Re: Apache 2.4.39 in Buster ?
Hi,
On Tuesday, 2 April 2019 22:21:31 CEST Xavier wrote:
> New Apache 2.4.39 fixes many bugs (including 5 CVEs [1]) with only 2
> minor new features. Do you think it is a good idea to upgrade Apache
> version in Buster or do you prefer a 2.4.38 with 2.4.39 fixes (means
> 2.4.39 without ~2 commits) or only CVEs fixes ? I'll wait for your
> response before uploading to unstable.
The diff is quite large, especially with mod_http2. I guess only the CVE fixes
would be more appropriate.
Cheers,
Stefan
> [1]: http://www.apache.org/dist/httpd/CHANGES_2.4.39
Reply to: