Debian Patches

Status for apr/1.7.0-6+deb11u2

Patch Description Author Forwarded Bugs Origin Last update
generic-64bit-atomics.patch # quick and dirty fix for FTBFS on mipsel
# There should be a proper configure check, see
# https://bz.apache.org/bugzilla/show_bug.cgi?id=63566
===================================================================
no
fix_apr-config.patch No description. <tfheen@debian.org> no
ship_find_apr.m4.patch Install a set of random build files too Tollef Fog Heen <tfheen@err.no> no
fix-apr.pc.patch No description. <tfheen@debian.org> no
hurd_path_max.patch #349418 Stefan Fritsch <sf@debian.org> no
fix_doxygen.patch Fix generation of docs for out-of-tree builds and newer doxygen versions Stefan Fritsch <sf@debian.org> no
omit_extra_libs.patch #463399 Stefan Fritsch <sf@debian.org> no
hurd_shm_flock.patch # * hurd_shm_flock.diff
# This patch disables all the methods for shared memory and file locking
# found by the configure checks, forcing the only working ones.
# This patch should stay Debian-specific, as it is not that suitable for
# upstream inclusion. (As you can guess, ideally all of those
# non-working methods should be ideally fixed in Hurd...)
Pino Toscano <pino@debian.org> no upstream
dont_override_external_buildflags # Don't force apr-using projects to use the compile flags used during
# apr's compilation.
no
libtoolize_check.patch check for libtoolize rather than libtool
libtool is now in package libtool-bin, but apr only needs libtoolize.
Helmut Grohne <helmut@subdivi.de> no 2014-09-19
debug_testpoll_failure.patch # reproducible.debian.net gave strange test error on build:
# testpoll : Line 876: apr_pollcb_poll() didn't sleep
# FAILED 1 of 23
# add some debug output
no
use_fcntl_locking.patch # use flock for apr_file_lock/_unlock()
# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752872
no
cross.patch compile gen_test_char with the build architecture compiler Helmut Grohne <helmut@subdivi.de> no
python3-hashbang.patch no
CVE-2021-35940.patch SECURITY: CVE-2021-35940 (cve.mitre.org) Restore fix for CVE-2017-12613 which was missing in 1.7.x branch, though
was addressed in 1.6.x in 1.6.3 and later via r1807976.
.
The fix was merged back to 1.7.x in r1891198.
.
Since this was a regression in 1.7.0, a new CVE name has been assigned
to track this, CVE-2021-35940.
not-needed debian upstream, https://svn.apache.org/viewvc?view=revision&revision=1891198 2021-08-20
Address-some-warnings-raised-by-MSVC-32-64.patch Address some warnings raised by MSVC-32/64. Yann Ylavic <ylavic@apache.org> no https://github.com/apache/apr/commit/66e41846004d40fd6d12811fd0acf08920a3d1cd 2019-04-03
apr_encode_base32-fix-advertised-output-len-when-cal.patch apr_encode_base32: fix advertised output *len when called with dst == NULL. Yann Ylavic <ylavic@apache.org> no https://github.com/apache/apr/commit/2b0eb50e43667ce8cebf0bb745a0eb7d493385c2 2020-11-27
apr_decode_base-64-32-16-stop-reading-before-not-inc.patch apr_decode_base{64,32,16}: stop reading before (not including) NUL byte. Yann Ylavic <ylavic@apache.org> no https://github.com/apache/apr/commit/e70d77ecc4aa9e0dccac6e7e5ba74639f71f50cf 2020-11-27
encoding-Better-check-inputs-of-apr_-encode-decode-_.patch encoding: Better check inputs of apr_{encode,decode}_* functions.
Check that the given sources can be encoded without overflowing.

Return APR_EINVAL if the given "slen" is negative, APR_NOTFOUND if "dest" is
not NULL and "src" is NULL, or APR_ENOSPC if "dest" is NULL and the source
length (based on "slen" or APR_ENCODE_STRING) is too big to encode.

* include/private/apr_encode_private.h():
Rename ENCODE_TO_ASCII() and ENCODE_TO_NATIVE() to respectively TO_ASCII()
and TO_ENCODE(), and make them return an unsigned char.

* encoding/apr_escape.c():
Use the new TO_ASCII() and TO_NATIVE().

* encoding/apr_encode.c(apr_encode_*, apr_decode_*):
Forbid negative "slen" but APR_ENCODE_STRING, and use apr_size_t arithmetics
to check for overflows when encoding.
When "dest" is NULL, "src" can be NULL too.
Better check for trailing '='s or base16's APR_ENCODE_COLON ':' separators.
Rename ENCODE_TO_ASCII and ENCODE_TO_NATIVE to their new names, and remove
casts to (unsigned char) now unnecessary.

* include/apr_encode.h():
Update dox about acceptable inputs and returned errors.

* test/testencode.c():
Tests for error conditions.










Merges r1902281, r1902282, r1902284, r1902285, r1902286 from trunk.
Yann Ylavic <ylavic@apache.org> no https://github.com/apache/apr/commit/f039abc0c1a70394f8c0595ab3bc8e9aec9da325 2022-10-18

All known versions for source package 'apr'

Links