Changelog for
apr-devel-1.7.5-57.3.i586.rpm :
* Tue Sep 17 2024 pgajdosAATTsuse.com- version update to 1.7.5 [bsc#1229783] CVE-2023-49582
* ) Unix: Implement apr_shm_perms_set() for the \"POSIX shm_open()\" and \"classic mmap\" shared memory implementations. [Joe Orton, Ruediger Pluem]
* ) Fix missing \';\' for XML/HTML hex entities from apr_escape_entity(). [Yann Ylavic]
* ) Fix crash in apr_pool_create() with --enable-pool-debug=all|owner. [Yann Ylavic]
* ) Improve platform detection by updating config.guess and config.sub. [Rainer Jung]
* ) CMake: Add support for CMAKE_WARNING_AS_ERROR. [Ivan Zhakov]
* ) CMake: Enable support for MSVC runtime library selection by abstraction. [Ivan Zhakov]
* ) CMake: Export installed targets (libapr-1, apr-1, libaprapp-1, aprapp-1) to apr:: namespace. [Ivan Zhakov]- modified patches % apr-visibility.patch (refreshed) % reproducible.patch (refreshed)
* Mon Dec 18 2023 Bernhard Wiedemann
- Add reproducible.patch to drop build host name (boo#1084909)
* Thu Apr 20 2023 pgajdosAATTsuse.com- version update to 1.7.4
* ) Fix a regression where writing to a file opened with both APR_FOPEN_APPEND and APR_FOPEN_BUFFERED did not properly append the data on Windows. (This regression was introduced in APR 1.7.3) [Evgeny Kotkov]
* Sun Apr 16 2023 Dirk Müller - update to 1.7.3:
* apr-1-config: Fix crosscompiling detection
* configure: Add --enable-sysv-shm to use SysV shared memory (shmget) if available.
* apr_socket_sendfile: Use WSAIoctl() to get TransmitFile function pointer on Windows. [Ivan Zhakov]
* apr_dir_read: Do not request short file names on Windows 7 and later. [Ivan Zhakov]
* apr_file_gets: Optimize for buffered files on Windows.
* Fix a deadlock when writing to locked files opened with APR_FOPEN_APPEND on Windows. PR 50058. [Evgeny Kotkov]
* Don\'t seek to the end when opening files with APR_FOPEN_APPEND on Windows.
* apr_file_write: Optimize large writes to buffered files on Windows.
* apr_file_write: Optimize large reads from buffered files on Windows.
* Thu Feb 02 2023 Andreas Stieger - update to 1.7.2:
* CVE-2022-24963: Integer Overflow or Wraparound vulnerability in apr_encode functions allows an attacker to write beyond bounds of a buffer (boo#1207870)
* Add error handling for lseek() failures in apr_file_write() and apr_file_writev()
* Avoid an overflow on 32 bit platforms
* Don\'t silently set APR_FOPEN_NOCLEANUP for apr_file_mktemp() created file to avoid a fd and inode leak when/if later passed to apr_file_setaside().
* build system fixes and fixes for other platforms- drop apr-CVE-2021-35940.patch included upstream (CVE-2021-35940)
* Sat Mar 26 2022 Stephan Kulow - Remove autoreconf call, it breaks with uptodate autoconf versions
* Tue Feb 22 2022 pgajdosAATTsuse.com- deleted patches - apr-CVE-2021-3594.patch (renamed)- added patches + apr-CVE-2021-35940.patch (correct name)
* Tue Oct 19 2021 pgajdosAATTsuse.com- fix shlib-policy-name-error [bsc#1191747]
* Thu Sep 02 2021 pgajdosAATTsuse.com- security update- added patches fix CVE-2021-35940 [bsc#1190072], Regression of fix in apr 1.7 + apr-CVE-2021-35940.patch
* Sat Aug 03 2019 Manu Maier - Version 1.7.0
* apr_dir_read: [Unix] Dropped the preference of the dirread_r() flavor for dirread(), because the former is both deprecated and unneeded. [Yann Ylavic, William Rowe]
* apr_file_info: [Win32 only] Treat only \"name surrogate\" reparse points as symlinks, and not other reparse tag types. PR47630 [Oleg Liatte ]
* Test %ld vs. %lld to avoid compiler emits using APR_OFF_T_FMT, in the case of apparently equivilant long and long long types. [William Rowe]
* Recognize APPLE predefined macros as equivilant to DARWIN. [Jim Jagielski]
* Signals: Allow handling of SIGUSR2 in apr_signal_thread. [Yann Ylavic]
* Atomics: Support for 64bit ints. [Jim Jagielski]
* Add the apr_encode_
* API that implements RFC4648 and RFC7515 compliant BASE64, BASE64URL, BASE32, BASE32HEX and BASE16 encode/decode functions. [Graham Leggett]
* rand: Use arc4random_buf() on BSD platforms and getrandom() on Linux, when available. [Christian Weisgerber * Add apr_sockaddr_zone_set, apr_sockaddr_zone_set to set and retrieve the zone for link-local IPv6 addresses. [Joe Orton]
* apr_sockaddr_equal: Compare link-local IPv6 addresses with different zones as not equal. [Joe Orton]
* apr_sockaddr_ip_getbuf, apr_sockaddr_ip_get: Append \"%zone\" for IPv6 link-local addresses. [Joe Orton]
* Locks: add a --disable-timedlocks config option in case users encounter more platforms where it fails [Nick Kew].
* apr_allocator, apr_pools: Add apr_allocator_page_size() and apr_allocator_min_order_set() to respectively get the (system\'s) page size in use and set the minimum allocation size for an allocator (expressed in 2^order pages). [Yann Ylavic]
* locks: provide portable implementations of timedlock()s for posix-sems, sysv-sems and pthreads for those platforms that lack native versions (eg: OSX/macOS). [Jim Jagielski]
* locks: Introduce apr_{thread,proc,global}_mutex_timedlock(). [Yann Ylavic]- Remove patch
* apr-use-getrandom.patch no longer needed, apr 1.7.0 use getrandom() on Linux, when available.- Refresh apr-visibility.patch