Apache 2.2.7?

[Xin Li]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 03/25/14 11:45, Matthias Andree wrote:
> Am 25.03.2014 19:22, schrieb Olli Hauer:
> 
>> The update is ready to push out but we have to wait for the
>> official upstream announcement ...
> 
> This is nonsense. The packages are downloadable, so is the
> changelog:
> 
> <http://apache.mirrors.lucidnetworks.net//httpd/CHANGES_2.2.27>
> 
> All the information is public. There is no reason to wait.

Technically it's only tagged but not yet "released":

	http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/STATUS

But no, I don't think we should wait, the tarball from Apache site
shows a good PGP signature from William A. Rowe, Jr. (9088F565) made
Thu Mar 13 13:47:45 2014 PDT, ~2 weeks ago.

Even if we don't want to take the risk of reroll, we should apply
r1576716 and r1576706 (probably also r1576709).

Cheers,
- -- 
Xin LI <delphij at delphij.net>    https://www.delphij.net/
FreeBSD - The Power to Serve!           Live free or die
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (FreeBSD)
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=0iEc
-----END PGP SIGNATURE-----