svn commit: r86479 - dev/apr

[email protected] Mon, 03 Aug 2026 13:00:59 -0000
Newsgroups gmane.comp.apache.apr.cvs
Message-ID <178576205966.1847855.13721794362287393423@svn03-he-fi>
Author: covener
Date: Mon Aug  3 13:00:59 2026
New Revision: 86479

Log:
Add 1.6.4-rc1 files

Added:
   dev/apr/CHANGES-APR-UTIL-1-6
   dev/apr/apr-util-1.6.4-rc1-candidate-win32-src.zip   (contents, props changed)
   dev/apr/apr-util-1.6.4-rc1-candidate-win32-src.zip.asc
   dev/apr/apr-util-1.6.4-rc1-candidate-win32-src.zip.sha256
   dev/apr/apr-util-1.6.4-rc1-candidate.tar.bz2   (contents, props changed)
   dev/apr/apr-util-1.6.4-rc1-candidate.tar.bz2.asc
   dev/apr/apr-util-1.6.4-rc1-candidate.tar.bz2.sha256
   dev/apr/apr-util-1.6.4-rc1-candidate.tar.gz   (contents, props changed)
   dev/apr/apr-util-1.6.4-rc1-candidate.tar.gz.asc
   dev/apr/apr-util-1.6.4-rc1-candidate.tar.gz.sha256
Modified:
   dev/apr/Announcement-aprutil-1.x.html
   dev/apr/Announcement-aprutil-1.x.txt

Modified: dev/apr/Announcement-aprutil-1.x.html
==============================================================================
--- dev/apr/Announcement-aprutil-1.x.html	Mon Aug  3 10:43:15 2026	(r86478)
+++ dev/apr/Announcement-aprutil-1.x.html	Mon Aug  3 13:00:59 2026	(r86479)
@@ -5,7 +5,7 @@
   <meta name="author" content="APR">
   <meta name="email" content="[email protected]">
   <link rel="stylesheet" type="text/css" href="Announcement.css">
-  <title>Apache Portable Runtime Utility 1.6.3 Released</title>
+  <title>Apache Portable Runtime Utility 1.6.4 Released</title>
  </head>
  <body>
 <div id="logo">
@@ -15,13 +15,13 @@
 </div>
 
 <h1>
-   Apache Portable Runtime Utility 1.6.3 Released
+   Apache Portable Runtime Utility 1.6.4 Released
 </h1>
 
 <p>
    The Apache Software Foundation and the Apache Portable Runtime
    Project are proud to announce the General Availability of version
-   1.6.3 of the Apache Portable Runtime Utility library (APR-util).
+   1.6.4 of the Apache Portable Runtime Utility library (APR-util).
 </p>
 
 <p>

Modified: dev/apr/Announcement-aprutil-1.x.txt
==============================================================================
--- dev/apr/Announcement-aprutil-1.x.txt	Mon Aug  3 10:43:15 2026	(r86478)
+++ dev/apr/Announcement-aprutil-1.x.txt	Mon Aug  3 13:00:59 2026	(r86479)
@@ -1,8 +1,8 @@
-   Apache Portable Runtime Utility (APR-util) 1.6.3 Released
+   Apache Portable Runtime Utility (APR-util) 1.6.4 Released
 
    The Apache Software Foundation and the Apache Portable Runtime
    Project are proud to announce the General Availability of version
-   1.6.3 of the Apache Portable Runtime Utility library (APR-util). 
+   1.6.4 of the Apache Portable Runtime Utility library (APR-util). 
 
    For detailed changes in this maintenance release, see;
 

Added: dev/apr/CHANGES-APR-UTIL-1-6
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ dev/apr/CHANGES-APR-UTIL-1-6	Mon Aug  3 13:00:59 2026	(r86479)
@@ -0,0 +1,131 @@
+                                                     -*- coding: utf-8 -*-
+Changes with APR-util 1.6.4
+
+  *) apr_brigade: Don't split the final LF in apr_brigade_split_line() to
+     avoid producing an empty bucket.  PR 64273
+     [Barnim Dzwillo <dzwillo strato.de>, Joe Orton]
+
+  *) apr_brigade: Metadata buckets are now ignored in
+     apr_brigade_split_line, apr_brigade_flatten and
+     apr_brigade_to_iovec, fixing possible undefined behaviour.  PR 68278
+     [Ben Kallus <benjamin.p.kallus.gr dartmouth.edu>, Joe Orton]
+
+  *) apr_crypto_openssl: Compatibility with OpenSSL 3.  [Yann Ylavic]
+
+  *) apr_crypto_openssl: use OPENSSL_init_crypto() to initialise OpenSSL
+     on versions 1.1+. [Graham Leggett]
+
+  *) apr_memcache: Fix name lookup to allow IPv6 as well as IPv4.
+     [Lubos Uhliarik <luhliari redhat.com>]
+
+  *) configure: Fix Berkeley DB detection with compilers enforcing
+     strict C99 compliance.  PR 66396.
+     [Florian Weimer <fweimer redhat.com>]
+
+Changes with APR-util 1.6.3
+
+  *) Correct a packaging issue in 1.6.2. The contents of the release were
+     correct, but the top level directory was misnamed.
+
+Changes with APR-util 1.6.2
+
+  *) SECURITY: CVE-2022-25147 (cve.mitre.org)
+     Integer Overflow or Wraparound vulnerability in apr_base64 functions 
+     of Apache Portable Runtime Utility (APR-util) allows an attacker to 
+     write beyond bounds of a buffer.
+     
+  *) Teach configure how to find and build against MariaDB 10.2. PR 61517
+     [Kris Karas <bugs-a17 moonlit-rail.com>]
+
+  *) apr_crypto_commoncrypto: Remove stray reference to -lcrypto that
+     prevented commoncrypto being enabled. [Graham Leggett]
+
+  *) Add --tag=CC to libtool invocations. PR 62640. [Michael Osipov]
+
+  *) apr_dbm_gdbm: Fix handling of error codes. This makes gdbm 1.14 work.
+     apr_dbm_gdbm will now also return error codes starting with
+     APR_OS_START_USEERR, as apr_dbm_berkleydb does, instead of always
+     returning APR_EGENERAL. [Stefan Fritsch]
+
+Changes with APR-util 1.6.1
+
+  *) Win32: Add function exports from new apr_crypto API's missing in 1.6.0.
+
+  *) Win32: Introduce XML_PARSER build-time variable to select the expat
+     library name to be linked to libaprutil-1.dll. See Makefile.win
+
+  *) Win32: Removed lingering xml/xml.dsp project forked from the expat
+     Project in the 1.9x era. Use expat's maintained build schema instead,
+     prior to building apr-util.
+
+  *) apr_crypto: Fix compatibility with LibreSSL.  PR 61596.
+     [Bernard Spil <brnrd freebsd.org>, Yann Ylavic]
+
+  *) sdbm: better database/page validation to fail cleanly when corrupted.
+     [Yann Ylavic]
+
+Changes with APR-util 1.6.0
+
+  *) The expat dependency of apr-util is no longer built with apr-util.
+     Install expat (including development headers and libraries) first
+     before building apr-util. [https://libexpat.github.io/]
+
+  *) Mark apr_dbd_freetds as unsupported, and remove it from all builds
+     [Nick Kew]
+
+  *) Update MySQL build to stop using libmysqlclient_r.
+     [Petr Sumbera <petr.sumbera oracle.com>]
+
+  *) apr_buckets: Add apr_bucket_file_set_buf_size() which allows to configure
+     the size of the buffer used to read files.  [Yann Ylavic]
+
+  *) apr_crypto: avoid excessive iteration in bcrypt hash.
+     [Hanno Böck <hanno hboeck.de>]
+
+  *) apr_siphash: Implement keyed hash function SipHash.  [Yann Ylavic]
+
+  *) apr_crypto: Add apr_crypto_key() function which supports keys
+     generated from a passphrase or a raw secret provided by the caller.
+     Deprecate apr_crypto_passphrase(). [Graham Leggett]
+
+  *) apr_crypto_nss: Ensure the SECItem returned by PK11_ParamFromIV
+     is properly freed. [Graham Leggett]
+
+  *) apr_crypto: Don't cache the driver if initialisation fails. This
+     stops the second and subsequent attempt to use the API from failing
+     claiming the library is not initialised. [Graham Leggett]
+
+  *) apr_crypto: Add a native CommonCrypto implementation for iOS and OSX
+     where OpenSSL has been deprecated. [Graham Leggett]
+
+  *) apr_xml_to_text: Add style APR_XML_X2T_PARSED to maintain a
+     consistent namespace prefix. [Jari Urpalainen
+     <jari.urpalainen nokia.com>]
+
+Changes with APR-util 1.5.x and later:
+
+  *) http://svn.apache.org/viewvc/apr/apr-util/branches/1.5.x/CHANGES?view=markup
+
+Changes with APR-util 1.4.x and later:
+
+  *) http://svn.apache.org/viewvc/apr/apr-util/branches/1.4.x/CHANGES?view=markup
+
+Changes for APR-util 1.3.x and later:
+
+  *) http://svn.apache.org/viewvc/apr/apr-util/branches/1.3.x/CHANGES?view=markup
+
+Changes for APR-util 1.2.x and later:
+
+  *) http://svn.apache.org/viewvc/apr/apr-util/branches/1.2.x/CHANGES?view=markup
+
+Changes for APR-util 1.1.x and later:
+
+  *) http://svn.apache.org/viewvc/apr/apr-util/branches/1.1.x/CHANGES?view=markup
+
+Changes for APR-util 1.0.x and later:
+
+  *) http://svn.apache.org/viewvc/apr/apr-util/branches/1.0.x/CHANGES?view=markup
+
+Changes for APR-util 0.9.x and later/earlier:
+
+  *) http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/CHANGES?view=markup

