The Apache Haus Forum

Forum Topics => Apache 2.4 => Topic started by: rste on October 05, 2017, 03:07:25 PM

Title: Update Policy
Post by: rste on October 05, 2017, 03:07:25 PM
Hello,

Is there any official update policy for rebuilding newer Apache versions? Are you updating in specific time intervals or at specific events? I am missing 2.4.28 currently as a remedy to CVE-2017-9798.

Best Regards,
Ruben
Title: Re: Update Policy
Post by: Gregg on October 05, 2017, 05:40:16 PM
No, I usually try to get new releases out the day the source files are released. When there is any question if any one version is going to release I hold off until I know for sure.

There is a 72 hour build, test, and voting period first. This one was questionable from the first day. I've had to throw away builds before because they failed the vote and I don't like wasting my time building 8 different builds of any one release if it's going to fail. This one took over 6 days to decide to release.

I ran into problems building on all 3 VC flavors so it's taken longer than usual but they'll be online this afternoon my time.