You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@apr.apache.org by tr...@apache.org on 2011/05/07 23:55:42 UTC
svn commit: r272 - in /release/apr: Announcement1.x.html Announcement1.x.txt
CHANGES-APR-1.4 CHANGES-APR-UTIL-1.3
Author: trawick
Date: Sat May 7 21:55:41 2011
New Revision: 272
Log:
updates to mirrored 1.4.3/1.3.11 docs
Modified:
release/apr/Announcement1.x.html
release/apr/Announcement1.x.txt
release/apr/CHANGES-APR-1.4
release/apr/CHANGES-APR-UTIL-1.3
Modified: release/apr/Announcement1.x.html
==============================================================================
--- release/apr/Announcement1.x.html (original)
+++ release/apr/Announcement1.x.html Sat May 7 21:55:41 2011
@@ -3,30 +3,27 @@
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<meta name="author" content="APR" /><meta name="email" content="dev@apr.apache.org" />
- <title>Apache Portable Runtime Utility 1.3.10 Released</title>
+ <title>Apache Portable Runtime 1.4.4 and Apache Portable Runtime Utility 1.3.11 Released</title>
</head>
<body bgcolor="#ffffff" text="#000000" link="#525D76">
<p><a href="http://apr.apache.org/"><img src="http://apr.apache.org/images/apr_logo_wide.png" alt="The Apache Portable Runtime Project" border="0"/></a></p>
<h1>
- Apache Portable Runtime Utility 1.3.10 Released
+ Apache Portable Runtime 1.4.4 and
+ Apache Portable Runtime Utility 1.3.11 Released
</h1>
<p>
- The Apache Software Foundation and the Apache Portable Runtime
- Project are proud to announce the General Availability of
- version 1.3.10 of the APR Apache Portable Runtime Utility library.
- This is a bug fix release and corrects several potential security
- vulnerabilities and other defects. Users of previous versions
- are strongly cautioned to update to this release.
+ The Apache Software Foundation and the Apache Portable Runtime
+ Project are proud to announce the General Availability of version
+ 1.4.4 of the APR Apache Portable Runtime library, and version
+ 1.3.11 of the APR Apache Portable Runtime Utility library.
+ These are bug fix releases. Users of previous versions are
+ are encouraged to update to these releases.
</p>
<p>
- (See CHANGES-APR-UTIL-1.3 for more information.)
-</p>
-
-<p>
- Version 1.4.2 of the Apache Portable Runtime remains current.
+ (See CHANGES-APR-1.4 and CHANGES-APR-UTIL-1.3 for more information.)
</p>
<p>
Modified: release/apr/Announcement1.x.txt
==============================================================================
--- release/apr/Announcement1.x.txt (original)
+++ release/apr/Announcement1.x.txt Sat May 7 21:55:41 2011
@@ -1,15 +1,14 @@
- Apache Portable Runtime Utility 1.3.10 Released
-
+ Apache Portable Runtime 1.4.4 and
+ Apache Portable Runtime Utility 1.3.11 Released
+
The Apache Software Foundation and the Apache Portable Runtime
- Project are proud to announce the General Availability of
- version 1.3.10 of the APR Apache Portable Runtime Utility library.
- This is a bug fix release and corrects several potential security
- vulnerabilities and other defects. Users of previous versions
- are strongly cautioned to update to this release.
-
- (See CHANGES-APR-UTIL-1.3 for more information.)
+ Project are proud to announce the General Availability of version
+ 1.4.4 of the APR Apache Portable Runtime library, and version
+ 1.3.11 of the APR Apache Portable Runtime Utility library.
+ These are bug fix releases. Users of previous versions are
+ are encouraged to update to these releases.
- Version 1.4.2 of the Apache Portable Runtime remains current.
+ (See CHANGES-APR-1.4 and CHANGES-APR-UTIL-1.3 for more information.)
Version 1.2.1 of the companion APR-iconv library, an alternative
portable implementation of the 'iconv' library, remains current.
Modified: release/apr/CHANGES-APR-1.4
==============================================================================
--- release/apr/CHANGES-APR-1.4 (original)
+++ release/apr/CHANGES-APR-1.4 Sat May 7 21:55:41 2011
@@ -1,7 +1,72 @@
-*- coding: utf-8 -*-
+Changes for APR 1.4.4
+
+ *) Windows: Fix command-line builds. [William Rowe]
+
+Changes for APR 1.4.3
+
+ *) Reimplement apr_fnmatch() from scratch using a non-recursive
+ algorithm; now has improved compliance with the fnmatch() spec.
+ [William Rowe]
+
+ *) Fix environment-related crash using some non-standard builds on
+ Windows 7/Server 2008. [Steve Hay <SteveHay planit.com>]
+
+ *) poll, pollset, pollcb on Windows: Handle calls with no file/socket
+ descriptors. PR 49882. [Stefan Ruppert <sr myarm.com>, Jeff Trawick]
+
+ *) Fix APR_IPV6_V6ONLY issues on Windows related to run-time behavior
+ on Windows older than Vista and SDK/MinGW levels without IPV6_V6ONLY.
+ PR 45321. [Sob <sob hisoftware.cz>]
+
+ *) Fix address handling when accepting an AF_INET socket from a socket
+ bound as AF_INET6. PR 49678. [Joe Orton]
+
+ *) Fix error return values from apr_sockaddr_info_get() on Windows for
+ IPv6 builds. [Ivan Zhakov <ivan visualsvn.com>]
+
+ *) Add new experimental configure option --enable-allocator-uses-mmap to
+ use mmap instead of malloc in apr_allocator_alloc(). This greatly reduces
+ memory fragmentation with malloc implementations (e.g. glibc) that
+ don't handle allocationss of a page-size-multiples in an efficient way.
+ It also makes apr_allocator_max_free_set() actually have some effect
+ on such platforms. [Stefan Fritsch]
+
+ *) configure: Support 64 and 32 bit universal builds for Darwin/
+ OS X 10.6+. [Jim Jagielski]
+
+ *) apr_sockaddr_info_get() on AIX: Fix a problem which could set
+ the port field in the native socket address to 1 when 0 was
+ specified. PR 46964. [Jeff Trawick]
+
+ *) configure: Make definition of apr_ino_t independent of
+ _FILE_OFFSET_BITS even on platforms where ino_t is 'unsigned int'.
+ [Stefan Fritsch]
+
+ *) apr_ring: Workaround for aliasing problem that causes gcc 4.5 to
+ miscompile some brigade related code. PR 50190. [Stefan Fritsch]
+
+ *) apr_file_flush_locked(): Handle short writes. [Stefan Fritsch]
+
+ *) apr_pollset_create_ex(): Trap errors from pollset providers.
+ PR 49094. [Sami Tolvanen <sami.tolvanen mywot.com>]
+
+ *) apr_pollset_create*(): Fix memory lifetime problem with the wakeup
+ pipe when the pollset was created with APR_POLLSET_NOCOPY.
+ [Neil Conway <nrc cs.berkeley.edu>]
+
+ *) Fix detection of some Linux variants when configure is built with
+ recent GNU tools. [Eric Covener]
+
+ *) Avoid a redundant fcntl() call in apr_file_open() where O_CLOEXEC
+ is supported. PR 46297. [Joe Orton]
+
+ *) Improve platform detection by updating config.guess and config.sub.
+ [Rainer Jung]
+
Changes for APR 1.4.2
- *) Undo a crash-bug introduced in 1.3.9 affecting some applications of
+ *) Undo a crash-bug introduced in 1.4.1 affecting some applications of
the apr hash and table structures, reported to affect Subversion
by Bert Huijben <bert qqmail.nl>. [Graham Leggett]
@@ -12,6 +77,8 @@
Changes for APR 1.4.0
+ *) Windows: Default build configurations assume NT or higher at run-time.
+
*) Add apr_global_mutex_lockfile() for retrieving the file, if any,
associated with the mutex. Add apr_global_mutex_name() for retrieving
the name of the lock mechanism used by the underlying proc mutex.
@@ -26,6 +93,9 @@
choosing non-default providers.
[Mladen Turk]
+ *) Win32: Use WSAPoll as default pollset method if supported and found
+ inside winsock dll. [Mladen Turk]
+
*) apr_temp_dir_get() now checks the TMPDIR environment variable first,
instead of third. [Jim Jagielski]
Modified: release/apr/CHANGES-APR-UTIL-1.3
==============================================================================
--- release/apr/CHANGES-APR-UTIL-1.3 (original)
+++ release/apr/CHANGES-APR-UTIL-1.3 Sat May 7 21:55:41 2011
@@ -1,326 +1,342 @@
- -*- coding: utf-8 -*-
-Changes with APR-util 1.3.10
-
- *) SECURITY: CVE-2010-1623 (cve.mitre.org)
- Fix a denial of service attack against apr_brigade_split_line().
- [Stefan Fritsch]
-
- *) SECURITY: CVE-2009-3560, CVE-2009-3720 (cve.mitre.org)
- Fix two buffer over-read flaws in the bundled copy of expat which
- could cause applications to crash while parsing specially-crafted
- XML documents. [Joe Orton]
-
- *) Upgrade bundled copy of expat library to 1.95.7. [Joe Orton]
-
- *) apr_thread_pool: Fix some potential deadlock situations. PR 49709.
