Changelog for apr-devel-1.7.5-150300.57.1.x86_64.rpm :

* Tue Sep 17 2024 pgajdosAATTsuse.com- version update to 1.7.5 [bsc#1229783] CVE-2023-49582
* ) Unix: Implement apr_shm_perms_set() for the \"POSIX shm_open()\" and \"classic mmap\" shared memory implementations. [Joe Orton, Ruediger Pluem]
* ) Fix missing \';\' for XML/HTML hex entities from apr_escape_entity(). [Yann Ylavic]
* ) Fix crash in apr_pool_create() with --enable-pool-debug=all|owner. [Yann Ylavic]
* ) Improve platform detection by updating config.guess and config.sub. [Rainer Jung]
* ) CMake: Add support for CMAKE_WARNING_AS_ERROR. [Ivan Zhakov]
* ) CMake: Enable support for MSVC runtime library selection by abstraction. [Ivan Zhakov]
* ) CMake: Export installed targets (libapr-1, apr-1, libaprapp-1, aprapp-1) to apr:: namespace. [Ivan Zhakov]- modified patches % apr-visibility.patch (refreshed) % reproducible.patch (refreshed)
* Mon Dec 18 2023 bwiedemannAATTsuse.com- Add reproducible.patch to drop build host name (boo#1084909)
* Thu Apr 20 2023 pgajdosAATTsuse.com- version update to 1.7.4
* ) Fix a regression where writing to a file opened with both APR_FOPEN_APPEND and APR_FOPEN_BUFFERED did not properly append the data on Windows. (This regression was introduced in APR 1.7.3) [Evgeny Kotkov]
* Sun Apr 16 2023 dmuellerAATTsuse.com- update to 1.7.3:
* apr-1-config: Fix crosscompiling detection
* configure: Add --enable-sysv-shm to use SysV shared memory (shmget) if available.
* apr_socket_sendfile: Use WSAIoctl() to get TransmitFile function pointer on Windows. [Ivan Zhakov]
* apr_dir_read: Do not request short file names on Windows 7 and later. [Ivan Zhakov]
* apr_file_gets: Optimize for buffered files on Windows.
* Fix a deadlock when writing to locked files opened with APR_FOPEN_APPEND on Windows. PR 50058. [Evgeny Kotkov]
* Don\'t seek to the end when opening files with APR_FOPEN_APPEND on Windows.
* apr_file_write: Optimize large writes to buffered files on Windows.
* apr_file_write: Optimize large reads from buffered files on Windows.
* Thu Feb 02 2023 andreas.stiegerAATTgmx.de- update to 1.7.2:
* CVE-2022-24963: Integer Overflow or Wraparound vulnerability in apr_encode functions allows an attacker to write beyond bounds of a buffer (boo#1207870)
* Add error handling for lseek() failures in apr_file_write() and apr_file_writev()
* Avoid an overflow on 32 bit platforms
* Don\'t silently set APR_FOPEN_NOCLEANUP for apr_file_mktemp() created file to avoid a fd and inode leak when/if later passed to apr_file_setaside().
