On 22/09/17 17:42, Jean Baptiste Favre wrote: > Hi Moritz, > As far as I can remember, HTTP2 support has been introduced in 5.3.0 > (https://cwiki.apache.org/confluence/display/TS/What%27s+New+in+v5.3.x) > > So, I guess 3.0.5 in Wheezy is safe :) I have verified this and indeed 3.0.5 in wheezy doesn't have HTTP2 support. I marked this as not-affected in the security tracker. Thanks! Emilio