Package: release.debian.org Severity: normal Hi all,
New Apache 2.4.39 fixes many bugs (including 5 CVEs [1]) with only 2 minor new features. Do you think it is a good idea to upgrade Apache version in Buster or do you prefer a 2.4.38 with 2.4.39 fixes (means 2.4.39 without ~2 commits) or only CVEs fixes ? I'll wait for your response before uploading to unstable. Cheers, Xavier [1]: http://www.apache.org/dist/httpd/CHANGES_2.4.39 -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (600, 'testing'), (50, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.14.0-3-amd64 (SMP w/2 CPU cores) Kernel taint flags: TAINT_WARN Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE= (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled