Impact of CVE-2017-9789?

["Dan Mahoney (Gushi)" <danm@xxxxxxxxxxxxxxx>]

Hey all,

Under FreeBSD, mod_http2 is not compiled by the ports tree by default.

Are we still vulnerable to this?

Is there any mitigation strategy besides upgrading?  (Disabling htaccess 
parsing, for example?)

-Dan

--


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx