Re: [ANNOUNCEMENT] Apache Portable Runtime 1.7.6 Released

Le 16/05/2025 à 15:56, minfrin a écrit :
>     Apache Portable Runtime APR 1.7.6 Released
> 
>     The Apache Software Foundation and the Apache Portable Runtime
>     Project are proud to announce the General Availability of version
>     1.7.6 of the Apache Portable Runtime library (APR).
> 
>     For detailed changes in this maintenance release, see;
> 
>       https://www.apache.org/dist/apr/CHANGES-APR-1.7
>       https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6
>       https://www.apache.org/dist/apr/CHANGES-APR-ICONV-1.2

Hi,

for some reasons, the CHANGES file for APR 1.7 
(https://downloads.apache.org/apr/CHANGES-APR-1.7) available from 
https://apr.apache.org/ does not have the change entries for 1.7.6.

Also, (but i think it is related), CVE-2023-49582 is not listed for 1.7.5.

Theses change entries are only available in CHANGES in the svn repo.

I've never looked at the release process for APR, so I don't know how to 
fix it myself, so I'm just reporting the issue.

CJ