Fwd: Apache Portable Runtime 1.4.5 and Apache Portable Runtime Utility 1.3.12 Released

[Jeff Trawick <tr...@gmail.com>]

---------- Forwarded message ----------
From: Jeff Trawick <tr...@apache.org>
Date: Sun, May 22, 2011 at 12:47 PM
Subject: Apache Portable Runtime 1.4.5 and Apache Portable Runtime
Utility 1.3.12 Released
To: announce@apache.org


  The Apache Software Foundation and the Apache Portable Runtime
  Project are proud to announce the General Availability of version
  1.4.5 of the APR Apache Portable Runtime library, and version
  1.3.12 of the APR Apache Portable Runtime Utility library.
  These are bug fix releases.  Users of previous versions are
  cautioned to update to these releases.

  APR 1.4.5 contains a fix for a vulnerability affecting some
  applications which use the apr_fnmatch() API which could result
  in excessive CPU consumption.

    Security: CVE-2011-1928
    apr_fnmatch(): Fix high CPU loop.  [William Rowe]

  APR 1.4.5 also contains a correction to a regression in APR 1.4.4
  affecting APR applications on Windows.

  APR-Util 1.3.12 contains a correction to a regression in APR-Util
  1.3.11 affecting some applications which use the APR-Util LDAP
  APIs, such as Apache HTTP Server 2.3.x.

  (See CHANGES-APR-1.4 and CHANGES-APR-UTIL-1.3 for more information.)

  Version 1.2.1 of the companion APR-iconv library, an alternative
  portable implementation of the 'iconv' library, remains current.

  APR is available for download from:

    http://apr.apache.org/download.cgi

  The mission of the Apache Portable Runtime Project is to create
  and maintain software libraries that provide a predictable and
  consistent interface to underlying platform-specific
  implementations. The primary goal is to provide an API to
  which software developers may code and be assured of predictable
  if not identical behavior regardless of the platform on which
  their software is built, relieving them of the need to code
  special-case conditions to work around or take advantage of
  platform-specific deficiencies or features.

  APR and its companion libraries are implemented entirely in C
  and provide a common programming interface across a wide variety
  of operating system platforms without sacrificing performance.
  Currently supported platforms include:

    UNIX variants
    Windows
    Netware
    Mac OS X
    OS/2

  To give a brief overview, the primary core
  subsystems of APR 1.3 include the following:

    Atomic operations
    Dynamic Shared Object loading
    File I/O
    Locks (mutexes, condition variables, etc)
    Memory management (high performance allocators)
    Memory-mapped files
    Multicast Sockets
    Network I/O
    Shared memory
    Thread and Process management
    Various data structures (tables, hashes, priority queues, etc)

  For a more complete list, please refer to the following URLs:

    http://apr.apache.org/docs/apr/modules.html
    http://apr.apache.org/docs/apr-util/modules.html

  Users of APR 0.9 should be aware that migrating to the APR 1.x
  programming interfaces may require some adjustments; APR 1.x is
  neither source nor binary compatible with earlier APR 0.9 releases.
  Users of APR 1.x can expect consistent interfaces and binary backwards
  compatibility throughout the entire APR 1.x release cycle, as defined
  in our versioning rules:

    http://apr.apache.org/versioning.html

  APR is already used extensively by the Apache HTTP Server
  version 2 and the Subversion revision control system, to
  name but a few.  We list all known projects using APR at
  http://apr.apache.org/projects.html -- so please let us know
  if you find our libraries useful in your own projects!



-- 
Born in Roswell... married an alien...