[Xitami] Fwd: Denial of service vulnerability in Xitami Open Source Web Server

[Pieter Hintjens]

"Pieter Hintjens" <ph@imatix.com> wrote:

> There will be an update of xitami.com with new versions of Xitami that
> fix this DoS later today.

This update is now complete, there are new releases of Xitami/2.5 and 
Xitami/2.4 on www.xitami.com.

Note that the installation procedures have changed.

If you are installing on top of an existing Windows installation, 
just unzip the packages and chuck the .exe files into the Xitami 
directory.  The single binary package contains several binaries, for 
different execution models: GUI, console, service.

If you are installing for Linux or Unix, you will have to build from 
the source kit.  It _should_ be as simple as running "sh build.sh" 
from the top-level directory but since we've changed the Xitami build 
process completely to use a new make tool (RealiBase Boom, see 
imatix.com), I expect there will be a few issues.

-
Pieter Hintjens
iMatix Corporation