Hi. I am working on debian servers and I noticed that when I check the
Debian repositories they list:
Unstable: 2.0-1
Testing: 2.0-1
Stable: 1.8.2-1Sarge1 [security]

When I look at the pound website at the bottom you have the versions
listed http://www.apsis.ch/pound/:

I see 2.0 as most recent stable version.

My question is, is the 1.8.2-1Sarge1 still ok to use? Looks like the
Debian managers put that in as a fix for some vulnerability. I read that
as anything prior to version 1.9.4??? By why os the debian stable
version not "standard" with the pound website version numbers?

What would be the advantage or risk to using the one out of testing? I
run a mixed version on some software already, so mixing is no problem
for me, but not sure of implications for pound functionality?

Am I missing something ont eh pound website or mailing list about
security releases/info? Is there an official place to watch for pound
vulnerabilities, etc? I just want to keep up to speed. I do keep the
mailing list on all the time, but don't read each message - any advice
to stay current?
Thanks,
Jamie


Jamie T. Robe
Automation Team Leader
The Planning Commission
(813) 272-5940
http://www.theplanningcommission.org

On 22 Mar 2006, at 2:58 AM, Jamie Robe wrote:[...]

Just to share our experience, we use 1.8.2-1Sarge1 (with one line  
commented out) in production with no problems. We had to comment out  
a line that dealt with the X-Forwarded-For header, as it was messing  
up our IP tracking, but I forget the rest of the details. Overall,  
Debian's 1.8.2 version is working out very well for us.

Ken