Re: Fwd: Vulnerability in APR-UTIL, perhaps APR

2015-08-12 Thread Ruediger Pluem
On 08/03/2015 12:13 AM, Branko Čibej wrote: On 31.07.2015 22:50, William A Rowe Jr wrote: Thanks Daniel, sharing this with the dev@ list, as the problem and the fix are both public. Folks, what are your thoughts? Our expat is already quite old, and the current release was 2.10, while we

Re: Fwd: Vulnerability in APR-UTIL, perhaps APR

2015-08-07 Thread Joe Orton
On Fri, Jul 31, 2015 at 03:50:08PM -0500, William Rowe wrote: Thanks Daniel, sharing this with the dev@ list, as the problem and the fix are both public. Folks, what are your thoughts? Our expat is already quite old, and the current release was 2.10, while we were still shipping 1.95.7,

Re: Fwd: Vulnerability in APR-UTIL, perhaps APR

2015-08-02 Thread Branko Čibej
On 31.07.2015 22:50, William A Rowe Jr wrote: Thanks Daniel, sharing this with the dev@ list, as the problem and the fix are both public. Folks, what are your thoughts? Our expat is already quite old, and the current release was 2.10, while we were still shipping 1.95.7, before this issue

Fwd: Vulnerability in APR-UTIL, perhaps APR

2015-07-31 Thread William A Rowe Jr
Thanks Daniel, sharing this with the dev@ list, as the problem and the fix are both public. Folks, what are your thoughts? Our expat is already quite old, and the current release was 2.10, while we were still shipping 1.95.7, before this issue popped up. Bumping major versions in a subversion