apr-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "David Reid" <da...@jetnet.co.uk>
Subject Re: Forthcoming releases, w.r.t. APR
Date Tue, 22 Jun 2004 19:56:47 GMT
> As some httpd folks know, the APR project will soon release 1.0.
>
> We've had reports of unbounded strcpy()s in APR, and I am reviewing
> all strcpy()'s within APR[-util/-iconv] for similar issue.
>
> What I would *like* to see, over the period of one day in the near
> future, are the security patches to APR, and httpd, all committed
> and prepared for release.
>
> I'd prefer, since 0.9.5 was sorta-not quite-maybe never released, to
> see us tag 0.9.6 and use this version as the included APR release
> for httpd-2.0.50.  If this can be coordinated, it would be terrific if we
> also release APR 1.0 on this same day or soon after, with all of the
> same security fixes.
>
> It would be nice, essentially, to move forward with apr-0 using 0.9.6
> and start providing apr-1 all in the span of a month or less.
>
> Your thoughts?

Targetted adte for 1.0 presently is 30th June :-) That hasn't changed.

If there are security patches I'd like to see them committed to 1.0 asap to
allow us to test prior to release.

8 days to go!

david


Mime
View raw message