The new Apache release is available for immediate testing. Please reply-to [EMAIL PROTECTED] with any observed variance between this version and your previous experience with recent Apache 1.3.x releases.
The packages, until General Availability release within the next two hours will be available from; http://httpd.apache.org/dev/dist/ .tar.gz and .tar.Z files are for Unix builds, -win32-src.zip file is for the Windows builders [with cr/lf line endings.] Win32 .exe and .msi installer packages are online for testing as well.]. Excerpting tomorrow's announcement; This version of Apache is principally a security and bug fix release. A summary of the bug fixes is given at the end of this document. Of particular note is that 1.3.26 addresses and fixes the issues noted in CAN-2002-0392 (mitre.org) [CERT VU#944335] regarding a vulnerability in the handling of chunked transfer encoding. We would like to thank Mark Litchfield of ngssoftware.com for discovering and reporting the vulnerability.
