On 2/5/14, 4:46 AM, Stefan Sperling wrote: > Yes, please contact them. Patches to fix these issues exist. > If downstream projects don't pick them up, then their users > should convince them to do so. > > Our time is better spent on problems we have not patched yet.
In this case they could simply update to httpd 2.2.26 which already includes the fixes.
