Hi carnil,

On Thu, 2025-05-01 at 09:18 +0200, Salvatore Bonaccorso wrote:
> The only reference so far we have is the RedHat bugzilla entry at [1],
> do you know more, is it reported upstream and have other references to
> follow?

Upstream had not even been informed about this vulnerability, nor registered
the CVE.
Also, we both tried to reproduce the bug in question but could not trigger a
crash of the Apache httpd process...

Regards,
Moritz

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to