On 8/17/25 10:25 AM, Christophe JAILLET wrote:
> Le 16/05/2025 à 15:56, minfrin a écrit :
>> Apache Portable Runtime APR 1.7.6 Released
>>
>> The Apache Software Foundation and the Apache Portable Runtime
>> Project are proud to announce the General Availability of version
>> 1.7.6 of the Apache Portable Runtime library (APR).
>>
>> For detailed changes in this maintenance release, see;
>>
>> https://www.apache.org/dist/apr/CHANGES-APR-1.7
>> https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6
>> https://www.apache.org/dist/apr/CHANGES-APR-ICONV-1.2
>
> Hi,
>
> for some reasons, the CHANGES file for APR 1.7
> (https://downloads.apache.org/apr/CHANGES-APR-1.7) available from
> https://apr.apache.org/ does not have the change entries for 1.7.6.
>
> Also, (but i think it is related), CVE-2023-49582 is not listed for 1.7.5.
>
> Theses change entries are only available in CHANGES in the svn repo.
>
> I've never looked at the release process for APR, so I don't know how to fix
> it myself, so I'm just reporting the issue.
I don't know or investigated what went wrong in the release process, but I
fixed it now manually.
Thanks for reporting.
Regards
Rüdiger