3 ms·
Isn't the whole point of announcing security patches so that people can update before they're exploited?
by jonas21 6y ago
Isn't the whole point of announcing security patches so that people can update before they're exploited?
- SilverRed 6y agoSure, I'm just saying this isn't a big deal and its likely no one was hit.
- aiisjustanif 6y agoJust because there is not an active threat doesn’t make it any less of a vulnerability to be exploited.
- lucb1e 6y agoIt does if nobody uses it. You can't exploit Apache 2.4.2 proxy bugs if nobody runs Apache 2.4.2 in proxy mode. Of course, you should still update because you're a config change away from being vulnerable, but GP's point of it not being a big deal if (and only if, don't know if that's correct) nobody uses it stands.