RE: [cobalt-users] Apache C14 / Update 16644 - code fix

[wcstaff <wcstaff@xxxxxxxxxxxx>]

e all up to date on our patches.
> 
> AFAIK, it was all versions. At least, Sun recalled *all* of them ?
> 
> The problem was that if you got a redirect from a HTTPS page,
> say for instance when visiting https://www.example.com/webmail,
> it would redirect you to http://www.example.com:443/webmail/ -
> instead of the correct location https://www.example.com/webmail/
> 
> And this was because the "ap_http_method" function was messed up...
> Besides from that, it seems that a memory allocation was broken too.
> Not sure if that is the reason behind the recent zombie army, though?
> (people have reported that updated apache's generate zombie processes)
> 
> --anders
> 
The funny thing is, we have none of those symptoms on any box. Everything is
working the way it is suppose to. Now, we never update from the ftp site. It
seems Sun puts untested updates there (use at your own risk). We wait until
it is posted to the website update list (sometimes it is over a week or even
a month before it shows up there). So, we may have not updated our systems
with the faulty patch.