- [Joe Mudd <Joe.Mudd sas.com>]
-
- *) apr_thread_pool_create: Fix pool corruption caused by multithreaded
- use of the pool when multiple initial threads are created. PR 47843.
- [Alex Korobka <akorobka fxcm.com>]
-
- *) apr_thread_pool_create(): Only set the output thread pool handle on
- success. [Paul Querna]
-
- *) DBD ODBC support: Fix memory corruption using apr_dbd_datum_get() with
- several different data types, including APR_DBD_TYPE_TIME. PR 49645.
- [<kappa psilambda.com>]
-
- *) Add support for Berkeley DB 4.8 and 5.0. PR 49866, PR 49179.
- [Bernhard Rosenkraenzer <br blankpage.ch>,
- Arfrever Frehtes Taifersar Arahesis <arfrever.fta gmail.com>]
-
- *) Make bundled expat compatible with libtool 2.x. PR 49053.
- [Rainer Jung]
-
- *) Prefer libtool 1.x when searching for libtool in
- bundled expat release process. [Rainer Jung, Jim Jagielski]
-
- *) Improve platform detection for bundled expat by updating
- config.guess and config.sub. [Rainer Jung]
-
-Changes with APR-util 1.3.9
-
- *) SECURITY: CVE-2009-2412 (cve.mitre.org)
- Fix overflow in rmm, where size alignment was taking place.
- [Matt Lewis <ma...@google.com>, Sander Striker]
-
- *) Make sure that "make check" is used in the RPM spec file, so that
- the crypto, dbd and dbm tests pass. [Graham Leggett]
-
- *) Make sure the mysql version of dbd_mysql_get_entry() respects the
- rule that if the column number exceeds the number of columns, we
- return NULL. [Graham Leggett]
-
- *) Ensure the dbm module is packaged up correctly in the RPM.
- [Graham Leggett]
-
- *) Clarify the error messages within the dbd tests. [Graham Leggett]
-
-Changes with APR-util 1.3.8
-
- *) Use locally scoped variables in PostgreSQL driver to avoid stomping
- on return codes. PR 47431
- [Wayne Jensen <wayne_jensen trendmicro.com>]
-
- *) Fix race conditions in initialisation of DBD, DBM and DSO.
- [Bojan Smojver]
-
- *) Expose DBM libs in apu-1-config by default. To avoid that, use
- apu-1-config --avoid-dbm --libs. To get just DBM libs, use
- apu-1-config --dbm-libs.
- [Bojan Smojver]
-
- *) Make sure --without-ldap works.
- [Arfrever Frehtes Taifersar Arahesis <arfrever.fta gmail.com>]
-
-Changes with APR-util 1.3.7
-
- *) SECURITY: CVE-2009-1955 (cve.mitre.org)
- Fix a denial of service attack against the apr_xml_* interface
- using the "billion laughs" entity expansion technique.
- [Joe Orton]
-
-Changes with APR-util 1.3.6
-
- *) Minor build and bug fixes.
-
-Changes with APR-util 1.3.5
-
- *) SECURITY: CVE-2009-0023 (cve.mitre.org)
- Fix underflow in apr_strmatch_precompile.
- [Matthew Palmer <mpalmer debian.org>]
-
- *) SECURITY: CVE-2009-1956 (cve.mitre.org)
- Fix off by one overflow in apr_brigade_vprintf.
- [C. Michael Pilato <cmpilato collab.net>]
-
- *) APR_LDAP_SIZELIMIT should prefer LDAP_DEFAULT_LIMIT/-1 when the
- SDK supports it, but in the absence of LDAP_DEFAULT_LIMIT (and
- LDAP_NO_LIMIT/0) it is not safe to use a literal -1.
- PR23356 [Eric Covener]
-
- *) Clean up ODBC types. Warnings seen when compiling packages for
- Fedora 11. [Bojan Smojver]
-
- *) Use of my_init() requires my_global.h and my_sys.h.
- [Bojan Smojver]
-
- *) Fix apr_memcache_multgetp memory corruption and incorrect error
- handling. PR 46588 [Sami Tolvanen <sami.tolvanen mywot.com>]
-
- *) Fix memcache memory leak with persistent connections.
- PR 46482 [Sami Tolvanen <sami.tolvanen mywot.com>]
-
- *) Add Oracle 11 support. [Bojan Smojver]
-
- *) apr_dbd_freetds: Avoid segfault when process is NULL.
- Do no print diagnostics to stderr. Never allow driver to exit
- process. [Bojan Smojver]
-
- *) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
- or sybdb.h. [Graham Leggett]
-
- *) LDAP detection improvements: --with-ldap now supports library names
- containing non-alphanumeric characters, such as libldap-2.4.so. New
- option --with-lber can be used to override the default liblber name.
- Fix a problem reporting the lber library from apu-N-config.
- [Jeff Trawick]
-
- *) Suppress pgsql column-out-of-range warning.
- PR 46012 [Michiel van Loon <michiel van-loon.xs4all.nl>]
-
- *) Fix a buffer overrun and password matching for SHA passwords.
- PR 45679 [Ben Noordhuis <bnoordhuis gmail.com>]
-
- *) Introduce DSO handling of the db, gdbm and ndbm drivers, so these are
- loaded as .so's on first demand, unless --disable-util-dso is configured.
- [William Rowe]
-
- *) Fix a segfault in the DBD testcase when the DBD modules were not present.
- [Graham Leggett]
-
-Changes with APR-util 1.3.4
-
- *) Fix a memory leak introduced in r683756 and a free call to a non malloced
- pointer in the case that the platform has no threads.
- [Jeff Trawick, Ruediger Pluem]
-
-Changes with APR-util 1.3.3
-
- *) Add Berkeley DB 4.7 support.
- [Arfrever Frehtes Taifersar Arahesis <arfrever.fta gmail.com>]
-
- *) PostgreSQL rows (internally) start from zero, not one. Account for it in
- row fetching function. [Bojan Smojver]
-
- *) Detection of PostgreSQL may fail if LIBS contains all libs returned by
- pg_config. Use it only as the last resort. [Bojan Smojver]
-
- *) When searching for DSOs, look in apr-util-APU_MAJOR_VERSION subdirectory
- of each component of APR_DSOPATH. PR 45327
- [Joe Orton, William Rowe, Bojan Smojver]
-
- *) Give MySQL DBD driver reconnect option. PR 45407
- [Bojan Smojver]
-
-Changes with APR-util 1.3.2
-
- *) Fix parameter parsing error in ODBC DBD driver. [Tom Donovan]
-
- *) Older OpenLDAP implementations may have ldap_set_rebind_proc() with two
- args. Provide detection code and alternative implementation.
- [Ruediger Pluem]
-
- *) Use pool memory when setting DBD driver name into the hash.
- [Bojan Smojver]
-
-Changes with APR-util 1.3.1
-
- *) Add ODBC DBD Driver. [Tom Donovan]
-
- *) Fix build of the FreeTDS and MySQL drivers. [Bojan Smojver]
-
- *) Fix build failure for no modules (--disable-dso). [Jean-Frederic Clere]
-
- *) Fix win32 build failure for no modules (empty DBD_LIST). [William Rowe]
-
-Changes with APR-util 1.3.0
-
- *) apr_reslist: destroy all resources in apr_cleanup (don't give up on error).
- PR 45086 [Nick Kew]
-
- *) Add apr_brigade_split_ex for reusing existing brigades in situation where
- brigades need to be split often during the lifetime of a pool.
- [Ruediger Pluem]
-
- *) Amend apr_reslist to expire resources whose idle time exceeds ttl.
- PR 42841 [Tom Donovan, Nick Kew, Ruediger Pluem]
-
- *) Modularize ldap's stub with the dbd dso modular structure, and teach
- the apu dso's to respect the system specific shared lib path var.
- To link to an application without ldap libs, query
- `apu-1-config --avoid-ldap --libs` (in addition to the usual linker
- queries for compiling and linking). [William Rowe]
-
- *) Support building DBD drivers as DSOs by default; use --disable-util-dso
- flag to configure to use static link. [Joe Orton, Bojan Smojver]
-
- *) All DBD drivers now count rows from 1, which affects PostgreSQL and MySQL
- drivers in particular. Using row number zero is an error.
- [Bojan Smojver]
-
- *) Add support for OpenLDAP's ability to support a directory of
- certificate authorities. [Eric Covener]
-
- *) Better error detection for bucket allocation failures.
- [Jim Jagielski]
-
- *) Ensure that the LDAP code can compile cleanly on platforms that do
- not define the LDAP_OPT_REFHOPLIMIT symbol, most specifically Windows.
- [Victor <vi...@gmail.com>, Graham Leggett]
-
- *) Fix the setting of LDAP_OPT_SSL on Win2k, which expects a pointer to
- the value LDAP_OPT_ON, and not the value itself. XP works with both.
