You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@apr.apache.org by "William A. Rowe, Jr." <wr...@rowe-clan.net> on 2009/05/21 21:59:06 UTC
Time for APR 1.3 releases?
Folks, I'd like to cut a tarball in the next day, two tops, since the
httpd folks are suggesting they are waiting patiently for a release.
If you want to grab any safe, low risk low hanging fruit, have at it.
Bill
Re: Time for APR 1.3 releases?
Posted by Bojan Smojver <bo...@rexursive.com>.
On Thu, 2009-05-21 at 17:59 -0400, Jeff Trawick wrote:
> for sure
OK, shall merge to 1.3.x and 1.4.x. Not sure if it's required for 0.9.x.
Will have a look.
--
Bojan
Re: Time for APR 1.3 releases?
Posted by Jeff Trawick <tr...@gmail.com>.
On Thu, May 21, 2009 at 5:57 PM, Bojan Smojver <bo...@rexursive.com> wrote:
> On Thu, 2009-05-21 at 14:59 -0500, William A. Rowe, Jr. wrote:
> > If you want to grab any safe, low risk low hanging fruit, have at it.
>
> We need to backport this, right?
>
> http://svn.apache.org/viewvc?view=rev&revision=768417
for sure
Re: Time for APR 1.3 releases?
Posted by Jim Jagielski <ji...@jaguNET.com>.
On May 21, 2009, at 5:57 PM, Bojan Smojver wrote:
> On Thu, 2009-05-21 at 14:59 -0500, William A. Rowe, Jr. wrote:
>> If you want to grab any safe, low risk low hanging fruit, have at it.
>
> We need to backport this, right?
>
> http://svn.apache.org/viewvc?view=rev&revision=768417
+1 !
Re: Time for APR 1.3 releases?
Posted by Bojan Smojver <bo...@rexursive.com>.
On Thu, 2009-05-21 at 14:59 -0500, William A. Rowe, Jr. wrote:
> If you want to grab any safe, low risk low hanging fruit, have at it.
We need to backport this, right?
http://svn.apache.org/viewvc?view=rev&revision=768417
--
Bojan
Re: Time for APR 1.3 releases?
Posted by Bojan Smojver <bo...@rexursive.com>.
On Fri, 2009-05-22 at 00:29 +0200, Stefan Fritsch wrote:
> No. It was discussed with security@apache.org in January. William Rowe
> knows about it.
OK, I'll leave it up to him then.
--
Bojan
Re: Time for APR 1.3 releases?
Posted by Stefan Fritsch <sf...@sfritsch.de>.
On Friday 22 May 2009, Bojan Smojver wrote:
> > Don't forget CVE-2009-0023.
>
> Not familiar. Is that the buckets/apr_brigade.c off by one thing?
No. It was discussed with security@apache.org in January. William Rowe
knows about it.
Stefan
Re: Time for APR 1.3 releases?
Posted by Bojan Smojver <bo...@rexursive.com>.
On Fri, 2009-05-22 at 00:12 +0200, Stefan Fritsch wrote:
> Don't forget CVE-2009-0023.
Not familiar. Is that the buckets/apr_brigade.c off by one thing?
--
Bojan
Re: Time for APR 1.3 releases?
Posted by Stefan Fritsch <sf...@sfritsch.de>.
On Thursday 21 May 2009, William A. Rowe, Jr. wrote:
> If you want to grab any safe, low risk low hanging fruit, have at
> it.
Don't forget CVE-2009-0023.