Le 16/05/2025 à 15:56, minfrin a écrit :
Apache Portable Runtime APR 1.7.6 Released
The Apache Software Foundation and the Apache Portable Runtime
Project are proud to announce the General Availability of version
1.7.6 of the Apache Portable Runtime library (APR).
For detailed changes in this maintenance release, see;
https://www.apache.org/dist/apr/CHANGES-APR-1.7
https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6
https://www.apache.org/dist/apr/CHANGES-APR-ICONV-1.2
Hi,
for some reasons, the CHANGES file for APR 1.7
(https://downloads.apache.org/apr/CHANGES-APR-1.7) available from
https://apr.apache.org/ does not have the change entries for 1.7.6.
Also, (but i think it is related), CVE-2023-49582 is not listed for 1.7.5.
Theses change entries are only available in CHANGES in the svn repo.
I've never looked at the release process for APR, so I don't know how to
fix it myself, so I'm just reporting the issue.
CJ