- [Victor <vi...@gmail.com>]
-
- *) Fix a regression in apr_brigade_partition that causes integer overflows
- on systems where apr_off_t > apr_size_t. [Ruediger Pluem]
-
- *) Ensure that apr_uri_unparse does not add scheme to URI if
- APR_URI_UNP_OMITSITEPART flag is set. PR 44044
- [Michael Clark <michael metaparadigm.com>]
-
- *) Add an LDAP rebind implementation so that authentication can be
- carried through referrals. [Paul J. Reder]
-
- *) Fix the make test target in the spec file. [Graham Leggett]
-
- *) Introduce apr_dbd_open_ex() [Bojan Smojver]
-
- *) Make md5 hash files portable between EBCDIC and ASCII platforms
- [David Jones]
-
- *) Add limited apr_dbd_freetds driver (MSSQL and Sybase) [Nick Kew]
-
- *) Commit relicensed apr_dbd_mysql driver to /trunk/ [Nick Kew]
-
- *) Support BerkeleyDB 4.6. [Arfrever Frehtes Taifersar Arahesis]
-
- *) Support Tivoli ITDS LDAP client library. [Paul Reder]
-
- *) Portably implement testdate's long-time constants to solve
- compilation faults where #LL isn't valid. [Curt Arnold]
-
- *) Use buffered I/O with SDBM. [Joe Schaefer]
-
- *) Unify parsing of prepared statements and add binary argument functions
- to DBD [Bojan Smojver with help from many on the APR list]
-
- *) Rewrite detection of expat in configure to fix build on e.g. biarch
- Linux platforms. PR 28205. [Joe Orton]
-
- *) Add apr_thread_pool implementation. [Henry Jen <henryjen ztune.net>]
-
- *) Add support for Berkeley DB 4.5 to the configure scripts.
- [Garrett Rooney]
-
- *) Allow apr_queue.h to be included before other APR headers.
- PR 40891 [Henry Jen <henryjen ztune.net>]
-
- *) Fix precedence problem in error checking for sdbm dbm back end.
- PR 40659 [Larry Cipriani <lvc lucent.com>]
-
- *) Add an apr_reslist_acquired_count, for determining how many outstanding
- resources there are in a reslist. [Ryan Phillips <ryan trolocsis.com>]
-
- *) Provide folding in autogenerated .manifest files for Win32 builders
- using VisualStudio 2005 [William Rowe]
-
- *) Implement DBD transaction modes
- [Bojan Smojver with help from many on the APR list]
-
- *) Implement prepared statement support in SQLite3 DBD driver
- [Bojan Smojver]
-
- *) Add get (column) name to apr_dbd API
- [Bojan Smojver <bojan rexursive.com>] and
- [Chris Darroch <chrisd pearsoncmg com>]
-
- *) Make the DBD autoconf-glue use LDFLAGS instead of LIBS in several
- places, fixing some configure issues on Solaris.
- [Henry Jen <henryjen ztune.net>]
-
- *) Make apr_dbd.h work as a stand alone header, without needing other
- files to be included before it. [Henry Jen <henryjen ztune.net>]
-
- *) On platforms that use autoconf stop automatically linking against
- apr-iconv when an apr-iconv source dir is found in ../apr-iconv.
- Instead, add a --with-apr-iconv option to configure that lets you
- specify the relative path to your apr-iconv source directory.
- [Garrett Rooney]
-
- *) APR_FIND_APU macro now supports customisable detailed checks on
- each installed apr-util. [Justin Erenkrantz, Colm MacCárthaigh]
-
- *) APR_FIND_APU macro no longer checks /usr/local/apache2/
- [Colm MacCárthaigh]
-
- *) Add apr_dbd_oracle driver [Nick Kew and Chris Darroch]
-
-
-Changes for APR-util 1.2.x and later:
-
- *) http://svn.apache.org/viewvc/apr/apr-util/branches/1.2.x/CHANGES?view=markup
-
-Changes for APR-util 1.1.x and later:
-
- *) http://svn.apache.org/viewvc/apr/apr-util/branches/1.1.x/CHANGES?view=markup
-
-Changes for APR-util 1.0.x and later:
-
- *) http://svn.apache.org/viewvc/apr/apr-util/branches/1.0.x/CHANGES?view=markup
-
-Changes for APR-util 0.9.x and later/earlier:
-
- *) http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/CHANGES?view=markup
+ -*- coding: utf-8 -*-
+Changes with APR-util 1.3.11
+
+ *) apr_dbd_oracle: fix endianness issue in prepared statements.
+ PR 50690. [Stefan Ruppert <sr myarm.com>]
+
+ *) apr_ldap: resolve possible hangs or crashes when the pool passed
+ to apr_ldap_rebind_init() is cleaned up and apr_ldap_rebind
+ is re-initted and re-used. PR50918. [Eric Covener]
+
+ *) DBD ODBC support: Fix stack buffer overwrite when an unexpected
+ number of parameters is passed to open. Fix range checking of the
+ APR DBD type enum passed to some of the APIs. [Jeff Trawick]
+
+ *) Add support for Berkeley DB 5.1.
+ [Rainer Jung]
+
+Changes with APR-util 1.3.10
+
+ *) SECURITY: CVE-2010-1623 (cve.mitre.org)
+ Fix a denial of service attack against apr_brigade_split_line().
