CVS commit: [pkgsrc-2010Q2] pkgsrc/devel/apr-util

["S.P.Zeidler" <spz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   spz
Date:           Fri Oct 15 07:06:49 UTC 2010

Modified Files:
        pkgsrc/devel/apr-util [pkgsrc-2010Q2]: Makefile distinfo
        pkgsrc/devel/apr-util/patches [pkgsrc-2010Q2]: patch-aa
Removed Files:
        pkgsrc/devel/apr-util/patches [pkgsrc-2010Q2]: patch-ab

Log Message:
Pullup ticket 3243 - requested by tron
security update

Revisions pulled up:
- pkgsrc/devel/apr-util/Makefile                1.17
- pkgsrc/devel/apr-util/distinfo                1.9
- pkgsrc/devel/apr-util/patches/patch-aa        1.3

Files removed:
- pkgsrc/devel/apr-util/patches/patch-ab

-------------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   tron
   Date:           Wed Oct 13 19:21:16 UTC 2010

   Modified Files:
           pkgsrc/devel/apr-util: Makefile distinfo
           pkgsrc/devel/apr-util/patches: patch-aa
   Removed Files:
           pkgsrc/devel/apr-util/patches: patch-ab

   Log Message:
   Update "apr-util" package to version 1.3.10. Changes since 1.3.9:
   - SECURITY: CVE-2010-1623 (cve.mitre.org)
     Fix a denial of service attack against apr_brigade_split_line().
     [Stefan Fritsch]
   - SECURITY: CVE-2009-3560, CVE-2009-3720 (cve.mitre.org)
     Fix two buffer over-read flaws in the bundled copy of expat which
     could cause applications to crash while parsing specially-crafted
     XML documents.  [Joe Orton]
   - Upgrade bundled copy of expat library to 1.95.7.  [Joe Orton]
   - apr_thread_pool: Fix some potential deadlock situations.  Bug 49709.
     [Joe Mudd <Joe.Mudd sas.com>]
   - apr_thread_pool_create: Fix pool corruption caused by multithreaded
     use of the pool when multiple initial threads are created.  Bug 47843.
     [Alex Korobka <akorobka fxcm.com>]
   - apr_thread_pool_create(): Only set the output thread pool handle on
     success.  [Paul Querna]
   - DBD ODBC support: Fix memory corruption using apr_dbd_datum_get() with
     several different data types, including APR_DBD_TYPE_TIME.  Bug 49645.
     [<kappa psilambda.com>]
   - Add support for Berkeley DB 4.8 and 5.0.  Bug 49866, Bug 49179.
     [Bernhard Rosenkraenzer <br blankpage.ch>,
      Arfrever Frehtes Taifersar Arahesis <arfrever.fta gmail.com>]
   - Make bundled expat compatible with libtool 2.x.  Bug 49053.
     [Rainer Jung]
   - Prefer libtool 1.x when searching for libtool in
     bundled expat release process. [Rainer Jung, Jim Jagielski]
   - Improve platform detection for bundled expat by updating
     config.guess and config.sub. [Rainer Jung]

   Patch supplied by Mihai Chelaru, approved by Alistair Crooks.

   To generate a diff of this commit:
   cvs rdiff -u -r1.16 -r1.17 pkgsrc/devel/apr-util/Makefile
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/devel/apr-util/distinfo
   cvs rdiff -u -r1.2 -r1.3 pkgsrc/devel/apr-util/patches/patch-aa
   cvs rdiff -u -r1.2 -r0 pkgsrc/devel/apr-util/patches/patch-ab


To generate a diff of this commit:
cvs rdiff -u -r1.15 -r1.15.2.1 pkgsrc/devel/apr-util/Makefile
cvs rdiff -u -r1.8 -r1.8.8.1 pkgsrc/devel/apr-util/distinfo
cvs rdiff -u -r1.2 -r1.2.14.1 pkgsrc/devel/apr-util/patches/patch-aa
cvs rdiff -u -r1.2 -r0 pkgsrc/devel/apr-util/patches/patch-ab

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.