diff --git a/mod_http2-1.15.7-CVE-2026-49975.patch b/mod_http2-1.15.7-CVE-2026-49975.patch index 3fd541d..4919de4 100644 --- a/mod_http2-1.15.7-CVE-2026-49975.patch +++ b/mod_http2-1.15.7-CVE-2026-49975.patch @@ -20,8 +20,8 @@ index c20e879..6b683ab 100644 else if (H2_HD_MATCH_LIT("cookie", name, nlen)) { existing = apr_table_get(headers, "Cookie"); if (existing) { -+ if (!nv->valuelen) -+ return APR_SUCCESS ++ if (!vlen) ++ return APR_SUCCESS; /* Cookie headers come separately in HTTP/2, but need * to be merged by "; " (instead of default ", ") */