+ [Stefan Fritsch]
+
+ *) SECURITY: CVE-2009-3560, CVE-2009-3720 (cve.mitre.org)
+ Fix two buffer over-read flaws in the bundled copy of expat which
+ could cause applications to crash while parsing specially-crafted
+ XML documents. [Joe Orton]
+
+ *) Upgrade bundled copy of expat library to 1.95.7. [Joe Orton]
+
+ *) apr_thread_pool: Fix some potential deadlock situations. PR 49709.
+ [Joe Mudd <Joe.Mudd sas.com>]
+
+ *) apr_thread_pool_create: Fix pool corruption caused by multithreaded
+ use of the pool when multiple initial threads are created. PR 47843.
+ [Alex Korobka <akorobka fxcm.com>]
+
+ *) apr_thread_pool_create(): Only set the output thread pool handle on
+ success. [Paul Querna]
+
+ *) DBD ODBC support: Fix memory corruption using apr_dbd_datum_get() with
+ several different data types, including APR_DBD_TYPE_TIME. PR 49645.
+ [<kappa psilambda.com>]
+
+ *) Add support for Berkeley DB 4.8 and 5.0. PR 49866, PR 49179.
+ [Bernhard Rosenkraenzer <br blankpage.ch>,
+ Arfrever Frehtes Taifersar Arahesis <arfrever.fta gmail.com>]
+
+ *) Make bundled expat compatible with libtool 2.x. PR 49053.
+ [Rainer Jung]
+
+ *) Prefer libtool 1.x when searching for libtool in
+ bundled expat release process. [Rainer Jung, Jim Jagielski]
+
+ *) Improve platform detection for bundled expat by updating
+ config.guess and config.sub. [Rainer Jung]
+
+Changes with APR-util 1.3.9
+
+ *) SECURITY: CVE-2009-2412 (cve.mitre.org)
+ Fix overflow in rmm, where size alignment was taking place.
+ [Matt Lewis <ma...@google.com>, Sander Striker]
+
+ *) Make sure that "make check" is used in the RPM spec file, so that
+ the crypto, dbd and dbm tests pass. [Graham Leggett]
+
+ *) Make sure the mysql version of dbd_mysql_get_entry() respects the
+ rule that if the column number exceeds the number of columns, we
+ return NULL. [Graham Leggett]
+
+ *) Ensure the dbm module is packaged up correctly in the RPM.
+ [Graham Leggett]
+
+ *) Clarify the error messages within the dbd tests. [Graham Leggett]
+
+Changes with APR-util 1.3.8
+
+ *) Use locally scoped variables in PostgreSQL driver to avoid stomping
+ on return codes. PR 47431
+ [Wayne Jensen <wayne_jensen trendmicro.com>]
+
+ *) Fix race conditions in initialisation of DBD, DBM and DSO.
+ [Bojan Smojver]
+
+ *) Expose DBM libs in apu-1-config by default. To avoid that, use
+ apu-1-config --avoid-dbm --libs. To get just DBM libs, use
+ apu-1-config --dbm-libs.
+ [Bojan Smojver]
+
+ *) Make sure --without-ldap works.
+ [Arfrever Frehtes Taifersar Arahesis <arfrever.fta gmail.com>]
+
+Changes with APR-util 1.3.7
+
+ *) SECURITY: CVE-2009-1955 (cve.mitre.org)
+ Fix a denial of service attack against the apr_xml_* interface
+ using the "billion laughs" entity expansion technique.
+ [Joe Orton]
+
+Changes with APR-util 1.3.6
+
+ *) Minor build and bug fixes.
+
+Changes with APR-util 1.3.5
+
+ *) SECURITY: CVE-2009-0023 (cve.mitre.org)
+ Fix underflow in apr_strmatch_precompile.
+ [Matthew Palmer <mpalmer debian.org>]
+
+ *) SECURITY: CVE-2009-1956 (cve.mitre.org)
+ Fix off by one overflow in apr_brigade_vprintf.
+ [C. Michael Pilato <cmpilato collab.net>]
+
+ *) APR_LDAP_SIZELIMIT should prefer LDAP_DEFAULT_LIMIT/-1 when the
+ SDK supports it, but in the absence of LDAP_DEFAULT_LIMIT (and
+ LDAP_NO_LIMIT/0) it is not safe to use a literal -1.
+ PR23356 [Eric Covener]
+
+ *) Clean up ODBC types. Warnings seen when compiling packages for
+ Fedora 11. [Bojan Smojver]
+
+ *) Use of my_init() requires my_global.h and my_sys.h.
+ [Bojan Smojver]
+
+ *) Fix apr_memcache_multgetp memory corruption and incorrect error
+ handling. PR 46588 [Sami Tolvanen <sami.tolvanen mywot.com>]
+
+ *) Fix memcache memory leak with persistent connections.
