Re: CVS commit: pkgsrc/www/apache2

[Joerg Sonnenberger <joerg%britannica.bec.de@localhost>]

On Sat, Jun 21, 2008 at 09:44:40PM +0200, Havard Eidnes wrote:
> > PKGREVISION marked in Makefile.common.
> > This means bump both apache2 and apr0.
> > Does it really need to update both packages to fix CVE-2008-2364?
> 
> Wupps, maybe not.  But I guess it would be bad to down-number?

Please don't decrease the version, but make sure that both packages have
PKGREVISION in the main Makefile. Makefile.common should *never* contain
PKGREVISION.

Joerg