On May 5, 2017 13:32, "Jim Jagielski" <j...@jagunet.com> wrote:
+1... Lets do it. BTW, I would adjust #16 to include: Add the CVE to the CHANGES file. That way, it's still documented in CHANGES, just after the release is spun out, show it shows up in the next release's CHANGES. ... And if we follow through, the copy on httpd.a.o/dist/httpd/ (both 2.x and 2.x.y files) can be the annotated flavors. +1 from me.