But... there... was? Not too long ago? And it might require action by users of the Dropbox SDK? I get notifications of security updates for apache. Guess I

But... there... was? Not too long ago? And it might require action by users of the Dropbox SDK? I get notifications of security updates for apache. Guess I shouldn't though, because by the time I get any it's no longer a problem with apache. Maybe I should tell my security auditor that?