On 2023-10-19 the project released version 2.4.58 of Apache httpd. 3 CVEs have been fixed, 2 low and 1 moderate. I describe the changes done by me below. CVEs The interesting one is CVE-2023-45802 which I described in my blog about the HTTP/2 Rapid Reset. Changes mod_http2, HTTP/2 frontend WebSockets I added support for bootstrapping WebSockets via HTTP/2, as described in RFC 8441. A new directive ‘H2WebSockets on|off’ has been added. The feature is not enabled by default for compatibilit...
