You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@apr.apache.org by co...@apache.org on 2023/01/31 14:57:34 UTC
svn commit: r59751 - in /release/apr: CHANGES-APR-1.7 CHANGES-APR-UTIL-1.6
Author: covener
Date: Tue Jan 31 14:57:34 2023
New Revision: 59751
Log:
uddate changes for releases
Modified:
release/apr/CHANGES-APR-1.7
release/apr/CHANGES-APR-UTIL-1.6
Modified: release/apr/CHANGES-APR-1.7
==============================================================================
--- release/apr/CHANGES-APR-1.7 (original)
+++ release/apr/CHANGES-APR-1.7 Tue Jan 31 14:57:34 2023
@@ -1,4 +1,86 @@
-*- coding: utf-8 -*-
+Changes for APR 1.7.1
+
+ *) SECURITY: CVE-2021-35940 (cve.mitre.org)
+ Restore fix for out-of-bounds array dereference in apr_time_exp*() functions.
+ (This issue was addressed as CVE-2017-12613 in APR 1.6.3 and
+ later 1.6.x releases, but was missing in 1.7.0.) [Stefan Sperling]
+
+ *) configure: Fix various build issues for compilers enforcing
+ strict C99 compliance. PR 66396, 66408, 66426.
+ [Florian Weimer <fweimer redhat.com>, Sam James <sam gentoo.org>]
+
+ *) apr_atomic_read64(): Fix non-atomic read on 32-bit Windows [Ivan Zhakov]
+
+ *) configure: Prefer posix name-based shared memory over SysV IPC.
+ [Jim Jagielski]
+
+ *) configure: Add --disable-sctp argument to forcibly disable SCTP
+ support, or --enable-sctp which fails if SCTP support is not
+ detected. [Lubos Uhliarik <luhliari redhat.com>, Joe Orton]
+
+ *) Fix handle leak in the Win32 apr_uid_current implementation.
+ PR 61165. [Ivan Zhakov]
+
+ *) Add error handling for lseek() failures in apr_file_write() and
+ apr_file_writev(). [Joe Orton]
+
+ *) Don't silently set APR_FOPEN_NOCLEANUP for apr_file_mktemp() created file
+ to avoid a fd and inode leak when/if later passed to apr_file_setaside().
+ [Yann Ylavic]
+
+ *) APR's configure script uses AC_TRY_RUN to detect whether the return type
+ of strerror_r is int. When cross-compiling this defaults to no.
+
+ This commit adds an AC_CACHE_CHECK so users who cross-compile APR may
+ influence the outcome with a configure variable. [Sebastian Kemper
+ <sebastian_ml gmx net>]
+
+ *) Add a cache check with which users who cross-compile APR
+ can influence the outcome of the /dev/zero test by setting the variable
+ ac_cv_mmap__dev_zero=yes [Sebastian Kemper <sebastian_ml gmx net>]
+
+ *) Trick autoconf into printing the correct default prefix in the help.
+ [Stefan Fritsch]
+
+ *) Don't try to use PROC_PTHREAD by default when cross compiling.
+ [Yann Ylavic]
+
+ *) Add the ability to cross compile APR. [Graham Leggett]
+
+ *) While cross-compiling, the tools/gen_test_char could not
+ be executed at build time, use AX_PROG_CC_FOR_BUILD to
+ build native tools/gen_test_char
+
+ Support explicit libtool by variable assigning before buildcheck.sh,
+ it is helpful for cross-compiling (such as libtool=aarch64-linux-libtool)
+ [Hongxu Jia <hongxu.jia windriver.com>]
+
+ *) Avoid an overflow on 32 bit platforms. [René Hjortskov Nielsen
+ <r... hjortskov.dk>]
+
+ *) Use AC_CHECK_SIZEOF, so as to support cross compiling. PR 56053.
+ [Mike Frysinger <vapier gentoo.org>]
+
+ *) Add --tag=CC to libtool invocations. PR 62640. [Michael Osipov]
+
+ *) apr_pools: Fix pool debugging output so that creation events are
+ always emitted before allocation events and subpool destruction
+ events are emitted on pool clear/destroy for proper accounting.
+ [Brane Äibej]
+
+ *) apr_socket_listen: Allow larger listen backlog values on Windows 8+.
+ [Evgeny Kotkov <evgeny.kotkov visualsvn.com>]
+
+ *) Fixed: apr_get_oslevel() was returning APR_WIN_XP on Windows 10
+
+ *) Fix attempt to free invalid memory on exit when apr_app is used
+ on Windows. [Ivan Zhakov]
+
+ *) Fix double free on exit when apr_app is used on Windows. [Ivan Zhakov]
+
+ *) Fix a regression in apr_stat() for root path on Windows. [Ivan Zhakov]
+
Changes for APR 1.7.0
*) apr_dir_read: [Unix] Dropped the preference of the dirread_r() flavor
@@ -10,7 +92,7 @@ Changes for APR 1.7.0
[Oleg Liatte <olegliatte gmail.com>]
*) Test %ld vs. %lld to avoid compiler emits using APR_OFF_T_FMT, in the
- case of apparently equivilant long and long long types. [William Rowe]
+ case of apparently equivilant long and long long types. [William Rowe]
*) Recognize APPLE predefined macros as equivilant to DARWIN. [Jim Jagielski]
Modified: release/apr/CHANGES-APR-UTIL-1.6
==============================================================================
--- release/apr/CHANGES-APR-UTIL-1.6 (original)
+++ release/apr/CHANGES-APR-UTIL-1.6 Tue Jan 31 14:57:34 2023
@@ -1,4 +1,19 @@
-*- coding: utf-8 -*-
+Changes with APR-util 1.6.2
+
+ *) Teach configure how to find and build against MariaDB 10.2. PR 61517
+ [Kris Karas <bugs-a17 moonlit-rail.com>]
+
+ *) apr_crypto_commoncrypto: Remove stray reference to -lcrypto that
+ prevented commoncrypto being enabled. [Graham Leggett]
+
+ *) Add --tag=CC to libtool invocations. PR 62640. [Michael Osipov]
+
+ *) apr_dbm_gdbm: Fix handling of error codes. This makes gdbm 1.14 work.
+ apr_dbm_gdbm will now also return error codes starting with
+ APR_OS_START_USEERR, as apr_dbm_berkleydb does, instead of always
+ returning APR_EGENERAL. [Stefan Fritsch]
+
Changes with APR-util 1.6.1
*) Win32: Add function exports from new apr_crypto API's missing in 1.6.0.