) If you are going to wait for the official pkg, what actions have you
>taken to ensure your box is as secure as possible?
>3) Will upgrading apache from one of the above possible solutions have 
>future implications?
>- ie -
>will my php work ?
>will i need to reconfigure apache?
>will straying from cobalt pkg's afect future upgrades?
>
>As you can see, I am quite confused about the possibile 
>solutions. Couple 
>this with a fear bordering almost on the irational regards 
>having our box 
>compromised, again! And neither the time or expertise to 
>swiftly deal with 
>problems this may create.
>
>Thanks in advance
>
>MJM
>
>_________________________________________________________________
>Chat with friends online, try MSN Messenger: http://messenger.msn.com
>
>_______________________________________________
>cobalt-users mailing list
>cobalt-users@xxxxxxxxxxxxxxx
>To Subscribe or Unsubscribe, please go to:
>http://list.cobalt.com/mailman/listinfo/cobalt-users
>
>