Sure is nice to see a quick patch for this. ... i just completed rolling out a dozen copies of the 1.3.26 version ... The Apache Group is pleased to announce the release of the 1.3.26 version of the Apache HTTP Server. This version of Apache is principally a security and bug fix release. Of particular note is that 1.3.26 addresses and fixes the issues noted in CAN-2002-0392 (mitre.org) [CERT VU#944335] regarding a vulnerability in the handling of chunked transfer encoding as described above.