Pat, I could verify that all the security fixes are included in the 2.2.15 update. But we have a customer requirement to use Apache 2.2.21.
Dirce > On 11/22/2011 03:39 PM, Dirce Richards wrote: >> Thanks for your response. >> >>> Heho, >>>> I am running Scientific Linux 6.0, which comes with Apache 2.2.15. >>>> I need to upgrade it to 2.2.21. >>> Please keep in mind that a manual installation will result in you >>> having >>> to keep track of security updates. >> The reason for the upgrade is to pick up the security fixes in 2.2.21. >> > Are there any fixes present in 2.2.21 which are not present in > httpd-2.2.15-9.sl6.3? > > Our beloved upstream vendor backports security fixes all the time. I > would be surprised if there was a meaningful security issue that they > haven't brought back. That is one of the things they pride themselves on. > > Pat > > -- > Pat Riehecky > Scientific Linux Developer > >