Index of /dist/apr/patches

Apache APR Project Source Code Recommended Patches

This downloads page includes only patches to the sources strongly recommended for building APR projects, generally using security .

Summary of patches

 Name                             Last modified       Size  Description

 Parent Directory                 18-Jul-2010 02:45      -  Portable Runtime project
 apr-0.9-CVE-2009-2412.patch      18-Jul-2010 02:45     2k  Source code patch
 apr-1.x-CVE-2009-2412.patch      18-Jul-2010 02:45     2k  Source code patch
 apr-1.x-PR47645.patch            18-Jul-2010 02:45     1k  Source code patch
 apr-util-0.9-CVE-2009-2412.patch 18-Jul-2010 02:45     3k  Source code patch
 apr-util-1.x-CVE-2009-2412.patch 18-Jul-2010 02:45     2k  Source code patch

Summary of Patches

CVE-2009-2412

• Apply to APR 0.9.0 - 0.9.18 and 1.0.0 - 1.3.7
• Apply to APR-util 0.9.0 - 0.9.17 and 1.0.0 - 1.3.8

Overflow flaw in apr_pool and apr_rmm APIs. Additional details forthcoming.

PR 47645

• Apply to APR 1.3.3 - 1.3.8

Fixes error handling in apr_pollset_poll() and apr_pollcb_poll() on Solaris, resolving symptoms which vary based on the application.