* build system fixes and fixes for other platforms- drop apr-CVE-2021-35940.patch included upstream (CVE-2021-35940)
* Sat Mar 26 2022 cooloAATTsuse.com- Remove autoreconf call, it breaks with uptodate autoconf versions
* Tue Feb 22 2022 pgajdosAATTsuse.com- deleted patches - apr-CVE-2021-3594.patch (renamed)- added patches + apr-CVE-2021-35940.patch (correct name)
* Tue Oct 19 2021 pgajdosAATTsuse.com- fix shlib-policy-name-error [bsc#1191747]
* Thu Sep 02 2021 pgajdosAATTsuse.com- security update- added patches fix CVE-2021-35940 [bsc#1190072], Regression of fix in apr 1.7 + apr-CVE-2021-35940.patch
* Sat Aug 03 2019 mmanu84AATToutlook.de- Version 1.7.0
* apr_dir_read: [Unix] Dropped the preference of the dirread_r() flavor for dirread(), because the former is both deprecated and unneeded. [Yann Ylavic, William Rowe]
* apr_file_info: [Win32 only] Treat only \"name surrogate\" reparse points as symlinks, and not other reparse tag types. PR47630 [Oleg Liatte ]
* Test %ld vs. %lld to avoid compiler emits using APR_OFF_T_FMT, in the case of apparently equivilant long and long long types. [William Rowe]
* Recognize APPLE predefined macros as equivilant to DARWIN. [Jim Jagielski]
* Signals: Allow handling of SIGUSR2 in apr_signal_thread. [Yann Ylavic]
* Atomics: Support for 64bit ints. [Jim Jagielski]
* Add the apr_encode_
* API that implements RFC4648 and RFC7515 compliant BASE64, BASE64URL, BASE32, BASE32HEX and BASE16 encode/decode functions. [Graham Leggett]
* rand: Use arc4random_buf() on BSD platforms and getrandom() on Linux, when available. [Christian Weisgerber * Add apr_sockaddr_zone_set, apr_sockaddr_zone_set to set and retrieve the zone for link-local IPv6 addresses. [Joe Orton]
* apr_sockaddr_equal: Compare link-local IPv6 addresses with different zones as not equal. [Joe Orton]
* apr_sockaddr_ip_getbuf, apr_sockaddr_ip_get: Append \"%zone\" for IPv6 link-local addresses. [Joe Orton]
* Locks: add a --disable-timedlocks config option in case users encounter more platforms where it fails [Nick Kew].
* apr_allocator, apr_pools: Add apr_allocator_page_size() and apr_allocator_min_order_set() to respectively get the (system\'s) page size in use and set the minimum allocation size for an allocator (expressed in 2^order pages). [Yann Ylavic]
* locks: provide portable implementations of timedlock()s for posix-sems, sysv-sems and pthreads for those platforms that lack native versions (eg: OSX/macOS). [Jim Jagielski]
* locks: Introduce apr_{thread,proc,global}_mutex_timedlock(). [Yann Ylavic]- Remove patch
* apr-use-getrandom.patch no longer needed, apr 1.7.0 use getrandom() on Linux, when available.- Refresh apr-visibility.patch
* Fri Feb 08 2019 pgajdosAATTsuse.com- increase timeout to fix random failure of testsuite + apr-test-sendfile-timeout.patch- fix build for SLE11 again
* Thu Feb 07 2019 pgajdosAATTsuse.com- linux version is now checked correctly, drop - apr-1.4.5-linux3.patch (see change log from Sun Aug 7 01:21:44 UTC 2011)
* Wed Jan 16 2019 tchvatalAATTsuse.com- Update keyring to match current release maintainer
* Thu Oct 18 2018 mmanu84AATToutlook.de- Version 1.6.5
* Fix Win32 build breakage in apr_os_exp_time_put() in 1.6.4. [Rainer Jung]- Version 1.6.4
* configure: Fix detection of on OpenBSD. PR 61976. [David Carlier , Yann Ylavic]
* Fix apr_parse_addr_port() regression in scope_id parsing introduced in 1.6.3. [Rainer Jung]
* Fix Win32 file buffer locking behavior for single threaded file streams. [Evgeny Kotkov, Mladen Turk, Jean-Frederic Clere]
* Numerous corrections to APR poll behavior. [Yann Ylavic]- Drop patch gcc8-integer-overflow.patch merged upstream
* Thu May 10 2018 matwey.kornilovAATTgmail.com- Version 1.6.3:
* apr_file_trunc: Truncating a buffered file could add unexpected data after the truncate position. PR 51017.
* apr_file_trunc: Fix an issue where reading from a buffered file after truncate could return stale data from the buffer.
* apr_ipsubnet_create() now fails for an empty input string.- fixes [bsc#1092981]
* Wed Apr 18 2018 mliskaAATTsuse.cz- Add gcc8-integer-overflow.patch to handle an undefined behavior (boo#1090085).
* Tue Jan 23 2018 normandAATTlinux.vnet.ibm.com- ignore PowerPC transient test failures
* Tue Nov 07 2017 mpluskalAATTsuse.com- Do not require python for building - its not needed anyways (fate#323526)
* Mon Oct 16 2017 mpluskalAATTsuse.com- We need to obsolete same version of package (bsc#1063305)
* Mon Jul 10 2017 jengelhAATTinai.de- Replace vision statement in %description with feature list. Fix RPM groups.- Drop --with-pic which is only useful for static libs.
