You are viewing a plain text version of this content. The canonical link for it is here.
Posted to announce@apache.org by Jeff Trawick <tr...@apache.org> on 2011/05/22 18:47:08 UTC

Apache Portable Runtime 1.4.5 and Apache Portable Runtime Utility 1.3.12 Released

   The Apache Software Foundation and the Apache Portable Runtime
   Project are proud to announce the General Availability of version
   1.4.5 of the APR Apache Portable Runtime library, and version
   1.3.12 of the APR Apache Portable Runtime Utility library.
   These are bug fix releases.  Users of previous versions are
   cautioned to update to these releases.

   APR 1.4.5 contains a fix for a vulnerability affecting some
   applications which use the apr_fnmatch() API which could result
   in excessive CPU consumption.

     Security: CVE-2011-1928
     apr_fnmatch(): Fix high CPU loop.  [William Rowe]

   APR 1.4.5 also contains a correction to a regression in APR 1.4.4
   affecting APR applications on Windows.

   APR-Util 1.3.12 contains a correction to a regression in APR-Util
   1.3.11 affecting some applications which use the APR-Util LDAP
   APIs, such as Apache HTTP Server 2.3.x.

   (See CHANGES-APR-1.4 and CHANGES-APR-UTIL-1.3 for more information.)

   Version 1.2.1 of the companion APR-iconv library, an alternative
   portable implementation of the 'iconv' library, remains current.

   APR is available for download from:

     http://apr.apache.org/download.cgi

   The mission of the Apache Portable Runtime Project is to create
   and maintain software libraries that provide a predictable and
   consistent interface to underlying platform-specific
   implementations. The primary goal is to provide an API to
   which software developers may code and be assured of predictable
   if not identical behavior regardless of the platform on which
   their software is built, relieving them of the need to code
   special-case conditions to work around or take advantage of
   platform-specific deficiencies or features.

   APR and its companion libraries are implemented entirely in C
   and provide a common programming interface across a wide variety
   of operating system platforms without sacrificing performance.
   Currently supported platforms include:

     UNIX variants
     Windows
     Netware
     Mac OS X
     OS/2

   To give a brief overview, the primary core
   subsystems of APR 1.3 include the following:

     Atomic operations
     Dynamic Shared Object loading
     File I/O
     Locks (mutexes, condition variables, etc)
     Memory management (high performance allocators)
     Memory-mapped files
     Multicast Sockets
     Network I/O
     Shared memory
     Thread and Process management
     Various data structures (tables, hashes, priority queues, etc)

   For a more complete list, please refer to the following URLs:

     http://apr.apache.org/docs/apr/modules.html
     http://apr.apache.org/docs/apr-util/modules.html

   Users of APR 0.9 should be aware that migrating to the APR 1.x
   programming interfaces may require some adjustments; APR 1.x is
   neither source nor binary compatible with earlier APR 0.9 releases.
   Users of APR 1.x can expect consistent interfaces and binary backwards
   compatibility throughout the entire APR 1.x release cycle, as defined
   in our versioning rules:

     http://apr.apache.org/versioning.html

   APR is already used extensively by the Apache HTTP Server
   version 2 and the Subversion revision control system, to
   name but a few.  We list all known projects using APR at
   http://apr.apache.org/projects.html -- so please let us know
   if you find our libraries useful in your own projects!

--------------------------------------------------------------------- 
To unsubscribe, e-mail: announce-unsubscribe@apache.org 
For additional commands, e-mail: announce-help@apache.org 



Fwd: Apache Portable Runtime 1.4.5 and Apache Portable Runtime Utility 1.3.12 Released

Posted by Jeff Trawick <tr...@gmail.com>.
---------- Forwarded message ----------
From: Jeff Trawick <tr...@apache.org>
Date: Sun, May 22, 2011 at 12:47 PM
Subject: Apache Portable Runtime 1.4.5 and Apache Portable Runtime
Utility 1.3.12 Released
To: announce@apache.org


  The Apache Software Foundation and the Apache Portable Runtime
  Project are proud to announce the General Availability of version
  1.4.5 of the APR Apache Portable Runtime library, and version
  1.3.12 of the APR Apache Portable Runtime Utility library.
  These are bug fix releases.  Users of previous versions are
  cautioned to update to these releases.

  APR 1.4.5 contains a fix for a vulnerability affecting some
  applications which use the apr_fnmatch() API which could result
  in excessive CPU consumption.

    Security: CVE-2011-1928
    apr_fnmatch(): Fix high CPU loop.  [William Rowe]

  APR 1.4.5 also contains a correction to a regression in APR 1.4.4
  affecting APR applications on Windows.

  APR-Util 1.3.12 contains a correction to a regression in APR-Util
  1.3.11 affecting some applications which use the APR-Util LDAP
  APIs, such as Apache HTTP Server 2.3.x.

  (See CHANGES-APR-1.4 and CHANGES-APR-UTIL-1.3 for more information.)

  Version 1.2.1 of the companion APR-iconv library, an alternative
  portable implementation of the 'iconv' library, remains current.

  APR is available for download from:

    http://apr.apache.org/download.cgi

  The mission of the Apache Portable Runtime Project is to create
  and maintain software libraries that provide a predictable and
  consistent interface to underlying platform-specific
  implementations. The primary goal is to provide an API to
  which software developers may code and be assured of predictable
  if not identical behavior regardless of the platform on which
  their software is built, relieving them of the need to code
  special-case conditions to work around or take advantage of
  platform-specific deficiencies or features.

  APR and its companion libraries are implemented entirely in C
  and provide a common programming interface across a wide variety
  of operating system platforms without sacrificing performance.
  Currently supported platforms include:

    UNIX variants
    Windows
    Netware
    Mac OS X
    OS/2

  To give a brief overview, the primary core
  subsystems of APR 1.3 include the following:

    Atomic operations
    Dynamic Shared Object loading
    File I/O
    Locks (mutexes, condition variables, etc)
    Memory management (high performance allocators)
    Memory-mapped files
    Multicast Sockets
    Network I/O
    Shared memory
    Thread and Process management
    Various data structures (tables, hashes, priority queues, etc)

  For a more complete list, please refer to the following URLs:

    http://apr.apache.org/docs/apr/modules.html
    http://apr.apache.org/docs/apr-util/modules.html

  Users of APR 0.9 should be aware that migrating to the APR 1.x
  programming interfaces may require some adjustments; APR 1.x is
  neither source nor binary compatible with earlier APR 0.9 releases.
  Users of APR 1.x can expect consistent interfaces and binary backwards
  compatibility throughout the entire APR 1.x release cycle, as defined
  in our versioning rules:

    http://apr.apache.org/versioning.html

  APR is already used extensively by the Apache HTTP Server
  version 2 and the Subversion revision control system, to
  name but a few.  We list all known projects using APR at
  http://apr.apache.org/projects.html -- so please let us know
  if you find our libraries useful in your own projects!



-- 
Born in Roswell... married an alien...