Added: dev/apr/apr-util-1.6.4-rc1-candidate-win32-src.zip
==============================================================================
Binary file. No diff available.

Added: dev/apr/apr-util-1.6.4-rc1-candidate-win32-src.zip.asc
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ dev/apr/apr-util-1.6.4-rc1-candidate-win32-src.zip.asc	Mon Aug  3 13:00:59 2026	(r86479)
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+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+=uxnm
+-----END PGP SIGNATURE-----

Added: dev/apr/apr-util-1.6.4-rc1-candidate-win32-src.zip.sha256
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ dev/apr/apr-util-1.6.4-rc1-candidate-win32-src.zip.sha256	Mon Aug  3 13:00:59 2026	(r86479)
@@ -0,0 +1 @@
+855eed853edc2dc493fce332d2bad5ca1cfecc6ab5047ea030138c57942fe8ff *apr-util-1.6.4-rc1-candidate-win32-src.zip

Added: dev/apr/apr-util-1.6.4-rc1-candidate.tar.bz2
==============================================================================
Binary file. No diff available.

Added: dev/apr/apr-util-1.6.4-rc1-candidate.tar.bz2.asc
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ dev/apr/apr-util-1.6.4-rc1-candidate.tar.bz2.asc	Mon Aug  3 13:00:59 2026	(r86479)
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+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+=CvhB
+-----END PGP SIGNATURE-----

Added: dev/apr/apr-util-1.6.4-rc1-candidate.tar.bz2.sha256
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ dev/apr/apr-util-1.6.4-rc1-candidate.tar.bz2.sha256	Mon Aug  3 13:00:59 2026	(r86479)
@@ -0,0 +1 @@
+728fbf50e5a1abbf2a7d9ec94371b79a84a05fb5b3bd3645e4ae0a8e23a91d8c *apr-util-1.6.4-rc1-candidate.tar.bz2

Added: dev/apr/apr-util-1.6.4-rc1-candidate.tar.gz
==============================================================================
Binary file. No diff available.

Added: dev/apr/apr-util-1.6.4-rc1-candidate.tar.gz.asc
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ dev/apr/apr-util-1.6.4-rc1-candidate.tar.gz.asc	Mon Aug  3 13:00:59 2026	(r86479)
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+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+=CeVB
+-----END PGP SIGNATURE-----

Added: dev/apr/apr-util-1.6.4-rc1-candidate.tar.gz.sha256
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ dev/apr/apr-util-1.6.4-rc1-candidate.tar.gz.sha256	Mon Aug  3 13:00:59 2026	(r86479)
@@ -0,0 +1 @@
+5efe6099525a07412d9ccab8a4f070d1fd1b46faa2d6f7b8d64f8ca217939c46 *apr-util-1.6.4-rc1-candidate.tar.gz