Re: [ANNOUNCEMENT] Apache Portable Runtime 1.7.6 Released
On 8/17/25 10:25 AM, Christophe JAILLET wrote: > Le 16/05/2025 à 15:56, minfrin a écrit : >> Apache Portable Runtime APR 1.7.6 Released >> >> The Apache Software Foundation and the Apache Portable Runtime >> Project are proud to announce the General Availability of version >> 1.7.6 of the Apache Portable Runtime library (APR). >> >> For detailed changes in this maintenance release, see; >> >> https://www.apache.org/dist/apr/CHANGES-APR-1.7 >> https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6 >> https://www.apache.org/dist/apr/CHANGES-APR-ICONV-1.2 > > Hi, > > for some reasons, the CHANGES file for APR 1.7 > (https://downloads.apache.org/apr/CHANGES-APR-1.7) available from > https://apr.apache.org/ does not have the change entries for 1.7.6. > > Also, (but i think it is related), CVE-2023-49582 is not listed for 1.7.5. > > Theses change entries are only available in CHANGES in the svn repo. > > I've never looked at the release process for APR, so I don't know how to fix > it myself, so I'm just reporting the issue. I don't know or investigated what went wrong in the release process, but I fixed it now manually. Thanks for reporting. Regards Rüdiger
Re: [ANNOUNCEMENT] Apache Portable Runtime 1.7.6 Released
Le 16/05/2025 à 15:56, minfrin a écrit : Apache Portable Runtime APR 1.7.6 Released The Apache Software Foundation and the Apache Portable Runtime Project are proud to announce the General Availability of version 1.7.6 of the Apache Portable Runtime library (APR). For detailed changes in this maintenance release, see; https://www.apache.org/dist/apr/CHANGES-APR-1.7 https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6 https://www.apache.org/dist/apr/CHANGES-APR-ICONV-1.2 Hi, for some reasons, the CHANGES file for APR 1.7 (https://downloads.apache.org/apr/CHANGES-APR-1.7) available from https://apr.apache.org/ does not have the change entries for 1.7.6. Also, (but i think it is related), CVE-2023-49582 is not listed for 1.7.5. Theses change entries are only available in CHANGES in the svn repo. I've never looked at the release process for APR, so I don't know how to fix it myself, so I'm just reporting the issue. CJ
Re: [ANNOUNCEMENT] Apache Portable Runtime 1.7.6 Released
On Fri, May 16, 2025 at 3:59 PM minfrin wrote: >Apache Portable Runtime APR 1.7.6 Released > >The Apache Software Foundation and the Apache Portable Runtime >Project are proud to announce the General Availability of version >1.7.6 of the Apache Portable Runtime library (APR). > >For detailed changes in this maintenance release, see; > > https://www.apache.org/dist/apr/CHANGES-APR-1.7 > https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6 > https://www.apache.org/dist/apr/CHANGES-APR-ICONV-1.2 > >APR, APR-util and APR-iconv are available for download from: > > https://apr.apache.org/download.cgi > >In APR 1.7.0 and later, there are a number of >specific changes in how APR is deployed which may be disruptive >to existing build strategies: > > - The typical cross-process locking stragegy now defaults to > a pthreads lock which will not leak on abnormal process termination, > as opposed to the earlier sysv semaphore locking strategy. > This should result in fewer orphaned locks in misbehaving > applications. > > - Netware users should be aware that APR mis-defined the entity > representing an "os mutex", and it was missing a level of > indirection. The new definition should allow the use of the > apr_os_proc_mutex_get/_put API's on the Netware platform but > requires a rebuild against the APR 1.7.0 or later library. > >The mission of the Apache Portable Runtime Project is to create >and maintain software libraries that provide a predictable and >consistent interface to underlying platform-specific >implementations. The primary goal is to provide an API to >which software developers may code and be assured of predictable >if not identical behavior regardless of the platform on which >their software is built. We list all known projects using APR >at https://apr.apache.org/projects.html - so please let us know >if you find our libraries useful in your own projects Hi, It seems like the https://downloads.apache.org/apr/CHANGES-APR-1.7 page didn't update to include 1.7.6 changes, but the one in the repository has them documented. Shouldn't the website's version be updated as well? -- Timofei Zhakov
[ANNOUNCEMENT] Apache Portable Runtime 1.7.6 Released
Apache Portable Runtime APR 1.7.6 Released The Apache Software Foundation and the Apache Portable Runtime Project are proud to announce the General Availability of version 1.7.6 of the Apache Portable Runtime library (APR). For detailed changes in this maintenance release, see; https://www.apache.org/dist/apr/CHANGES-APR-1.7 https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6 https://www.apache.org/dist/apr/CHANGES-APR-ICONV-1.2 APR, APR-util and APR-iconv are available for download from: https://apr.apache.org/download.cgi In APR 1.7.0 and later, there are a number of specific changes in how APR is deployed which may be disruptive to existing build strategies: - The typical cross-process locking stragegy now defaults to a pthreads lock which will not leak on abnormal process termination, as opposed to the earlier sysv semaphore locking strategy. This should result in fewer orphaned locks in misbehaving applications. - Netware users should be aware that APR mis-defined the entity representing an "os mutex", and it was missing a level of indirection. The new definition should allow the use of the apr_os_proc_mutex_get/_put API's on the Netware platform but requires a rebuild against the APR 1.7.0 or later library. The mission of the Apache Portable Runtime Project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of predictable if not identical behavior regardless of the platform on which their software is built. We list all known projects using APR at https://apr.apache.org/projects.html - so please let us know if you find our libraries useful in your own projects!
