Pat,

I could verify that all the security fixes are included in the 2.2.15
update. But we have a customer requirement to use Apache 2.2.21.

  Dirce

> On 11/22/2011 03:39 PM, Dirce Richards wrote:
>> Thanks for your response.
>>
>>> Heho,
>>>> I am running Scientific Linux 6.0, which comes with Apache 2.2.15.
>>>> I need to upgrade it to 2.2.21.
>>> Please keep in mind that a manual installation will result in you
>>> having
>>> to keep track of security updates.
>> The reason for the upgrade is to pick up the security fixes in 2.2.21.
>>
> Are there any fixes present in 2.2.21 which are not present in
> httpd-2.2.15-9.sl6.3?
>
> Our beloved upstream vendor backports security fixes all the time.  I
> would be surprised if there was a meaningful security issue that they
> haven't brought back.  That is one of the things they pride themselves on.
>
> Pat
>
> --
> Pat Riehecky
> Scientific Linux Developer
>
>