[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Apache 2.4.39 in Buster ?


On Tuesday, 2 April 2019 22:21:31 CEST Xavier wrote:
> New Apache 2.4.39 fixes many bugs (including 5 CVEs [1]) with only 2
> minor new features. Do you think it is a good idea to upgrade Apache
> version in Buster or do you prefer a 2.4.38 with 2.4.39 fixes (means
> 2.4.39 without ~2 commits) or only CVEs fixes ? I'll wait for your
> response before uploading to unstable.

The diff is quite large, especially with mod_http2. I guess only the CVE fixes  
would be more appropriate. 


> [1]: http://www.apache.org/dist/httpd/CHANGES_2.4.39

Reply to: