I know not everyone monitors CVS logs. I have backported the patch
for not-in-srclib/ apr and apr-util trees. Even the in-tree builds however
are vulnerable. If those working in the APACHE_2_0_BRANCH would
try cvs up and experiment with your preference if apr[-util] either in-tree
or out-of-tree, we would all appreciate it.
APACHE_2_0_BRANCH still seems to work for me fine (APR in tree or out of tree), so the backport looks good (but I will remain cynical for the next few days just in case).
