https://bz.apache.org/bugzilla/show_bug.cgi?id=69736
--- Comment #3 from Yann Ylavic <[email protected]> --- A security fix can break things to protect users, but you can stay at 2.4.63 if it's not a concern for you. In this case there is nothing httpd can do to protect against the vulnerability, RFC 2817 is broken (https://opossum-attack.com/). -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
