On 08/04/2009 09:33 PM, William A. Rowe, Jr. wrote: > [email protected] wrote: >> Author: rpluem >> Date: Tue Aug 4 19:19:28 2009 >> New Revision: 800928 >> >> URL: http://svn.apache.org/viewvc?rev=800928&view=rev >> Log: >> * First we released APR 1.3.7 and not APR-util 1.3.7 and second APR 1.3.7 >> does not contain any security fixes compared to its predecessor. >> >> Modified: >> apr/site/trunk/docs/index.html >> apr/site/trunk/xdocs/index.xml >> >> Modified: apr/site/trunk/docs/index.html >> URL: >> http://svn.apache.org/viewvc/apr/site/trunk/docs/index.html?rev=800928&r1=800927&r2=800928&view=diff >> ============================================================================== >> --- apr/site/trunk/docs/index.html (original) >> +++ apr/site/trunk/docs/index.html Tue Aug 4 19:19:28 2009 >> @@ -95,9 +95,6 @@ >> <p>The Apache Portable Runtime Project is proud to announce the release of >> the APR core library version 1.3.7. The APR-util library version 1.3.8 >> remains >> current as does the APR-iconv library release version 1.2.1.</p> >> -<p>Note that the APR-util 1.3.7 release corrected a number of potential >> -security issues and users of previous versions are strongly cautioned >> -to update to the most recent release.</p> > > Please revert. APR-util did exactly that and anyone running APR-util prior > to 1.3.7 is strongly cautioned to upgrade. Soon this will say 1.3.9, but > that should not be removed.
Done. But I am still not convinced by your arguments. I got confused a lot by this and just thought there was a typo / something left from the last release. So maybe this paragraph should go somewhere else on the page, but not in the announcement section for APR (which only announces the release of APR in contrast to the 0.9.x section which announces a release of APR-util as well). But to be honest currently I have no idea where. Regards Rüdiger