* Thu Jun 22 2017 mpluskalAATTsuse.com- Rename package
* Mon Jun 19 2017 crrodriguezAATTopensuse.org- apr 1.6.2
* apr_allocator: Provide apr_allocator_align()
* apr_file_io: Add apr_file_pipe_create_pools()
* Add APR_SO_FREEBIND option for apr_socket_opt_set.
* apr_skiplist: Add apr_skiplist_addne
*()
* Added Unix domain socket support.
* See http://www.apache.org/dist/apr/CHANGES-APR-1.6 for a full list of changes.- Drop patches from upstream:
* 0017-Merge-r1733694-r1733708-from-trunk.patch
* 0018-apr_proc_mutex-unix-backport-r1733775-from-trunk-par.patch
* Wed Jun 14 2017 crrodriguezAATTopensuse.org- define READDIR_IS_THREAD_SAFE, because it is. Avoid using obsolete and potentially dangerous readdir_r.
* Wed May 04 2016 crrodriguezAATTopensuse.org- 0017-Merge-r1733694-r1733708-from-trunk.patch and 0018-apr_proc_mutex-unix-backport-r1733775-from-trunk-par.patch Refcount shared mutexes usage to avoid destruction while still is use by some processes, this fixes apache graceful-restart sometimes leaving processes in \"Gracefully finishing\" state forever.- apr-proc-mutex-map-anon.patch use MAP_ANON instead of mmap\'ing /dev/zero.
* Tue Sep 29 2015 mpluskalAATTsuse.com- Add gpg signature
* Sun May 03 2015 crrodriguezAATTopensuse.org- remove baselibs.conf that osc rejects now with message: ERROR: \'arch\' referenced in baselibs.conf is not being built ERROR: \'ppc\' referenced in baselibs.conf is not being built ERROR: \'package\' referenced in baselibs.conf is not being built ERROR: \'arch\' referenced in baselibs.conf is not being built ERROR: \'ppc\' referenced in baselibs.conf is not being built ERROR: \'package\' referenced in baselibs.conf is not being built
* Sun May 03 2015 crrodriguezAATTopensuse.org- apr 1.5.2
* apr_escape: Correctly calculate the size of the returned string in apr_escape_path and set the correct return value in case we actually escape the string
* apr_poll(cb): fix error paths returned values and leaks.
* apr_skiplist: Optimize the number of allocations by reusing pooled or malloc()ed nodes for the lifetime of the skiplist.
* apr_skiplist: Fix possible multiple-free() on the same value in apr_skiplist_remove_all() (obsoletes 0007-backport-r1604596-1604598-from-trunk.patch)
* apr_global_mutex/apr_proc_mutex: Resolve failures with the POSIX sem implementation in environments which receive signals. (obsoletes 0009-Merge-r1610854-from-trunk.patch)
* drop already included or no longer needed patches: 0004-Backport-r1593600-from-1.6.patch 0005-Backport-r1593612-from-1.6.patch 0007-backport-r1604596-1604598-from-trunk.patch 0009-Merge-r1610854-from-trunk.patch string-compare.diff
* Sun Mar 08 2015 crrodriguezAATTopensuse.org- No longer use --enable-allocator-uses-mmap but the default which is using malloc, this feature exists to reduce fragmentation but this is currently at the expense of:
* Loosing all malloc sanity checks.
* mmap and munmap are expensive operations when using at lot of threads (like in apache worker,event)
* It will waste memory, even more on archs that have big page sizes.- If there are fragmentation or performance problems in glibc malloc, the library has to be fixed instead.
* Sat Mar 07 2015 crrodriguezAATTopensuse.org- apr-use-getrandom.patch: Update, if getrandom blocks, fallback to the old codepath, restoring old always non-blocking behaviour in practice it blocks only at boottime when the entropy pool has not been fully initialized, this delays the startup of apache for example.
* Use SYS_getrandom constant instead of the \"internal\" __NR_getrandom
* Sun Oct 19 2014 crrodriguezAATTopensuse.org- apr-use-getrandom.patch Use the new getrandom() system call in apr_generate_random_bytes() if the system call number is defined and if the call is sucessful, fallback if otherwise.