Change logs for apr-util source package in Sid

  • apr-util (1.6.3-2) unstable; urgency=medium
    
      * Incorporate NMU. Thanks to all the 64-bit time_t transition
        people.
      * Bump libapr1-dev Build-Dep to 1.7.2-3.2. Hopefully
        closes: #1066821
      * Add more 64-bit time_t patches from Simon McVittie. Thanks.
        Closes: #1066821
    
     -- Stefan Fritsch <email address hidden>  Mon, 18 Mar 2024 20:21:56 +0100
  • apr-util (1.6.3-1.1) unstable; urgency=medium
    
      * Non-maintainer upload.
      * Rename libraries for 64-bit time_t transition.  Closes: #1061893
    
     -- Steve Langasek <email address hidden>  Wed, 28 Feb 2024 01:16:25 +0000
  • apr-util (1.6.3-1) unstable; urgency=medium
    
      [ Stefan Fritsch ]
      * Incorporate NMUs. Closes: #1028435
      * New upstream version:
        - CVE-2022-25147: Fix Integer Overflow or Wraparound vulnerability
          in apr_base64
      * Bump libapr1-dev Build-Dep to 1.7.2-1
    
      [ Debian Janitor ]
      * Use secure URI in Homepage field.
      * Set debhelper-compat version in Build-Depends.
      * Drop unnecessary dh arguments: --parallel
      * Rely on pre-initialized dpkg-architecture variables.
      * Remove constraints unnecessary since buster (oldstable):
        + libaprutil1: Drop conflict with removed package libapr1 (<< 1.4.8-2~) in
          Breaks.
    
      [ Jelmer Vernooij ]
      * Set Repository and Repository-Browse fields in
        debian/upstream/metadata.
      * Drop transition for old debug package migration.
      * Update standards version to 4.6.1, no changes needed.
    
    
     -- Stefan Fritsch <email address hidden>  Fri, 03 Feb 2023 21:15:18 +0100
  • apr-util (1.6.1-5.2) unstable; urgency=medium
    
      * Non-maintainer upload by the Reproducible Builds team.
      * debian/rules: Remove the build path from apt-1-config, using exactly the
        patch from Vagrant Cascadian in #1006865.
    
     -- Holger Levsen <email address hidden>  Thu, 12 Jan 2023 20:28:37 +0100
  • apr-util (1.6.1-5.1) unstable; urgency=medium
    
      * Non-maintainer upload by the Reproducible Builds team.
      * debian/rules: Remove the build path from apt-1-config, based on a patch by
        Vagrant Cascadian. Closes: #1006865.
    
     -- Holger Levsen <email address hidden>  Thu, 29 Dec 2022 19:37:54 +0100
  • apr-util (1.6.1-5) unstable; urgency=medium
    
      [ Jelmer Vernooij ]
      * Remove debug package libaprutil1-dbg.
      * Trim trailing whitespace.
    
      [ Xavier Guimard ]
      * Update signing-key.asc
      * Declare compliance with policy 4.2.1
      * Remove dependency version to libapr1-dev
    
      [ Stefan Fritsch ]
      * Build-depend on apr >> 1.7.0-1, which switched to python3.
        Remove the python build-dep in apr-util as libapr1-dev now has a
        fixed dependency on python3. Closes: #936129, #969064
    
     -- Stefan Fritsch <email address hidden>  Sat, 29 Aug 2020 11:51:07 +0200
  • apr-util (1.6.1-4) unstable; urgency=medium
    
      * Fix libaprutil1-dbd-mysql with mariadb 10.3. Closes: #926400
    
     -- Stefan Fritsch <email address hidden>  Sun, 21 Apr 2019 09:39:02 +0200
  • apr-util (1.6.1-3) unstable; urgency=medium
    
      [ Stefan Fritsch ]
      * Migrate from alioth to salsa
    
      [ Matthias Klose ]
      * Drop build dependency on libpcre3-dev. Closes: #909077. LP: #1792544.
    
     -- Stefan Fritsch <email address hidden>  Tue, 18 Sep 2018 21:14:24 +0200
  • apr-util (1.6.1-2) unstable; urgency=medium
    
      * Avoid empty build target, fixes FTBFS. Thanks to Niels Thykier for the
        patch. Closes: #890108
      * Fix handling of gdbm_errno in gdbm driver. Closes: #889170
      * Bump debhelper compat level to 11 and drop deprecated autotools-dev
        sequence. Thanks to Niels Thykier for the patch.
      * Bump Standards-Version (no changes)
      * Fix mysql/mariadb header detection, broken since 1.5.3-3.
      * Include NOTICE file in packages, as required by license.
    
     -- Stefan Fritsch <email address hidden>  Sun, 25 Feb 2018 12:40:36 +0100
  • apr-util (1.6.1-1) unstable; urgency=medium
    
      * New upstream release
        - Fixes CVE-2017-12618: Out-of-bounds access in corrupted SDBM database.
          Closes: #879996
    
     -- Stefan Fritsch <email address hidden>  Mon, 06 Nov 2017 19:48:34 +0100
  • apr-util (1.6.0-2) unstable; urgency=medium
    
      * Switch off FULL_PATH_NAMES in doxygen to make builds reproducible.
      * Bump Standards-Version:
        - remove "Priority: extra" in control
    
     -- Stefan Fritsch <email address hidden>  Fri, 11 Aug 2017 17:49:25 +0200
  • apr-util (1.6.0-1) unstable; urgency=medium
    
      * New upstream release
      * Remove Peter Samuelson from uploaders. Thanks for your work in the past.
        Closes: #852221
    
     -- Stefan Fritsch <email address hidden>  Fri, 04 Aug 2017 21:37:03 +0200
  • apr-util (1.5.4-3) unstable; urgency=medium
    
      [ Helmut Grohne ]
      * Fix unsatisfiable cross Build-Depends: (Closes: #840892)
        + Drop binutils from Build-Depends as it is build-essential.
        + Annotate Build-Depends: python with :any.
    
      [ Stefan Fritsch ]
      * Enable support for gdbm. Closes: #843206
      * Switch build-depends to default-libmysqlclient-dev. Closes: #845823
    
     -- Stefan Fritsch <email address hidden>  Fri, 09 Dec 2016 18:19:55 +0100
  • apr-util (1.5.4-2) unstable; urgency=medium
    
      [ Jean-Michel Vourgère ]
      * d/watch: Check gpg signature of upstream source.
      * Update Vcs-Browser: address.
    
      [ Stefan Fritsch ]
      * Bump standards version. No changes needed.
      * Backport support for openssl 1.1 from upstream 1.5.x branch.
        Closes: #828237
    
     -- Stefan Fritsch <email address hidden>  Thu, 14 Jul 2016 12:00:56 +0200
  • apr-util (1.5.4-1) unstable; urgency=medium
    
    
      * New upstream release
      * Remove dependencies on libpcre3-dev, libsqlite3-dev, libpq-dev,
        and libmysqlclient-dev in libaprutil1-dev. They are no longer
        necessary. Closes: #757140
      * Bump standards version. No changes needed.
    
     -- Stefan Fritsch <email address hidden>  Sat, 04 Oct 2014 14:19:46 +0200
  • apr-util (1.5.3-3) unstable; urgency=medium
    
    
      * Allow building with libmariadbclient-dev instead of
        libmysqlclient-dev. Closes: #759158
      * Update Vcs-Git URL in control file.
    
     -- Stefan Fritsch <email address hidden>  Mon, 25 Aug 2014 22:10:38 +0200
  • apr-util (1.5.3-2) unstable; urgency=medium
    
    
      * Fix FTBFS with make 4.0. Closes: #748369
    
     -- Stefan Fritsch <email address hidden>  Thu, 29 May 2014 16:52:08 +0200
  • apr-util (1.5.3-1) unstable; urgency=low
    
    
      * New upstream version.
      * When querying the berkley db version, strip the epoch from the
        version number.
    
     -- Stefan Fritsch <email address hidden>  Sun, 24 Nov 2013 14:21:14 +0100
  • apr-util (1.5.2-2) unstable; urgency=low
    
    
      * Remove dbd-freetds driver because it has security issues.
      * Switch build system to dh.
      * Bump Standards-Version (no additional changes).
      * Support multi-arch.
      * Adjust dependencies to a multi-arch enabled apr.
      * Speed up build by not searching for lots of berkley db versions that
        are not installed. Closes: #717327
    
     -- Stefan Fritsch <email address hidden>  Wed, 06 Nov 2013 22:27:45 +0100
  • apr-util (1.5.2-1) unstable; urgency=low
    
    
      * New upstream release.
      * Ship find_apu.m4 in libaprutil1-dev. Closes: #699327
    
     -- Stefan Fritsch <email address hidden>  Sun, 05 May 2013 15:43:34 +0200
  • apr-util (1.4.1-3) unstable; urgency=low
    
    
      * Fix apr_password_validate() to work with sha512-crypt hashes.
        Closes: #684268
    
     -- Stefan Fritsch <email address hidden>  Wed, 15 Aug 2012 20:10:55 +0200
  • apr-util (1.4.1-2) unstable; urgency=low
    
