On Fri, Dec 16, 2016 at 12:29 PM, Jim Jagielski <j...@jagunet.com> wrote:
> At long, long last, the pre-release test tarballs for Apache httpd > version 2.4.25 can be found at the usual place: > > http://httpd.apache.org/dev/dist/ > > I'm calling a VOTE on releasing these as Apache httpd 2.4.25 GA. > Regressions noted; Build fails at mod_socache_memcache.mak on Windows command line 'nmake' invocation, fixed in 2.4.x branch with r1774650. GUI build of Windows works; cmake-provisioned build works, in light of security fixes, decided this won't-fix defect, is not a showstopper. +1 for httpd-2.4.25.tar.gz release. httpd-2.4.25/srclib/apr-util/xml/expat contains Expat 1.95.7. For reference, 2.0 derived from 1.95.8 final, which was not a security release. 2.1.0, 2.1.1 and 2.2.0 have resolved a significant number of security defects, noted here; http://expat.sourceforge.net/ Note apr-util-1.6.x branch (and apr-trunk) no longer bundles any expat sources. -1 to distribute httpd-2.4.25-deps.tar.gz from httpd.
