Index of /dist/apr/patches

Apache APR Project Source Code Recommended Patches

This downloads page includes only patches to the sources strongly recommended for building APR projects, generally using security .

Summary of patches

      Name                             Last modified      Size  Description
      Parent Directory                                      -   Portable Runtime project
      HEADER.html                      03-Oct-2009 16:03  304   Portable Runtime project
      README.html                      03-Oct-2009 16:03  550   Portable Runtime project
      apr-0.9-CVE-2009-2412.patch      03-Oct-2009 16:03  2.0K  Source code patch
      apr-1.x-CVE-2009-2412.patch      03-Oct-2009 16:03  2.0K  Source code patch
      apr-1.x-PR47645.patch            03-Oct-2009 16:03  718   Source code patch
      apr-util-0.9-CVE-2009-2412.patch 03-Oct-2009 16:03  2.5K  Source code patch
      apr-util-1.x-CVE-2009-2412.patch 03-Oct-2009 16:03  2.5K  Source code patch

Summary of Patches

CVE-2009-2412

• Apply to APR 0.9.0 - 0.9.18 and 1.0.0 - 1.3.7
• Apply to APR-util 0.9.0 - 0.9.17 and 1.0.0 - 1.3.8

Overflow flaw in apr_pool and apr_rmm APIs. Additional details forthcoming.

PR 47645

• Apply to APR 1.3.3 - 1.3.8

Fixes error handling in apr_pollset_poll() and apr_pollcb_poll() on Solaris, resolving symptoms which vary based on the application.