| Author |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7373
Location: Germany, Next to Hamburg
|
 Posted: Sat 26 Sep '09 11:31 Post subject: Apache 2.2.14 |
 |
|
Hi Steffen,
2.2.14 will come out soon. Did you already compile it? |
|
| Back to top |
|
Steffen
Moderator
Joined: 15 Oct 2005
Posts: 3093
Location: Hilversum, NL, EU
|
| Posted: Sat 26 Sep '09 11:56 Post subject: |
|
|
Nope, planned it today and do first some testing.
Steffen |
|
| Back to top |
|
glsmith
Moderator
Joined: 16 Oct 2007
Posts: 2268
Location: Sun Diego, USA
|
| Posted: Sun 27 Sep '09 22:30 Post subject: |
|
|
| Something tells me this is not going to make release even tho they have the votes. I do not think the fact that mod_proxy_scgi does not have any build files for Windows will stop it, no, who cares about Windows but the Sun Studio bug just might. |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7373
Location: Germany, Next to Hamburg
|
| Posted: Sun 27 Sep '09 22:38 Post subject: |
|
|
I skimed only the 58 files for the vote from 2.2.14
isn't Günter Knauf working on it? Also the guy used an old version of openssl. Let's wait and see. |
|
| Back to top |
|
glsmith
Moderator
Joined: 16 Oct 2007
Posts: 2268
Location: Sun Diego, USA
|
| Posted: Sun 27 Sep '09 23:48 Post subject: |
|
|
The Sun Studio one? Yes he did. He also added the mod_proxy_scgi build for Netware post T&R. And yes, it is an old patched version of SSL. But look
Which brings to something sort of off topic and regards the plague of 2.2.5.
I've noticed how the Linux distro's get away with distributing Apache/other stuff even though the version has not be released ... they call it the old version and up their internal build number.
Look at Rudiger's (I think) RHEL's openssl version. I know he's not running around with a old vulnerable version ... RH just has patched their old version a few times to keep it current.
I think if the same or similar case that led AL to releasing 2.2.5 which caused big uproar, this would be the way to get away with it without a peep from ASF.
For example, since there are quite a few security related fixes in 2.2.14, just call it 2.2.13-02 or something similar and release should it not be released and takes another month or two to get a 2.2.15 release. |
|
| Back to top |
|
joy
Joined: 12 Jun 2006
Posts: 3
|
|
| Back to top |
|
