Index of /dist/apr/patches

Apache APR Project Source Code Recommended Patches

This downloads page includes only patches to the sources strongly recommended for building APR projects, generally using security .

Summary of patches

 Name                             Last modified      Size  Description
 Parent Directory                                      -   
 README.html                      03-Oct-2009 15:13  550   
 apr-0.9-CVE-2009-2412.patch      03-Oct-2009 15:13  2.0K  
 apr-1.x-CVE-2009-2412.patch      03-Oct-2009 15:13  2.0K  
 apr-1.x-PR47645.patch            03-Oct-2009 15:13  718   
 apr-util-0.9-CVE-2009-2412.patch 03-Oct-2009 15:13  2.5K  
 apr-util-1.x-CVE-2009-2412.patch 03-Oct-2009 15:13  2.5K  

Summary of Patches

CVE-2009-2412

• Apply to APR 0.9.0 - 0.9.18 and 1.0.0 - 1.3.7
• Apply to APR-util 0.9.0 - 0.9.17 and 1.0.0 - 1.3.8

Overflow flaw in apr_pool and apr_rmm APIs. Additional details forthcoming.

PR 47645

• Apply to APR 1.3.3 - 1.3.8

Fixes error handling in apr_pollset_poll() and apr_pollcb_poll() on Solaris, resolving symptoms which vary based on the application.