On Fri, May 26, 2017 at 1:37 AM, Adam Holt wrote:
> Just FYI...
>
> Apache 2.4.6 was released July ~19, 2013 (used by IIAB/XSCE 6.2 on CentOS).
>
> Apache 2.4.10 was released Jule ~19, 2014 (used by IIAB/XSCE 6.2 on
> Debian/Raspbian).
>
> Apache 2.4.25 was release Dec ~19,
No, that's the wrong approach.
Version numbers cannot be compared, because both CentOS and Debian
have backported later changes.
Instead, look at the change log for 2.4.25 and every prior version
back to the version you have, for changes that are important to you,
especially changes with a CVE
Just FYI...
Apache 2.4.6 was released July ~19, 2013 (used by IIAB/XSCE 6.2 on CentOS).
Apache 2.4.10 was released Jule ~19, 2014 (used by IIAB/XSCE 6.2 on
Debian/Raspbian).
Apache 2.4.25 was release Dec ~19, 2016...if anybody knows any particularly
important risks above that Internet-in-a-Box