[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Apache Update for 3.5 and 3.6?



On Fri, Oct 29, 2004 at 01:41:36PM -0400, Dan Harnett wrote:
> On Fri, Oct 29, 2004 at 10:07:02AM -0600, Gerardo Santana Gómez Garrido wrote:
> > On Fri, 29 Oct 2004 17:12:55 +0200, van Helsing <vh_(_at_)_helith_(_dot_)_net> wrote:
> > > I know some ppl. dislike that but: When will Apache be patched?
> > > 1.3.33 is out wich fixes some security related things.
> > > 
> > > Somebody told me OpenBSD-rewrite the patches to be sure they're released
> > > under the BSD-License (correct me if I'm wrong) so OpenBSD could also
> > > update the version-number if it includes the patches apache 1.3.33 has.
> > > 
> > > There no updates listed at the errata-website
> > > (http://www.openbsd.org/errata.html).
> > 
> > I'm curious about this too. My guess is that the fixes in question
> > (http://www.apache.org/dist/httpd/CHANGES_1.3) were already fixed in
> > tree. That would be cool ;-)
> 
> While I haven't checked the most recent patches for apache, the fixes
> that I have looked into were already in tree.  Some have been there well
> over a year.  The version number didn't seem to bother people back then.
> 
> Almost makes me wonder why anyone would want to run the stock apache.

ApacheWeek had a story quite some time ago about how none of the BSD's
or Linux distribs they checked out shipped a stock Apache.