Re:Surly this is just a formality (Score 5, Informative)

As per http://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x/README , the proposal (Full disclosure: I'm [e-mail] - the proposer), was that we would start distributing security patches via;

    http://www.apache.org/dist/httpd/patches/

The main point is to reduce the overhead and burden of creating full releases. Releases take a large amount of community involvement and time, and are becoming impractical. The 1.3.x branch does not even build on many modern platforms - for example the configure script is incompatible with dash and there is a getline() function which conflicts with a glibc neologism.

Hope that helps.