    
      * Remove obsolete version on binutils dependency. Closes: #666260
      * Re-enable test suite on hurd. Closes: #657043
      * Switch VCS to git
      * Switch to packaging format "3.0 quilt", remove dpatch. Thanks to Jari
        Aalto for the patch. Closes: #664307
      * Update to Standards-Version to 3.9.3 (no changes)
      * Bump to debhelper 9.
      * Remove obsolete workaround for #651147, ldap detection is fixed in 1.4.x
      * Fix lintian warnings
        - use dh_prep
        - omit driver libraries from symbol files
        - add build-arch and build-indep targets
    
     -- Stefan Fritsch <email address hidden>  Sun, 20 May 2012 22:14:38 +0200
  • apr-util (1.4.1-1) unstable; urgency=low
    
    
      * New upstream release
      * Build new apr_crypto API (using openssl).
      * Stop repacking the source tarball to remove the MD4/MD5 implementations
        derived from RSA's code. RSA has released a statement that revised the
        conditions of use for this code. Debian uses the code according to the
        conditions from this statement, which is now included in the copyright
        file of the Debian package.
    
     -- Stefan Fritsch <email address hidden>  Sun, 08 Jan 2012 20:44:17 +0100
  • apr-util (1.3.12+dfsg-3) unstable; urgency=low
    
    
      * Add workaround for ldap detection problem, to fix FTBFS with gcc 4.6.
        Closes: #651147
      * Remove Tollef Fog Heen and Ryan Niebur from uploaders. Thanks for your
        work in the past.
    
     -- Stefan Fritsch <email address hidden>  Wed, 07 Dec 2011 20:25:16 +0100
  • apr-util (1.3.12+dfsg-2) unstable; urgency=low
      * Fix unsafe pool usage in apr_thread_pool. This hopefully fixes the    occasional testreslist failures. -- Stefan Fritsch <email address hidden>  Sun, 22 May 2011 20:37:08 +0200
  • apr-util (1.3.12+dfsg-1) unstable; urgency=low
      * New upstream version  * Make apu-config not output dbm libs by default. Closes: #622081  * Set DEB_GCC_NO_O3=1 for the benefit of ppc64 on Ubuntu. -- Stefan Fritsch <email address hidden>  Sun, 22 May 2011 01:27:59 +0200
  • apr-util (1.3.10+dfsg-2) unstable; urgency=low
      * Remove libdb4.8-dev dependency in libaprutil1-dev. This allows packages    build-depending on apr-util1 to use a different version of db than    apr-util.  * With the libdb build-dependency decoupled from subversion, we can now    build-depend on libdb-dev instead of libdb4.8-dev. Users of APU_WANT_DB    in apu_want.h would have to depend on libdb-dev explicitly, but there    are none outside of apr-util itself. Closes: #621366  * Add configure support for libdb 5.1.  * Bump standards version to 3.9.2 (no changes)  * Fix some lintian warnings about the short descriptions. -- Stefan Fritsch <email address hidden>  Fri, 08 Apr 2011 19:19:23 +0200
  • apr-util (1.3.10+dfsg-1) unstable; urgency=low
      * New upstream release.  * Add ${misc:Depends} to Depends.  * Remove some old Conflicts and Breaks.  * Bump standards version to 3.9.1:    - empty dependency_libs section in libaprutil-1.la -- Stefan Fritsch <email address hidden>  Tue, 08 Feb 2011 22:53:01 +0100
  • apr-util (1.3.9+dfsg-5) unstable; urgency=low
    
    
      * Backports from 1.3.10:
        - apr_thread_pool: Fix some potential deadlock situations.  PR 49709.
        - apr_thread_pool_create: Fix pool corruption caused by multithreaded
          use of the pool when multiple initial threads are created.  PR 47843.
        - apr_thread_pool_create: Only set the output variable on success.
    
     -- Stefan Fritsch <email address hidden>  Fri, 01 Oct 2010 22:05:54 +0200
  • apr-util (1.3.9+dfsg-4) unstable; urgency=high
    
    
      * CVE-2010-1623: Fix denial of service vulnerability through memory
        consumption in apr_brigade_split_line()
    
     -- Stefan Fritsch <email address hidden>  Fri, 01 Oct 2010 18:19:38 +0200
  • apr-util (1.3.9+dfsg-3) unstable; urgency=low
    
    
      * Update to db4.8 (closes: #550443)
      * Bump standards-version:
        - Use DEB_*_ARCH_* where applicable
    
     -- Stefan Fritsch <email address hidden>  Sun, 01 Nov 2009 10:40:53 +0100
  • apr-util (1.3.9+dfsg-2) unstable; urgency=low
    
    
      * Fix FTBFS (closes: #545718). The FTBFS didn't happen with dash as /bin/sh
        due to dash bug #514863.
      * Ship the html documentation in the -dev package. Thanks to Joel Smith for
        the patch (closes: #543554).
      * Make libaprutil1-dev depend on libmysqlclient-dev instead of
        libmysqlclient15-dev.
    
     -- Stefan Fritsch <email address hidden>  Sat, 12 Sep 2009 15:04:55 +0200
  • apr-util (1.3.9+dfsg-1) unstable; urgency=high
    
    
      [ Stefan Fritsch ]
      * Enable -fstack-protector for arm/armel. A workaround has been added to
        gcc.
      * Remove obsolete libmysqlclient15off dependency. Update build-dep to
        libmysqlclient-dev.
    
      [ Peter Samuelson ]
      * New upstream security release.
        - Fix CVE-2009-2412, overflow in RMM allocations due to alignment.
      * Add myself to Uploaders.
    
     -- Peter Samuelson <email address hidden>  Thu, 06 Aug 2009 13:21:48 -0500
  • apr-util (1.3.8+dfsg-1) unstable; urgency=low
    
    
      * New upstream version.
      * Add two CVE ids to 1.3.7+dfsg-1 changelog entry.
      * Bump standards version (no changes).
      * Make libaprutil1-dbd-sqlite3 the default dbd driver, to reduce the size
        of dependencies pulled in by apache2.2-bin by default (closes: #536466)
    
     -- Stefan Fritsch <email address hidden>  Sat, 25 Jul 2009 20:08:37 +0200
  • apr-util (1.3.7+dfsg-1) unstable; urgency=high
    
    
      * New upstream version:
        - CVE-2009-0023: Fix underflow in apr_strmatch_precompile() which causes
          remotely exploitable DoS vulnerabilities in mod_dav_svn and libapreq2.
        - Fix DoS vulnerability (memory consumption) in handling of internal xml
          entities.
      * Disable test suite on hurd for now (closes: #530287).
      * Override lintian warning about soname.
    
     -- Stefan Fritsch <email address hidden>  Thu, 04 Jun 2009 20:53:47 +0200
  • apr-util (1.3.4+dfsg-2) unstable; urgency=low
    
    
      [ Ryan Niebur ]
      * move the versioned libmysqlclient15off dependency from libaprutil1
        to libaprutil1-dbd-mysql (Closes: #481976)
    
      [ Stefan Fritsch ]
      * Add workaround to fix FTBFS when doing parallel build (closes: #527812)
      * Add "Breaks: apache2.2-common << 2.2.11-3", to make upgrades from lenny
        to squeeze less noisy.
    
     -- Stefan Fritsch <email address hidden>  Sun, 10 May 2009 19:18:48 +0200
  • apr-util (1.3.4+dfsg-1) unstable; urgency=low
    
    
      [ Ryan Niebur ]
      * New upstream version
      * add me to Uploaders
      * add repack.sh
      * update to libdb4.7-dev (Closes: #519818)
      * Debian policy 3.8.1
      * remove *.dirs, they're not needed
      * lintian overrides for the symbols file depending on different
        packages, we have those "unusual circumstances" :)
        - debhelper 6 (needed for dh_lintian)
      * remove build/apr_common.m4 in the clean target, it gets modified
        during build and is automatically generated
      * switch the libaprutil1-dbg package to the debug section
      * don't output ldap libs by default from apu-config
      * upload to unstable this time
    
      [ Stefan Fritsch ]
      * Fix description for libaprutil1-dbg (closes: #508145).
      * Recognize DEB_BUILD_OPTIONS=nocheck in addition to notest (closes: #515352).
      * Make dpkg-shlibdeps automatically generate the needed dependencies for
        programs that use apr_ldap_init() or apr_dbd_init().
        For dbd, we will genreate an ORed dependency on all libaprutil1-dbd-*
        packages, using libaprutil1-dbd-mysql as default.
    
     -- Ryan Niebur <email address hidden>  Thu, 26 Mar 2009 22:25:48 -0700
  • apr-util (1.2.12+dfsg-8) unstable; urgency=low
    
    
      [ Ryan Niebur ]
      * Upgraded to policy version 3.8.0
        - Reference the copyright in common-licenses instead of including it
        - support for noopt in DEB_BUILD_OPTIONS
        - Added a README.source
        - added support for parallel in DEB_BUILD_OPTIONS
      * Dropped the XS- prefix for the Vcs fields in debian/control
      * Made the watch file notice 1.3.x
    
      [ Stefan Fritsch ]
      * Bump libmysqlclient dependency to 5.0.51a since 5.0.32 from etch has some
        bugs that can make apache2 hang (closes: #490859).
      * Add 'Provides' for the modules that are still included in libaprutil1, but
        will be moved to separate packages with apr-util 1.3.x. This will make
        back-porting packages from lenny+1 to lenny easier.
    
     -- Stefan Fritsch <email address hidden>  Wed, 20 Aug 2008 22:29:26 +0200