Index of /dist/apr/patches

Apache APR Project Source Code Recommended Patches

This downloads page includes only patches to the sources strongly recommended for building APR projects, generally using security .

Summary of patches

 Name                             Last modified       Size  Description

 Parent Directory                 26-Mar-2012 18:19      -  Portable Runtime project
 README.html                      07-Dec-2009 19:43     1k  Portable Runtime project
 apr-0.9-CVE-2009-2412.patch      03-Oct-2009 13:28     2k  Source code patch
 apr-1.x-CVE-2009-2412.patch      03-Oct-2009 13:28     2k  Source code patch
 apr-1.x-PR47645.patch            07-Dec-2009 19:43     1k  Source code patch
 apr-util-0.9-CVE-2009-2412.patch 03-Oct-2009 13:28     3k  Source code patch
 apr-util-0.9-CVE-2010-1623.patch 04-Oct-2010 10:57     1k  Source code patch
 apr-util-1.x-CVE-2009-2412.patch 03-Oct-2009 13:28     2k  Source code patch

Summary of Patches

CVE-2009-2412

• Apply to APR 0.9.0 - 0.9.18 and 1.0.0 - 1.3.7
• Apply to APR-util 0.9.0 - 0.9.17 and 1.0.0 - 1.3.8

Overflow flaw in apr_pool and apr_rmm APIs. Additional details forthcoming.

PR 47645

• Apply to APR 1.3.3 - 1.3.8

Fixes error handling in apr_pollset_poll() and apr_pollcb_poll() on Solaris, resolving symptoms which vary based on the application.