Index of /dist/apr/patches

Apache APR Project Source Code Recommended Patches

This downloads page includes only patches to the sources strongly recommended for building APR projects, generally using security .

Summary of patches

      Name                             Last modified      Size  Description
      Parent Directory                                      -   Portable Runtime project
      HEADER.html                      03-Oct-2009 15:28  304   Portable Runtime project
      README.html                      07-Dec-2009 21:43  550   Portable Runtime project
      apr-0.9-CVE-2009-2412.patch      03-Oct-2009 15:28  2.0K  Source code patch
      apr-1.x-CVE-2009-2412.patch      03-Oct-2009 15:28  2.0K  Source code patch
      apr-1.x-PR47645.patch            07-Dec-2009 21:43  718   Source code patch
      apr-util-0.9-CVE-2009-2412.patch 03-Oct-2009 15:28  2.5K  Source code patch
      apr-util-0.9-CVE-2010-1623.patch 04-Oct-2010 12:57  946   Source code patch
      apr-util-1.x-CVE-2009-2412.patch 03-Oct-2009 15:28  2.5K  Source code patch

Summary of Patches

CVE-2009-2412

• Apply to APR 0.9.0 - 0.9.18 and 1.0.0 - 1.3.7
• Apply to APR-util 0.9.0 - 0.9.17 and 1.0.0 - 1.3.8

Overflow flaw in apr_pool and apr_rmm APIs. Additional details forthcoming.

PR 47645

• Apply to APR 1.3.3 - 1.3.8

Fixes error handling in apr_pollset_poll() and apr_pollcb_poll() on Solaris, resolving symptoms which vary based on the application.