[Zope-dev] Re: ZServer response RFC compliance improvement

Michael Dunstan michael.dunstan at gmail.com
Mon Aug 22 16:55:16 EDT 2005


On 8/22/05, Tres Seaver <tseaver at palladion.com> wrote:
> Are we sure that we won't be breaking the rather large possible set of
> installed servers running behind Apache 1.3.x with the bug for which
> adding the content length was a workaround?

I understand that this bug was resolved in Apache 1.3.27 [1]. Which is
a few years old now. And outdated by several security releases since
then.

Also OFS.Image been patched as of Zope 2.7.1 [2] in such a way that it
would have already tripped a combination of old-ish Apache and new-ish
Zope. Though ZServer was still throwing in a "Content-Length: 0".
(Which I read as sufficient to provoke the bug in Apache < 1.3.27.)

[1] http://www.apacheweek.com/issues/02-10-04

[2] http://cvs.zope.org/Zope/lib/python/OFS/Attic/Image.py?hideattic=0&only_with_tag=Zope-2_7-branch#rev1.145.2.7


More information about the Zope-Dev mailing list