[Bug 295842] www/apache24: Patch CVE-2026-49975 (HTTP2 Bomb DoS)

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 04 Jun 2026 08:26:52 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295842

--- Comment #3 from Dani I. <i.dani@outlook.com> ---
Thanks for the fast commit and heads-up regarding the separate port!

One thing regarding the patch-commit: I saw you also bumped the versions in
"h2_version.h". IMHO thats not quite correct, as the stuff of 2.0.40 is
currently missing and therefor it's not really v 2.0.41 and could be
misleading. But in the end it's up to you how to handle that - i just wanted to
point it out.. :)

-- 
You are receiving this mail because:
You are the assignee for the bug.