+ PR 46482 [Sami Tolvanen <sami.tolvanen mywot.com>]
+
+ *) Add Oracle 11 support. [Bojan Smojver]
+
+ *) apr_dbd_freetds: Avoid segfault when process is NULL.
+ Do no print diagnostics to stderr. Never allow driver to exit
+ process. [Bojan Smojver]
+
+ *) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
+ or sybdb.h. [Graham Leggett]
+
+ *) LDAP detection improvements: --with-ldap now supports library names
+ containing non-alphanumeric characters, such as libldap-2.4.so. New
+ option --with-lber can be used to override the default liblber name.
+ Fix a problem reporting the lber library from apu-N-config.
+ [Jeff Trawick]
+
+ *) Suppress pgsql column-out-of-range warning.
+ PR 46012 [Michiel van Loon <michiel van-loon.xs4all.nl>]
+
+ *) Fix a buffer overrun and password matching for SHA passwords.
+ PR 45679 [Ben Noordhuis <bnoordhuis gmail.com>]
+
+ *) Introduce DSO handling of the db, gdbm and ndbm drivers, so these are
+ loaded as .so's on first demand, unless --disable-util-dso is configured.
+ [William Rowe]
+
+ *) Fix a segfault in the DBD testcase when the DBD modules were not present.
+ [Graham Leggett]
+
+Changes with APR-util 1.3.4
+
+ *) Fix a memory leak introduced in r683756 and a free call to a non malloced
+ pointer in the case that the platform has no threads.
+ [Jeff Trawick, Ruediger Pluem]
+
+Changes with APR-util 1.3.3
+
+ *) Add Berkeley DB 4.7 support.
+ [Arfrever Frehtes Taifersar Arahesis <arfrever.fta gmail.com>]
+
+ *) PostgreSQL rows (internally) start from zero, not one. Account for it in
+ row fetching function. [Bojan Smojver]
+
+ *) Detection of PostgreSQL may fail if LIBS contains all libs returned by
+ pg_config. Use it only as the last resort. [Bojan Smojver]
+
+ *) When searching for DSOs, look in apr-util-APU_MAJOR_VERSION subdirectory
+ of each component of APR_DSOPATH. PR 45327
+ [Joe Orton, William Rowe, Bojan Smojver]
+
+ *) Give MySQL DBD driver reconnect option. PR 45407
+ [Bojan Smojver]
+
+Changes with APR-util 1.3.2
+
+ *) Fix parameter parsing error in ODBC DBD driver. [Tom Donovan]
+
+ *) Older OpenLDAP implementations may have ldap_set_rebind_proc() with two
+ args. Provide detection code and alternative implementation.
+ [Ruediger Pluem]
+
+ *) Use pool memory when setting DBD driver name into the hash.
+ [Bojan Smojver]
+
+Changes with APR-util 1.3.1
+
+ *) Add ODBC DBD Driver. [Tom Donovan]
+
+ *) Fix build of the FreeTDS and MySQL drivers. [Bojan Smojver]
+
+ *) Fix build failure for no modules (--disable-dso). [Jean-Frederic Clere]
+
+ *) Fix win32 build failure for no modules (empty DBD_LIST). [William Rowe]
+
+Changes with APR-util 1.3.0
+
+ *) apr_reslist: destroy all resources in apr_cleanup (don't give up on error).
+ PR 45086 [Nick Kew]
+
+ *) Add apr_brigade_split_ex for reusing existing brigades in situation where
+ brigades need to be split often during the lifetime of a pool.
+ [Ruediger Pluem]
+
+ *) Amend apr_reslist to expire resources whose idle time exceeds ttl.
+ PR 42841 [Tom Donovan, Nick Kew, Ruediger Pluem]
+
+ *) Modularize ldap's stub with the dbd dso modular structure, and teach
+ the apu dso's to respect the system specific shared lib path var.
+ To link to an application without ldap libs, query
+ `apu-1-config --avoid-ldap --libs` (in addition to the usual linker
+ queries for compiling and linking). [William Rowe]
+
+ *) Support building DBD drivers as DSOs by default; use --disable-util-dso
+ flag to configure to use static link. [Joe Orton, Bojan Smojver]
+
+ *) All DBD drivers now count rows from 1, which affects PostgreSQL and MySQL
+ drivers in particular. Using row number zero is an error.
+ [Bojan Smojver]
+
+ *) Add support for OpenLDAP's ability to support a directory of
+ certificate authorities. [Eric Covener]
+
+ *) Better error detection for bucket allocation failures.
+ [Jim Jagielski]
+
+ *) Ensure that the LDAP code can compile cleanly on platforms that do
+ not define the LDAP_OPT_REFHOPLIMIT symbol, most specifically Windows.
+ [Victor <vi...@gmail.com>, Graham Leggett]
+
+ *) Fix the setting of LDAP_OPT_SSL on Win2k, which expects a pointer to
+ the value LDAP_OPT_ON, and not the value itself. XP works with both.
+ [Victor <vi...@gmail.com>]
+
+ *) Fix a regression in apr_brigade_partition that causes integer overflows
+ on systems where apr_off_t > apr_size_t. [Ruediger Pluem]
+
+ *) Ensure that apr_uri_unparse does not add scheme to URI if
+ APR_URI_UNP_OMITSITEPART flag is set. PR 44044
+ [Michael Clark <michael metaparadigm.com>]
+
+ *) Add an LDAP rebind implementation so that authentication can be
+ carried through referrals. [Paul J. Reder]
+
+ *) Fix the make test target in the spec file. [Graham Leggett]
+
+ *) Introduce apr_dbd_open_ex() [Bojan Smojver]
+
+ *) Make md5 hash files portable between EBCDIC and ASCII platforms
+ [David Jones]
+
+ *) Add limited apr_dbd_freetds driver (MSSQL and Sybase) [Nick Kew]
+
+ *) Commit relicensed apr_dbd_mysql driver to /trunk/ [Nick Kew]
+
+ *) Support BerkeleyDB 4.6. [Arfrever Frehtes Taifersar Arahesis]
+
+ *) Support Tivoli ITDS LDAP client library. [Paul Reder]
+
+ *) Portably implement testdate's long-time constants to solve
+ compilation faults where #LL isn't valid. [Curt Arnold]
+
+ *) Use buffered I/O with SDBM. [Joe Schaefer]
+
+ *) Unify parsing of prepared statements and add binary argument functions
+ to DBD [Bojan Smojver with help from many on the APR list]
+
+ *) Rewrite detection of expat in configure to fix build on e.g. biarch
+ Linux platforms. PR 28205. [Joe Orton]
+
+ *) Add apr_thread_pool implementation. [Henry Jen <henryjen ztune.net>]
+
+ *) Add support for Berkeley DB 4.5 to the configure scripts.
+ [Garrett Rooney]
+
+ *) Allow apr_queue.h to be included before other APR headers.
+ PR 40891 [Henry Jen <henryjen ztune.net>]
+
+ *) Fix precedence problem in error checking for sdbm dbm back end.
+ PR 40659 [Larry Cipriani <lvc lucent.com>]
+
+ *) Add an apr_reslist_acquired_count, for determining how many outstanding
+ resources there are in a reslist. [Ryan Phillips <ryan trolocsis.com>]
+
+ *) Provide folding in autogenerated .manifest files for Win32 builders
+ using VisualStudio 2005 [William Rowe]
+
+ *) Implement DBD transaction modes
+ [Bojan Smojver with help from many on the APR list]
+
+ *) Implement prepared statement support in SQLite3 DBD driver
+ [Bojan Smojver]
+
+ *) Add get (column) name to apr_dbd API
+ [Bojan Smojver <bojan rexursive.com>] and
+ [Chris Darroch <chrisd pearsoncmg com>]
+
+ *) Make the DBD autoconf-glue use LDFLAGS instead of LIBS in several
+ places, fixing some configure issues on Solaris.
+ [Henry Jen <henryjen ztune.net>]
+
+ *) Make apr_dbd.h work as a stand alone header, without needing other
+ files to be included before it. [Henry Jen <henryjen ztune.net>]
+
+ *) On platforms that use autoconf stop automatically linking against
+ apr-iconv when an apr-iconv source dir is found in ../apr-iconv.
+ Instead, add a --with-apr-iconv option to configure that lets you
+ specify the relative path to your apr-iconv source directory.
+ [Garrett Rooney]
+
+ *) APR_FIND_APU macro now supports customisable detailed checks on
+ each installed apr-util. [Justin Erenkrantz, Colm MacCárthaigh]
+
+ *) APR_FIND_APU macro no longer checks /usr/local/apache2/
+ [Colm MacCárthaigh]
+
+ *) Add apr_dbd_oracle driver [Nick Kew and Chris Darroch]
+
+
+Changes for APR-util 1.2.x and later:
+
+ *) http://svn.apache.org/viewvc/apr/apr-util/branches/1.2.x/CHANGES?view=markup
+
+Changes for APR-util 1.1.x and later:
+
+ *) http://svn.apache.org/viewvc/apr/apr-util/branches/1.1.x/CHANGES?view=markup
+
+Changes for APR-util 1.0.x and later:
+
+ *) http://svn.apache.org/viewvc/apr/apr-util/branches/1.0.x/CHANGES?view=markup
+
+Changes for APR-util 0.9.x and later/earlier:
+
+ *) http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/CHANGES?view=markup